SANS Institute

🚨Core #NetWars V12 is here! Our most comprehensive and #AI forward #CyberRange yet introduces new challenges across AI security, malware analysis, incident response, IoT, ICS, & more. Learn what's new: go.sans.org/dxST1J

The [un]prompted II CFP just opened. October 27-29, San Francisco. It's the AI security practitioner conference from the volunteers behind Prompt||GTFO, fwd:cloudsec, ACoD, and ISOI. March had engineers from Google, Meta, OpenAI, Anthropic, and Stripe showing what they built and what failed. I gave a talk on giving Claude Code root on SIFT. (It worked, mostly.) The review board is asking for failures, data instead of vibes, and demos instead of slides. Banned: vendor pitches, talks that could have been an email, and Sun Tzu quotes "unless they're brand new 0day ones." Submit: sessionize.com/unprompted-cfp… Register: luma.com/pywdcwal (in person) or luma.com/knostic-pi28 (online) Write up the thing that broke. This crowd wants the failure modes left in. Honored to serve as part of CFP committee for the Operate track alongside @mroesch, @argvee, David Weston, @RonGula, @JohnHultquist, @anton_chuvakin, Stefano Zanero, @DanielMiessle, @clintgibler, Saad Ullah, Heng Yin, John Yeoh, Pablo Breuer, Ph.D., John "Four" Flynn, Jamie Levy, Emmanuelle Tassa, chaired by Michael Colao and @SilasCutler. @gadievron @sounilyu

Headcount isn't readiness. ASAP measures real cyber skills by job role, hands-on, in about 2 hours. More on ASAP: go.sans.org/XTQoEC

Nothing tests national cyber defences like Locked Shields. 4,000 experts, 41 nations, 69 physical ICS assets, one live grid under attack. Locked Shields 2026. Read the full case study: go.sans.org/hSrJv7

Brian Correia on the importance of soft skills for cybersecurity hiring on the #BytesBitsandBrilliancePodcast podcasts.apple.com/us/podcast/the…

.@edskoudis: "AI for us is like the Enigma machine was 80 years ago." Most users have no idea how it actually works. @CISecurity cisecurity.org/insights/podca…

Most IR plans fail the moment legal, comms, or the CFO enters the room. SANS Cyber Crisis Exercises finds those gaps before a real incident does. sans.org/u/1qaC #IncidentResponse #SANSCyberCrisisExercises

Be among the first to experience Core #NetWars Version 12 at #SANSFIRE. If you're enrolled in a 4-6 day course, your tournament registration is included. Not attending a course? You can still register to play! 👉 Learn more: go.sans.org/vg8Scz

NewsNation segment: newsnationnow.com/video/new-nanc… Brian Entin Investigates: podcasts.apple.com/us/podcast/pro…

Sean O'Connor (@vHUMINT) broke down the crypto element of the Nancy Guthrie case on @NewsNation and @BrianEntin Investigates this week.

Four AI security roles have 100+ active listings right now. AI/ML Security Engineer: ~2,400. AI Red Team Specialist: ~700. AI Governance, Risk & Compliance Lead: 299+. AI Threat Intel Analyst: ~2,700. Job board data, March 2026. Full breakdown including salary ranges and companies hiring: go.sans.org/rwHlx6 #AISecurity

SANS' Brian Correia on CISOs hiring for 80% technical fit, not a perfect match. More via @InformaTTGT: techtarget.com/searchsecurity…

Bayer's Global CISO scrapped job titles in favor of a skills-based model across 90,000 employees. Dr. Kevin Jones on what changed and why it matters for cybersecurity teams specifically. Read the full case study: go.sans.org/QsN8JV

#AI agents authenticate, execute workflows, and make decisions across cloud infra at machine speed. When they go sideways, it looks like an insider threat. Gee Rittenhouse (@AWS) and Eric Johnson on building response that keeps up. go.sans.org/0DFN7R #CloudSecurity

Core #NetWars v12 is coming to #SANSFIRE! Join us Jul 16-17 to experience the most #AI forward #CyberRange. Taking a 4-6 day course? Your registration is included! Not taking a course? You can still register. Learn more: go.sans.org/vg8Scz

Excited to share that @SANSInstitute and @OWASP AI Exchange have aligned two control sets into one shared structure, mapped to the same taxonomy behind ISO/IEC, CEN/CENELEC. The industry's answer to "too many AI security frameworks" has mostly been to write more of them. (I have contributed to that pile, so I am not throwing stones.) Defenders do not need another AI security framework. They need reduced ambiguity, common language, and to know that the technical creators and operational defenders writing controls are on the same page on recommended guidelines. SANS added controls for limiting model behavior and managing AI supply chain risk. The AI Exchange wove governance through its technical control set. Together, the shared control set now covers model behavior, supply chain risk, and governance side by side. This effort is part MOSAIC standards, Multi-Organization Secure AI Coordination coalition. Founding forum with @robvanderveer held at at the SANS AI Cybersecurity Summit with charter members NIST, CIS, BIML, CSA, CoSAI, the OWASP GenAI Security Project, the OWASP AI Exchange, and SANS. The reason MOSAIC exists: too many AI security standards, too little shared language between them. I have sat in enough standards rooms to tell you that two organizations actually conceding ground to each other almost never happens. Really proud of this work! mosaicstandards.org

Agentic AI and Non-Human Identity: where Cochran says most organizations have a real blind spot, and where most frameworks go quiet. The SANS AI Security Maturity Model™ has original guidance on both, including the Principle of Least Agency. Download: go.sans.org/PJjMWh #AIGovernance #AISecurity

Join Carahsoft and @SANSInstitute on July 22 for the virtual SANS Government Forum 2026. Hear industry experts discuss today’s top Government cybersecurity topics, including #AI, #ZeroTrust, critical infrastructure security and cyber resilience: carah.io/SANS2026Gov

One of our long-standing partners, @SANSInstitute, is hosting its Cloud Security Exchange Summit in San Francisco on August 17-18, with AWS, Google Cloud, Microsoft, and Anthropic leaders all on stage. Use code Cloud_Promo50 for $50 admission. spr.ly/6014BEBa5Y

Don't miss these upcoming SANS webcasts: 1️⃣ Learn strategic shifts in response to evolving attacker capabilities. Register: go.sans.org/Uumd2R 2️⃣ Join this conversation about the state of security in financial services. Register: go.sans.org/rEFrTc 3️⃣ Explore the operational realities of managing AI-driven environments. Register: go.sans.org/SgVpFE 4️⃣ Learn how organizations can reduce connectivity-related tickets, streamline security policy changes. Register: go.sans.org/ave1Zy