Name: 2025 Cybersecurity Trends - idk, AI I guess
Start: 2025-08-22T15:28:00Z
End: 2025-08-22T15:28:42.000Z
Location: BrightTALK
Rating: 5

In today’s digital world, securing your organization’s most valuable assets is essential. At NetSPI, we go beyond data protection—we safeguard the trust you’ve built with your customers and team. Leveraging AI-led solutions and human expertise, our proactive approach helps you stay ahead of evolving cyber threats, empowering your business to innovate with confidence.

In this livestream, we explore the challenges of ransomware readiness and how AI can be your knight in shining armor. NetSPI's VP of Research Scott Sutherland, takes us through a unique three-phased approach to combat ransomware: 

Phase 1: Breach and Attack Simulation 
Phase 2: IR Tabletop 
Phase 3: Custom Runbooks 
 
Are you ready to equip yourself with the knowledge and tools to combat one of our most significant cybersecurity threats?

The Adversary is Using Artificial Intelligence. Why Aren't You?

In collaboration with our newest vendor NetSPI, we were delighted to bring an informative virtual workshop on the topic ‘’Building a Proactive Security Playbook for Lasting Cyber Resilience’.’ 

NetSPI and Sam Kirkman, Director of Services, EMEA at NetSPI gave an in-depth exploration of proactive security. While many security programmes remain reactive, responding to events, alerts, and emerging vulnerabilities as they arise, this approach often leads to burnout, overwhelm, and noise. In today’s landscape, it’s essential to assess and enhance your security posture proactively, before any incidents occur. Throughout this session, we’ll explore pivotal questions:

- What assets do I possess, and where are my vulnerabilities?
- How can I establish continuous monitoring of my assets and effectively prioritize remediation efforts?
- Is it possible to validate the effectiveness of my security controls?

Concluding our journey, we’ll showcase real-world examples of successful proactive security solutions, equipping you with actionable insights to advance your path toward proactive security.

Whether you’re securing cloud infrastructure, protecting sensitive data, or mitigating evolving threats, this session will provide essential knowledge to enhance your cybersecurity posture and ensure long-term business resilience.

Building a Proactive Security Playbook for Lasting Cyber Resilience

Lost in a labyrinth of cybersecurity acronyms? You’re not alone. Organizations have a wealth of tools to manage cyber threats. But with names like CAASM, EASM, and DRPS, plus their overlapping or complementary capabilities, it can be a lot of work to understand how they differ, and which technologies are right for you.

EASM & CAASM - The Dream Team

With new regulations requiring mainframe testing, the question isn’t if you should assess these systems—it’s how you plan to protect them. Mainframes are no longer invisible. They’re targets. There is an increased scrutiny on mainframe cyber hygiene – market pressures are emerging for mainframe penetration testing, especially at the application level. Compliance and regulations are calling out mainframe in a way that we haven’t seen before, and this is bringing mainframe testing to mainstream conversations on a global scale.  

Are your application and infrastructure testing practices ready for this renewed focus on mainframe security?

In this session, NetSPI Mainframe Practice Director Phil Young is joined by BMC Worldwide Mainframe Security Director Ken Chism to discuss: 

- The growing regulatory pressures on critical systems 
- Demo exactly what a threat actor could do to a mainframe 
- Their stories of real-world attacks they’ve both seen in the industry  
- Their top questions to ask yourself about the state of your mainframe security posture 

Watch this session now to enhance your mainframe security knowledge and take the next steps to secure your critical systems.

Mainframe in the Spotlight - Regulatory Pressure & Real World Attacks

In this live webinar, NetSPI Principal AI Researcher Kurtis Shelton and Defy Security Solutions Architect John Tarn will break down how modern security teams are approaching LLM security – without sacrificing too much functionality.

You’ll hear expert insights from one of the minds behind NetSPI’s Open LLM Security Benchmark, explore real-world trade-offs between technical, regulatory, and compliance-based approaches, and walk away with a tactical framework for benchmarking LLMs in your own company.

Whether you’re implementing GenAI models, building your own internally, or guiding product teams, this session will help you ask the right questions and better secure your business.

Register now to learn:

Common vulnerabilities in today’s LLMs (and how they’re being exploited)
What “usable” vs “secure” actually means in practice
How to build a repeatable framework for LLM benchmarking
Our top three pieces of advice on benchmarking large language models

The AI Balancing Act - Benchmarking LLMs for Usability vs Security

Ready to piece together your security strategy with both automation and human insight? How do we leverage the efficiency and scaling advantages of automated tools like EASM and improve the efficiency and effectiveness of human-driven services like ExPens?

Watch this session with NetSPI’s Senior Security Researcher Isaac Clayton and NetSPI EASM Product Marketing Manager Jake Kramber on Strategic Attack Surface Management: Piecing Together the Puzzle where these two tackled the integration of pentesting, red teaming, and EASM into a unified (and manageable) proactive security strategy.

Our team discussed how to navigate the relationship between an ExPen and EASM effectively for your team, touching on topics like: 

- Automation: what should and can be automated? What are the strengths of automation? 
- Human-driven services: why & how do human-driven services like ExPens improve the automation of EASM? 
- Leveraging this hybrid security strategy: improve the strengths of both approaches and mitigate the deficiencies of each with our tips on creating a proactive security program  

Make yourself a harder target for threat actors – watch this session now to rethink your approach & build a more robust & resilient security strategy.

Strategic Attack Surface Management - Piecing Together the Puzzle

Mainframe applications should be tested, and hidden hazards can occur when navigating this on your own. Watch this on-demand session with our experts as they discuss what truly comprehensive mainframe testing looks like – and help you avoid any hidden hazards that might trip you up.

During this session on mainframe penetration testing and CICS application testing, NetSPI Mainframe Practice Director Philip Young and NetSPI Security Consultant Michelle Eggers took an informative dive into the intricate layers of CICS regions and applications, emphasizing the importance of comprehensive testing beyond individual risk assessments.

Discover how testing both the region and application layers provides a holistic view of potential vulnerabilities, bridging the gaps often overlooked when different teams manage separate layers.

Our panelists shed light on: 

- Common misconfigurations in CICS regions 
- How CICS vulnerabilities can be exploited to compromise an entire LPAR server 
- The latest advancements in testing CICS and IMS applications 
- Emerging trends in the field and what to look out for from the experts who are experiencing the same challenges you face 

Don’t miss this chance to enhance your mainframe security knowledge – watch the session now!

Hack Responsibly: The Hidden Hazards of CICS Application Testing

Security validation tools are gaining traction as organizations increasingly look to test their security controls against real-world threat vectors. 

According to Gartner, through 2026, more than 40% of organizations, including two-thirds of midsize enterprises, will rely on consolidated platforms to run cybersecurity validation assessments. Breach and attack simulation tools are being used for this purpose.  

See how NetSPI BAS helps customers consolidate their cybersecurity validation assessments. During this webinar we’ll cover:

- How to build custom plays that can be used to create unique tests specific to your environment. 
- Addressing time and resource constraints and setting your SOC team up for success 
- Confirming security readiness and security posture 

Watch the webinar and learn more about NetSPI’s proactive security solutions.

Breach and Attack Custom Plays for Your SOC

Traditional vulnerability management strategies struggle to keep pace with fast-moving threats and new threat actor tactics. Today’s threat landscape demands a shift from reactive, ad-hoc patching to a proactive, structured approach to risk reduction. Continuous Threat Exposure Management (CTEM) offers the framework needed to focus your resources on business-critical vulnerabilities. But let’s be clear: CTEM isn’t a tool or a quick fix – it’s a framework that enables security teams to focus on what truly matters. By continuously identifying, prioritizing, and mitigating risk, organizations can stop wasting resources on low-impact vulnerabilities and start addressing real threats that matter to your environment.

Join NetSPI CISO Joe Evangelisto and NetSPI Field CISO Nabil Hannan for a live, no-nonsense discussion on how (and why) to implement the CTEM framework.
What you’ll learn:

Mythbusting – what even is CTEM and how does it help security leaders move beyond traditional vulnerability management
Resource Optimization – how implementing the CTEM framework to efficiently scope, discover, and validate real risks can reduce security team overwhelm without stretching them too thin
Communicating ROI – positioning security as a business driver rather than a cost center

Mastering CTEM: How CISOs Can Take Control of Continuous Threat Exposure Management

As cyber leaders & practitioners, there can sometimes be pushback from business leaders who believe that security is a roadblock that slows down the process of meeting business objectives. During this webinar with NetSPI & Trimble, we’re debunking that myth, and our panelists dug in to this topic in order to understand the unique roles and approaches Business Information Security Officers (BISOs) and Chief Information Security Officers (CISOs) take when it comes to aligning security initiatives with business objectives.  

Watch this on-demand webinar with NetSPI CISO Joe Evangelisto and Trimble BISO Conan Sandberg as they delve into the alignment of business and security objectives, offering you insights you can use to level up your approach to cybersecurity and benefit your business.  

 • Roles & collaborations: how do BISOs and CISOs address security challenges similarly or differently? 
 • Securing business buy-in: how do each of them navigate the complexities of budget, influence, and cooperation? 
 • Justifying that security spend: how does a BISO vs a CISO approach demonstrating the value of security investments?  

This webinar is a great session for cyber professionals and business leaders who want to understand and improve the synergy between security programs and business objectives, while also giving you actionable insights that may transform the way your business approaches cybersecurity.

BISO vs CISO: A Head-to-Head with Cyber Leaders Navigating Our Security Landscape

NetSPI Field CISO, Nabil Hannan, welcomed two AI security leaders for a discussion on what they’ve learned throughout their experiences implementing Generative AI in their companies. Chris Schneider, Senior Staff Security Engineer at Google, and Tim Schulz, Distinguished Engineer, AI Red Team at Verizon, shared their perspectives on cybersecurity considerations companies should address before integrating AI into their systems and proactive measures can organizations take to avoid some of the most common cybersecurity pitfalls teams face.

Hindsight's 20/20: What Security Leaders Wish They Knew Before Implementing Generative AI

Ransomware isn't just an IT or security problem - it's an industry-wide crisis.

Cybercriminals are evolving, using both tried-and-true techniques and new, sophisticated tactics to infiltrate networks, steal data, and extort organizations of all sizes. With attackers leveraging legitimate remote access tools, exploiting high-profile vulnerabilities, and using stolen credentials to gain initial access, no company is immune.

Why is this everyone's problem?

-Ransomware operations are more resilient than ever, even after law enforcement takedowns
-Attackers are using basic tools and built-in system functions to evade detection
-Cloud environments, ESXi servers, and remote access tools are prime new targets
-Info-stealing malware is fueling ransomware attacks by providing credentials to threat actors 

Simply put? Ransomware can affect your whole company. Watch this on-demand session with Ben Lister, NetSPI Threat Research Engineer, and Maril Vernon, NetSPI Solutions Architect, for their insights on ransomware like:

-The latest ransomware trends and attack techniques
-How threat actors exploit common security gaps by combining tried-and-true playbooks with new tooling
-Shifting how we think about cybercriminals' mindsets & motivations
Their top actionable defense strategies you can employ now to stop ransomware before it starts 

Watch the session now and learn everything you never wanted to have to know about ransomware to protect your business.

Everything You Wish You Didn't Have to Know About Ransomware

As breach headlines go viral and security leaders face potential criminal charges, dismissal, or loss of company trust, the stakes have never been higher.

The role of a CISO, once seen as technical and tactical, has become high-risk, high-stakes, and often misunderstood as hackers become more inventive with their attacks.

During this session, NetSPI CISO Joe Evangelisto and Mainframe Director Phil Young dig into the industry transformation that's gotten us to this point, and outline how CISOs, security teams, and businesses as a whole can course correct - without winding up testifying in court.


In this session, you'll learn:

- How to transform CISOs from scapegoats to strategic business leaders - and shift your org mindset to match
- What practical frameworks and protections to embed now to build a resilient (yes, even post-breach) security strategy
- How to avoid panicked called from your family when international police do in fact have you in custody...We let Phil tell the story

This isn't just a CISO problem. It's a business problem - and if you work in security, you're already in the blast radius.

How to Keep Your CISO Out of Jail

If you’re not managing your attack surface, someone else is. And spoiler: they’re not on your side.
 

Attack Surface Management (ASM) is one of the most foundational, yet most misunderstood, practices in cybersecurity today. In a recent livestream Hacker Valley hosted, Brian Markham, CISO at EAB Global, and Kendra Valle, Risk and Compliance Manager at Legato Security, shared their hard-earned lessons and tactical advice on getting ASM right. 

 

Whether you’re starting with a spreadsheet or already investing in enterprise tools, strong ASM practices start with seeing the full picture.

Your Attack Surface is a Dumpster Fire

Make sure you know what cybersecurity challenges are on the horizon for 2025.

We all know it: the cybersecurity landscape is always changing, and 2025 will be no different. With emerging threats like AI-driven attacks, deepfakes, and post-quantum cryptographic vulnerabilities, organizations face an increasingly complex and high-stakes digital environment.

Join NetSPI experts Patrick Sayler, Director of Social Engineering, and Maril Vernon, Solutions Architect, as they dive into our predictions for cyber in 2025, and offer suggestions for your business to stay ahead of these risks and bolster your digital resilience.

Hear from our team what they expect the cybersecurity industry to face in 2025
Get their recommendations for building a proactive approach to managing your risk posture
Walk away with their top tips (and hot takes) on how to prioritize risk management for your business needs

2025 Cybersecurity Trends - idk, AI I guess

Cyber Security

Cyber Defence

Risk Based Security

Artificial Intelligence

Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

2025 Cybersecurity Trends - idk, AI I guess

Presented by

About this talk

NetSPI - The Proactive Security Solution