CYBR.SEC.CON 2026 is today in Houston. Here’s what we’re excited about.

CYBR.SEC.CON 2026 runs today and tomorrow at the George R. Brown Convention Center in Houston, and we're spending both days in the sessions. There are ten tracks this year, including a new one devoted entirely to AI, and the program reads like a list of the ways small businesses actually get broken into right now. The talks we've circled are the ones that walk step by step through a real technique: how attackers use public information to crack credentials before they ever touch you, how a quiet mailbox rule keeps them inside a Microsoft 365 account long after the password is changed, how a Chrome extension backdoor slips past every layer of a security stack, and what two years of secretly watching attackers build their infrastructure taught one research team. Add keynotes from Winn Schwartau, Joe Marshall of Cisco Talos, Andy Ellis and Ann Delenela of Entergy on AI, cyberwar, critical infrastructure and burnout, and a session bluntly titled "Posture Is Not a Dashboard," which is the closest thing to our own thesis we've seen on a conference agenda.

That last one is the reason we're here. The attacks change faster than the advice does, and everything Tenant Strike checks for is a claim about how an attacker gets in today. Those claims stay honest by listening to the people who watch attackers for a living. We'll share what we learn from Houston on LinkedIn over the next two days and write it up properly once the show is over. And if the talks leave you wondering what your own company looks like from the outside, that is exactly what the free scan shows you.

Source: CYBR.SEC.CON 2026 and its published program.