Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CVSS Measures Severity. Risk Requires Context.

CVSS remains a valuable tool for understanding vulnerability severity, but severity and risk are not the same. In this video, we explore why effective risk management requires additional context, including asset reachability, business impact, remediation timelines, and an organization's ability to reduce exposure. CVSS can help start the conversation, but it shouldn't be the only factor driving prioritization decisions.

No Link to Click: How a Text and a Phone Call Defeated MFA

No link was clicked. No malware was installed. No email gateway was crossed. A software development director lost her account in under two minutes. This is the full chain, in real time: a text message that offers to prevent a problem rather than asking for anything, a phone number she dials herself, a calm voice that explains what she is about to see before she sees it, and six digits read out loud.

AI Agent Security: Detecting Risky Behavior (Live Demo)

Watch five AI agents tackle a CTF and start coordinating with one another. Learn how to detect risky agent behavior using @goteleport graphs, risk scoring, and custom classifiers. Ben Arent explores lessons from the Hugging Face incident, then demonstrates how agent identity, scoped access, and activity monitoring help secure AI agents running against infrastructure.

Corelight Agent Builder Library: AI Investigation Demo

What happens when you ask a generic SIEM AI assistant and a Corelight-powered threat hunter agent the exact same question about a suspicious IP? The difference is not the model. It is the investigation expertise. In this demo, we walk through a side-by-side comparison using Elastic's agent builder. A default AI assistant returns a surface-level summary. An agent built with the Corelight Agent Builder Library identifies lateral movement, flags potential ransomware and data exfiltration, surfaces IDS alerts, maps involved hosts, and recommends next steps.

PQC Post Quantum Cryptography Explained: Why Today's Encryption Has an Expiration Date

The encryption protecting today’s data isn’t broken, but it does have a timeline. This video breaks down why current systems like TLS, PKI, and RSA remain secure today, and how quantum computing will change that. As progress accelerates toward large-scale quantum machines, organizations must prepare for a new era of security. Learn how PQC (post-quantum cryptography) helps address emerging risks like “harvest now, decrypt later,” and why tracking adoption of quantum-safe encryption is critical now, not later.