Across four operator leaks, Conti (2022), Black Basta and LockBit (2025), and The Gentlemen (2026), the tooling changed, but the attack gaps remained the same. Different crews, four years apart, continued to exploit valid credentials, trusted administrative tools and existing access paths to move through environments undetected.

Drawing on leaked operator chats and real-world breach investigations, this session explores why intrusions continue to succeed against well-defended organisations and the patterns that attackers exploit time and time again.

The session will explore:

• Why attackers continue to succeed despite increasing security investment
• The attack gaps that exist between identity, cloud, endpoint and network controls
• How valid credentials and trusted tools are being used to bypass existing defences
• Why some of the most dangerous attacks generate little or no obvious warning signs
• How AI is accelerating existing attacker techniques rather than creating entirely new ones
• Which attack gaps organisations should be paying closer attention to over the next 3–5 years

Following the briefing, Gamma and Vectra AI will discuss whether attack gaps are becoming harder to see as organisations become more connected, how AI is changing both attacker and defender behaviour, and what security leaders should be doing today before these visibility gaps become tomorrow’s biggest security challenges.

Identity has always been central to cyber security, but in an AI-driven world, proving who, or what, can be trusted is becoming far more complex.

As deepfakes, synthetic identities and autonomous AI agents blur the lines between human and machine, organisations face a growing challenge: how do you establish trust, verify identity and maintain control when traditional signals of authenticity can no longer be relied upon?

In this Cyber Month LIVE session, Scott McKinnon, UK Chief Security Officer at Palo Alto Networks, joins us to explore how trust and identity must evolve in an AI-driven world, the new risks emerging from human and non-human identities, and what security leaders should be doing now to enable AI adoption without placing trust on autopilot.

The discussion will focus on:

• How AI is changing trust and identity
• The risks posed by deepfakes, synthetic identities and AI-enabled attacks
• Managing human and non-human identities
• Why authentication alone is no longer enough
• Applying identity-first and Zero Trust principles in an AI-driven world
• Balancing innovation, security and governance

AI, automation and increasingly autonomous systems are placing new demands on enterprise networks, infrastructure and security architectures.

As organisations prepare for AI-enabled operations, broader Zero Trust adoption and longer-term challenges such as post-quantum cryptography, the decisions being made today around networks, infrastructure and security will play a critical role in determining how prepared they are for what’s next.

In this Cyber Month LIVE panel discussion, Haleem Gul, Gamma Group Network and Security Director, and Hendrik Blokhuis, Senior Director and CTO, Partner Organisation EMEA at Cisco, will explore the infrastructure, networking and security decisions organisations need to make today to prepare for the next 3–5 years.

The discussion will focus on:

• What it really means to be AI-ready
• Why networking and security are becoming one conversation
• How Zero Trust must evolve for an AI-enabled world
• The foundations needed to support agentic AI securely at scale
• When organisations should start preparing for post-quantum cryptography
• The infrastructure and security decisions that will matter most over the next 3–5 years

Together, Haleem and Hendrik will discuss how organisations can build resilient, future-ready foundations that support AI adoption, emerging technologies and the next era of cyber security.

AI is transforming how organisations operate, but every new AI capability, SaaS platform or third-party service introduces additional dependencies that can be difficult to see, understand and govern.

As organisations become increasingly reliant on suppliers, AI-enabled services and external platforms, security leaders face a growing challenge: how do you maintain visibility and control while continuing to adopt new technologies?

In this Cyber Month LIVE discussion, Gamma and Panorays will explore how AI is changing the third-party risk landscape, the hidden dependencies organisations are creating, and what security leaders should be doing now to manage risk across the extended enterprise.

The discussion will focus on:

• How AI is changing the third-party risk conversation
• The visibility challenge across suppliers, SaaS platforms and AI services
• Shadow AI and hidden dependencies
• What organisations are underestimating about AI-enabled ecosystems
• Balancing innovation, speed and governance
• What third-party risk management should look like over the next five years

AI is beginning to reshape security operations, but the future SOC will not be defined by automation alone. It will be defined by trust.

As organisations increasingly rely on AI to investigate alerts, correlate activity and support decision-making, security leaders face a new challenge: understanding what AI should be trusted to do, what remains firmly human-led, and how that trust is earned over time.

Trust in the SOC has always been built on evidence, transparency and results. The same applies to AI. Analysts need to understand how conclusions are reached, validate outcomes against known incidents and determine where human judgement should remain non-negotiable.

In this Cyber Month LIVE panel discussion, Thomas Connely, Head of Operations at Gamma and Joe Fera, Field CISO at Dropzone AI, Gamma, will explore how AI earns a security team’s trust, how that trust evolves from assistance to autonomy, and what the relationship between analysts and AI could look like in the SOC of the future.

The discussion will focus on:

• What should AI be trusted to do inside the SOC today?
• What gives security teams confidence to trust AI recommendations and decisions?
• How trust evolves from AI assistance to greater autonomy
• Where human judgement should remain non-negotiable
• What the relationship between analysts and AI could look like by 2030
• What security leaders should be doing today to prepare for the future SOC

As AI changes how attackers operate, the signals security teams have traditionally relied on are becoming harder to spot. Social engineering attacks are becoming more convincing, communication channels are multiplying, and malicious activity is increasingly blending into everyday business operations.

In this Cyber Month LIVE podcast discussion, Javvad Malik, CISO Advisor at KnowBe4, joins Gamma to explore how attacker behaviour is evolving, what this means for organisations, and the security challenges that may become far more significant over the next few years.

The discussion will focus on:

• How AI is changing attacker behaviour
• Why threats are becoming harder to recognise
• The growing use of channels such as Teams, WhatsApp and collaboration platforms
• What human risk looks like in an AI-enabled workplace
• The security implications of AI becoming a workplace colleague
• What organisations should be paying more attention to today before these challenges become more difficult to manage