Across four operator leaks, Conti (2022), Black Basta and LockBit (2025), and The Gentlemen (2026), the tooling changed, but the attack gaps remained the same. Different crews, four years apart, continued to exploit valid credentials, trusted administrative tools and existing access paths to move through environments undetected.

Drawing on leaked operator chats and real-world breach investigations, this session explores why intrusions continue to succeed against well-defended organisations and the patterns that attackers exploit time and time again.

The session will explore:

• Why attackers continue to succeed despite increasing security investment
• The attack gaps that exist between identity, cloud, endpoint and network controls
• How valid credentials and trusted tools are being used to bypass existing defences
• Why some of the most dangerous attacks generate little or no obvious warning signs
• How AI is accelerating existing attacker techniques rather than creating entirely new ones
• Which attack gaps organisations should be paying closer attention to over the next 3–5 years

Following the briefing, Gamma and Vectra AI will discuss whether attack gaps are becoming harder to see as organisations become more connected, how AI is changing both attacker and defender behaviour, and what security leaders should be doing today before these visibility gaps become tomorrow’s biggest security challenges.

Frontier AI is changing the cyber threat landscape, giving attackers the ability to uncover vulnerabilities, identify exploitable attack paths and operate at a speed and scale that traditional security approaches were not designed to manage.

As increasingly capable AI models and autonomous agents become more widely available, organisations face a growing challenge: how do you identify and close exposures, contain threats and respond quickly enough when attacker activity begins to move at machine speed?

In this Cyber Month LIVE session, Scott McKinnon, Chief Security Officer, Western Europe at Palo Alto Networks, explores how Frontier AI is changing attacker capabilities, why previously hidden exposures are becoming easier to find and exploit, and what security leaders should be doing now to strengthen resilience. The session also examines the emerging risks associated with autonomous AI agents and the practical steps organisations can take to improve visibility, containment and response.

The discussion will focus on:

• How Frontier AI is changing the speed and scale of cyber attacks
• Why previously hidden vulnerabilities and attack paths are becoming easier to uncover
• The emerging security risks associated with autonomous AI agents
• Why traditional detection, patching and response processes may struggle to keep pace
• Reducing exposure and containing threats before they can spread
• Building security operations capable of detecting and responding at machine speed

AI, automation and increasingly autonomous systems are placing new demands on enterprise networks, infrastructure and security architectures.

As organisations prepare for AI-enabled operations, broader Zero Trust adoption and longer-term challenges such as post-quantum cryptography, the decisions being made today around networks, infrastructure and security will play a critical role in determining how prepared they are for what’s next.

In this Cyber Month LIVE panel discussion, Haleem Gul, Gamma Group Network and Security Director, and Hendrik Blokhuis, Senior Director and CTO, Partner Organisation EMEA at Cisco, will explore the infrastructure, networking and security decisions organisations need to make today to prepare for the next 3–5 years.

The discussion will focus on:

• What it really means to be AI-ready
• Why networking and security are becoming one conversation
• How Zero Trust must evolve for an AI-enabled world
• The foundations needed to support agentic AI securely at scale
• When organisations should start preparing for post-quantum cryptography
• The infrastructure and security decisions that will matter most over the next 3–5 years

Together, Haleem and Hendrik will discuss how organisations can build resilient, future-ready foundations that support AI adoption, emerging technologies and the next era of cyber security.

AI is transforming how organisations operate, but every new AI capability, SaaS platform or third-party service introduces additional dependencies that can be difficult to see, understand and govern.

As organisations become increasingly reliant on suppliers, AI-enabled services and external platforms, security leaders face a growing challenge: how do you maintain visibility and control while continuing to adopt new technologies?

In this Cyber Month LIVE discussion, Gamma and Panorays will explore how AI is changing the third-party risk landscape, the hidden dependencies organisations are creating, and what security leaders should be doing now to manage risk across the extended enterprise.

The discussion will focus on:

• How AI is changing the third-party risk conversation
• The visibility challenge across suppliers, SaaS platforms and AI services
• Shadow AI and hidden dependencies
• What organisations are underestimating about AI-enabled ecosystems
• Balancing innovation, speed and governance
• What third-party risk management should look like over the next five years

AI is beginning to reshape security operations, but the future SOC will not be defined by automation alone. It will be defined by trust.

As organisations increasingly rely on AI to investigate alerts, correlate activity and support decision-making, security leaders face a new challenge: understanding what AI should be trusted to do, what remains firmly human-led, and how that trust is earned over time.

Trust in the SOC has always been built on evidence, transparency and results. The same applies to AI. Analysts need to understand how conclusions are reached, validate outcomes against known incidents and determine where human judgement should remain non-negotiable.

In this Cyber Month LIVE panel discussion, Thomas Connelly, Head of Operations at Gamma, Joe McMann, Field CISO at Dropzone AI, and AJ Wiggan, Cyber Threat Manager at Gamma, will explore how AI earns a security team’s trust, how that trust evolves from assistance to autonomy, and what the relationship between analysts and AI could look like in the SOC of the future.

The discussion will focus on:

• What should AI be trusted to do inside the SOC today?
• What gives security teams confidence to trust AI recommendations and decisions?
• How trust evolves from AI assistance to greater autonomy
• Where human judgement should remain non-negotiable
• What the relationship between analysts and AI could look like by 2030
• What security leaders should be doing today to prepare for the future SOC