ABSTRACT

Black Hat USA 2026 brought 20,000 cybersecurity professionals to Las Vegas, where researchers, vendors, and practitioners examined the evolving risks introduced by agents, AI, and increasingly complex digital environments. The event held over 100 briefings, 125 tool demonstrations and 120 sponsored sessions. Discussions across sessions and exhibits touched on agent security, threat hunting, governance, infrastructure resilience, device vulnerabilities, fraud prevention, and professional development.

The Conference

A community of 20,000 verified cybersecurity professionals gathered at Black Hat USA. Over 100 briefings, 115 tool demonstrations, 120 sponsored sessions and 425+ Exhibits and vendors gathered across the 6 days.

Cautions

Friendly reminder: this research provides examples of what was shared with us at the event, not an evaluation, validation, or recommendation of the given technology.

Sessions

We were given an advance preview of the talk, “Promptward EOD: Skillful Agent Detonation” by Zenity’s CTO and Co-Founder Michael Bargury. Just by visiting the wrong website you could be compromised. They specifically demonstrate how an agent can jump from viewing a web site to gaining control of your bank account. Now that is scary.

We were also provided an exclusive summary to the session, “Obscurize: Malware for Defense and Counter Offense”. As a response to recent malware, Aaron Beardslee, Manager of Threat Research at Securonix created Obscurize. Sitting above the EDR (Endpoint Detection and Response), it acts as an additional layer. Leveraging the malware’s own fingerprint, its psychology is studied and learned. This tool then makes a sandbox look like a bare metal system or a bare metal system look like a sandbox. This enables the hunter to trick the malware to kill itself or to run thinking it found the goods. The best part? Obscurize is free and publicly available for your to use during your threat hunting!

Exhibits

Fast track adoption of agents has organizations trying to keep up and stay safe. Sometimes in the chaos, the best laid plans go astray. Sometimes, guardrails are not enough. We have all read the horror stories of agents gone wild! Meet PointGuard AI the ultimate kill switch for agents. Avepoint aims to be your unifying trust layer for AI. Their focus is cloud security, safe data governance, and resiliency challenges across the AI stack.

If you are Fortune 2000 and concerned about tracking agents, Zenity was looking to meet you! Softbank and other clients leverage Zenity to understand what data is being touched by agents and what that intent of those agents are. Not only that it will steer agents into the correct direction to help keep them on track.

Mission critical infrastructure for sovereign AI that is private to you. Cogl provides a knowledge graph and enables threat hunting and investigation in a transparent and secure manner. As you might expect, this technology is leveraged in environments ranging from the Department of Defence to banking.

Focusing on the Security Operations Center, BlueVoyant brings what they like to call ‘holistic protections’. Their approach combines internal monitoring and ecosystem oversight. Traditional operating challenges are now assisted by AI driven agentic capabilities. The four risks they aim to mitigate include: data security and leakage, identity vulnerabilities, supply chain and vendor risks, and operational inefficiencies.

Threat hunting is the ultimate game of cat and mouse in cybersecurity. Securonix was on site to share their tool with fellow threat hunters. Whether you want your sandbox to trap the threat or to let it run to so you may study it’s behavior, Securonix provides both options. They even have their own threat hunting team that regularly leverages the tool as they assist the clients security their own environments.

One of our favorite areas is at the edge, connected devices and the Internet of Things – IoT. These devices span from connected vehicles to the simple fire alarms in your home. These devices often bring vulnerabilities. Due to the difficulty in updating their firmware, connected device firmware vulnerabilities become your environment’s weakest point and the point of failure. Finite State focuses on assisting companies reduce the noise as they test their products before shipping. This noise reduction enables their clients to find their vulnerabilities before they ship products to their customers.

Today, a wire money transfer is frequently still sent in plain text. Thus, it is not surprising it is a huge target of fraud. Introducing InoQlate! A Canadian non-profit providing a solution to your wire transfer security issues. Close that door to fraud and stop sending wire transfer information over plain text communication lines!

Seeking a boutique penetration firm? Meet the white hats from Black Hills Information security. They beg you to make their lives harder! They don’t want to succeed when they try to break into your infrastructure! Providing penetration testing, SOC operations, IR (incident response), and training. Perhaps the most unique thing coming out of Black Hills Information Security is their well known communication medium: Comics! Their security comic series titled, “The Future is ***” available at 750 comic book stores. Not only that, their wisdom is available via a game to make training even more approachable. The game Back Doors and Breaches boasts over 150,000 sales to date.

Finally, the ultimate organization for security professionals, ISC2 was in expo hall. Known as the largest professional organization for cyber security professionals, there is likely a chapter near you! Providing certifications, community and advice with the goal to the make the world a safer place.

Conference Vibe

Cybersecurity specialists gathered on the Las Vegas Strip for Black Hat 2026 and it did not disappoint. Over 20,000 verified attendees gathered for over 100 briefings, 115 tool demonstrations, 120 sponsored session and over 425 exhibits and vendors. You may recall last year we were the first ones given permission to video expo hall at Black Hat USA. This year, enjoy a first ever live Black Hat USA walkabout while expo hall its open. We once again live streamed from on site to share the experience. Be sure to catch coverage on my syndicated segment on the nationally broadcast edition of Computer Talk Radio.

While at Black Hat, we conducted research for 9 additional forthcoming Whisper Reports. The playlists are unlisted but available with the video version to be distributed via YouTube Whisper Club upper tier membership area on our YouTube Channel first.

Readers and viewers wishing to experience the entire event are encouraged to view the Conference Whispers: Black Hat USA 2026 Playlist in its entirety. The playlist will be cited in the end screen, description, and as a pinned comment of the video edition.

The video edition will conclude with gratitude towards those that contributed and a montage of responses to Bonus Question, “What’s the best part about attending Black Hat USA live in Las Vegas?”.

Next Year’s Conference

The Black Hat USA will once again return to Las Vegas and will be held at the Mandalay Bay on .

^*When vendors’ names are shared as examples in this document, it is to provide a concrete example of what was on display at the conference, not an evaluation or recommendation. Evaluation and recommendation of these vendors are beyond the scope of this specific research document. Other examples products in the same category may have also been on display.

Corporate Headquarters

2884 Grand Helios Way

Henderson, NV 89052

Downloading, re-uploading, or redistributing this file is not permitted under any license.

©2019-2026 TBW Advisors LLC. All rights reserved. TBW, Technical Business Whispers, Fact-based research and Advisory, Conference Whispers, Industry Whispers, Email Whispers, The Answer is always in the Whispers, Whisper Reports, Whisper Studies, Whisper Ranking, Whisper Club, The Answer is always in the Whispers, and One Change a Month, Vegas Convention Library; Leading Professionals, Real Questions, Real Time, are trademarks or registered trademarks of TBW Advisors LLC. This publication may not be reproduced or distributed in any form without TBW’s prior written permission. It consists of the opinions of TBW’s research organization which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, TBW disclaims all warranties as to the accuracy, completeness or adequacy of such information. TBW does not provide legal or investment advice and its research should not be construed or used as such. Your access and use of this publication are governed by the TBW Usage Policy. TBW research is produced independently by its research organization without influence or input from a third party. For further information, see Fact-based research publications on our website for more details.

Tag: agent detonation

Conference Whispers: Black Hat USA 2026