Tag: cloud security

  • Conference Whispers: Black Hat USA 2026

    Conference Whispers: Black Hat USA 2026

    Las Vegas, NV August 1-6, 2026

    Published: August 9, 2026                                                    ID: TBW2226

    Analyst(s): Dr. Doreen Galli

    Photojournalist(s): Dr. Doreen Galli
    Enjoy the related Computer Talk Radio and Computer Talk Radio.

    ABSTRACT

    Black Hat USA 2026 brought 20,000 cybersecurity professionals to Las Vegas, where researchers, vendors, and practitioners examined the evolving risks introduced by agents, AI, and increasingly complex digital environments. The event held over 100 briefings, 125 tool demonstrations and 120 sponsored sessions. Discussions across sessions and exhibits touched on agent security, threat hunting, governance, infrastructure resilience, device vulnerabilities, fraud prevention, and professional development.

    The Conference

    • A community of 20,000 verified cybersecurity professionals gathered at Black Hat USA. Over 100 briefings, 115 tool demonstrations, 120 sponsored sessions and 425+ Exhibits and vendors gathered across the 6 days.

    Cautions

    • Friendly reminder: this research provides examples of what was shared with us at the event, not an evaluation, validation, or recommendation of the given technology.

    Sessions

    We were given an advance preview of the talk, “Promptward EOD: Skillful Agent Detonation” by Zenity’s CTO and Co-Founder Michael Bargury. Just by visiting the wrong website you could be compromised. They specifically demonstrate how an agent can jump from viewing a web site to gaining control of your bank account. Now that is scary.

    We were also provided an exclusive summary to the session, “Obscurize: Malware for Defense and Counter Offense”. As a response to recent malware, Aaron Beardslee, Manager of Threat Research at Securonix created Obscurize. Sitting above the EDR (Endpoint Detection and Response), it acts as an additional layer. Leveraging the malware’s own fingerprint, its psychology is studied and learned. This tool then makes a sandbox look like a bare metal system or a bare metal system look like a sandbox. This enables the hunter to trick the malware to kill itself or to run thinking it found the goods. The best part? Obscurize is free and publicly available for your to use during your threat hunting!

    Exhibits

    Fast track adoption of agents has organizations trying to keep up and stay safe. Sometimes in the chaos, the best laid plans go astray. Sometimes, guardrails are not enough. We have all read the horror stories of agents gone wild! Meet PointGuard AI the ultimate kill switch for agents. Avepoint aims to be your unifying trust layer for AI. Their focus is cloud security, safe data governance, and resiliency challenges across the AI stack.

    If you are Fortune 2000 and concerned about tracking agents, Zenity was looking to meet you! Softbank and other clients leverage Zenity to understand what data is being touched by agents and what that intent of those agents are. Not only that it will steer agents into the correct direction to help keep them on track. 

    Mission critical infrastructure for sovereign AI that is private to you. Cogl provides a knowledge graph and enables threat hunting and investigation in a transparent and secure manner. As you might expect, this technology is leveraged in environments ranging from the Department of Defence to banking.

    Focusing on the Security Operations Center, BlueVoyant brings what they like to call ‘holistic protections’. Their approach combines internal monitoring and ecosystem oversight. Traditional operating challenges are now assisted by AI driven agentic capabilities. The four risks they aim to mitigate include: data security and leakage, identity vulnerabilities, supply chain and vendor risks, and operational inefficiencies.

    Threat hunting is the ultimate game of cat and mouse in cybersecurity. Securonix was on site to share their tool with fellow threat hunters. Whether you want your sandbox to trap the threat or to let it run to so you may study it’s behavior, Securonix provides both options. They even have their own threat hunting team that regularly leverages the tool as they assist the clients security their own environments.

    One of our favorite areas is at the edge, connected devices and the Internet of Things – IoT. These devices span from connected vehicles to the simple fire alarms in your home. These devices often bring vulnerabilities. Due to the difficulty in updating their firmware, connected device firmware vulnerabilities become your environment’s weakest point and the point of failure. Finite State focuses on assisting companies reduce the noise as they test their products before shipping. This noise reduction enables their clients to find their vulnerabilities before they ship products to their customers. 

    Today, a wire money transfer is frequently still sent in plain text. Thus, it is not surprising it is a huge target of fraud. Introducing InoQlate! A Canadian non-profit providing a solution to your wire transfer security issues. Close that door to fraud and stop sending wire transfer information over plain text communication lines!

    Seeking a boutique penetration firm? Meet the white hats from Black Hills Information security. They beg you to make their lives harder! They don’t want to succeed when they try to break into your infrastructure! Providing penetration testing, SOC operations, IR (incident response), and training. Perhaps the most unique thing coming out of Black Hills Information Security is their well known communication medium: Comics! Their security comic series titled, “The Future is ***” available at 750 comic book stores. Not only that, their wisdom is available via a game to make training even more approachable. The game Back Doors and Breaches boasts over 150,000 sales to date.

    Finally, the ultimate organization for security professionals, ISC2 was in expo hall. Known as the largest professional organization for cyber security professionals, there is likely a chapter near you! Providing certifications, community and advice with the goal to the make the world a safer place.

    Conference Vibe

    Cybersecurity specialists gathered on the Las Vegas Strip for Black Hat 2026 and it did not disappoint. Over 20,000 verified attendees gathered for over 100 briefings, 115 tool demonstrations, 120 sponsored session and over 425 exhibits and vendors. You may recall last year we were the first ones given permission to video expo hall at Black Hat USA. This year, enjoy a first ever live Black Hat USA walkabout while expo hall its open. We once again live streamed from on site to share the experience. Be sure to catch coverage on my syndicated segment on the nationally broadcast edition of Computer Talk Radio.

    While at Black Hat, we conducted research for 9 additional forthcoming Whisper Reports. The playlists are unlisted but available with the video version to be distributed via YouTube Whisper Club upper tier membership area on our YouTube Channel first.

    1. Whisper Report: What cyber risk are we all ignoring?
    2. Whisper Report: What security advice is actually wrong?
    3. Whisper Report: If AI attacks get smarter, what fails first?
    4. Whisper Report: What’s broken in identity we still accept?
    5. Whisper Report: What attack will dominate headlines next year?
    6. Whisper Report: What cyber myth needs to die in 2026?
    7. Whisper Report: What security trend is mostly hype?
    8. Whisper Report: What breach changed how you operate?
    9. Whisper Report: What security problem can’t AI solve?

    Readers and viewers wishing to experience the entire event are encouraged to view the Conference Whispers: Black Hat USA 2026 Playlist in its entirety. The playlist will be cited in the end screen, description, and as a pinned comment of the video edition.

    The video edition will conclude with gratitude towards those that contributed and a montage of responses to Bonus Question, “What’s the best part about attending Black Hat USA live in Las Vegas?”.

    Next Year’s Conference  

    The Black Hat USA will once again return to Las Vegas and will be held at the Mandalay Bay on .

    *When vendors’ names are shared as examples in this document, it is to provide a concrete example of what was on display at the conference, not an evaluation or recommendation. Evaluation and recommendation of these vendors are beyond the scope of this specific research document. Other examples products in the same category may have also been on display.

    Corporate Headquarters

    2884 Grand Helios Way

    Henderson, NV 89052

    Downloading, re-uploading, or redistributing this file is not permitted under any license.


    ©2019-2026 TBW Advisors LLC. All rights reserved. TBW, Technical Business Whispers, Fact-based research and Advisory, Conference Whispers, Industry Whispers, Email Whispers, The Answer is always in the Whispers, Whisper Reports, Whisper Studies, Whisper Ranking, Whisper Club, The Answer is always in the Whispers, and One Change a Month, Vegas Convention Library; Leading Professionals, Real Questions, Real Time, are trademarks or registered trademarks of TBW Advisors LLC. This publication may not be reproduced or distributed in any form without TBW’s prior written permission. It consists of the opinions of TBW’s research organization which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, TBW disclaims all warranties as to the accuracy, completeness or adequacy of such information. TBW does not provide legal or investment advice and its research should not be construed or used as such. Your access and use of this publication are governed by the TBW Usage Policy. TBW research is produced independently by its research organization without influence or input from a third party. For further information, see Fact-based research publications on our website for more details.

  • Conference Whispers: ISC West 2026

    Conference Whispers: ISC West 2026

    Las Vegas, NV March 23 – March 27

    Published: March 29, 2026                                      ID: TBW2164

    Analyst(s): Dr. Doreen Galli

    Photojournalist(s): Dr. Doreen Galli

    As Discussed on Computer Talk Radio.

    ABSTRACT

    ISC West 2026 brought the physical cyber security community to Las Vegas and the Venetian Expo for a week of live demonstrations, field conversations, and on‑floor video. Coverage spans frictionless screening, threat detection, control infrastructure, and emerging AI and identity capabilities, reflecting how vendors are approaching scale, connectivity, and modernization across real‑world security environments globally.

    Cautions

    • Friendly reminder: this research provides examples of what was shared with us at the event, not an evaluation, validation, or recommendation of the given technology.
    • Just because a technology can do something in general doesn’t mean it will work in your environment. It is critical to validate a technology including its false positive and error rates.

    Frictionless Security

    One of our first stops was technology everyone at the show wished TSA Adopted yesterday! Xtract One Technologies enables screening without stopping and unpacking one’s bags! The technology provides an image of the person with the threat in their bag, identifies the threat and its location within the bag without slowing down pedestrian traffic through the screening gate.

    Physical security systems have a variety of access systems from badge readers to keys. The problem with keys is key management. Introducing InVue’s OneKEY, an adaptable smart key and related system. If you think the best part is only having one key, versus the notorious janitor key ring you are in for a treat! This smart key can communicate via IR to unlock devices and provide wireless energy transfer to lock mechanisms. Furthermore, every action is tracked, logged and fully auditable.

    Common to all physical security systems, is equipment that is plugged in and subject to power surge damage. DITEK was in expo hall with their exciting modular surge protection solution. The time saving feature of being able to simply replace a module after end of life versus the entire surge protector is sure to be popular. Hot Swapping modules are easier to change than a printer cartridge. Friendly reminder that licensed electrical contractors are generally required to service 120 volts and up.

    Threat Detection & Response

    Identification of objects with surveillance videos is another tough challenge that was taken on by Everon. Their combination hardware, software, and processes solution is focused on deterring unwanted activity in its protected space.

    Physical Cyber Security solutions often involve communications from the field where it can be noisy. Whether the noise comes from the chaos of the emergency or is inherit in the location such as security at an F1 race, it doesn’t matter. The human voice communication must still be possible! Roanwell Corporation also shared their adjustable noise suppression solution leveraged by security personnel, first responders, fire fighters, and war fighters like.

    These threat detection and response systems also cannot function in isolation. They must stay connected Teal.io’s eSIM solution provides the ultimate in reliable mission-critical connectivity. Their global technology ensures devices always connect to the best available network. The best part? Their solution frictionlessly provides connectivity so surveillance and robotics solutions can effectively stay in communication. 

    At the other end of the spectrum, some organizations require surveillance systems that are deliberately disconnected. RGB Spectrum provides air‑gapped security for surveillance environments designed to operate on isolated networks—or no network at all. By leveraging unidirectional HDMI sharing, RGB Spectrum demonstrated an approach intended to prevent external access paths, positioning the system, by their design, as resistant to remote compromise.

    Control Centers & Infrastructure

    Scaling is their middle name at Matrix ComSec. Matrix ComSec manufactures surveillance cameras and access control hardware with a system capacity of 4 to 96 channels. To provide further context, a single gadget can support up to 255 doors.

    Focusing on the control center and providing a unified pane of glass for clients, Hartman Controls welcomed all with their booth right outside Expo Hall’s Main Entrance. Established in 1998, Hartman’s engineering-first approach provides hardware flexibility offering traditional and edge-style enclosures. The solution can be deployed on premise, the cloud and is easy to migrate in either direction should your architecture and requirements change.

    Maintain the theme of cloud or on-premise availability, Keri Systems shared their Open Platform for access solutions. In addition, Keri’s flexibility enables it to support up to 12-13 different hardware platforms. Furthermore, the product is built to explicitly support multiple vertical markets.

    One difficulty in purchasing security equipment is many of the manufacturers started in one sector such as fire. Then after success they expanded by creating another isolated division for go to market. Napco took a different approach. Napco is an integrated security manufacturer providing a single ecosystems spanning fire alarms, access control, security systems, and locks.

    Many organizations regardless of their size may not be large buyers when it comes to physical security equipment. In these circumstances it is common for organizations to leverage buyers’ groups. PSA is a buyers group for this space with terms up to 120-day terms for its clients.

    AI, Identity, and Security Modernization

    IQSIGHT, formerly Bosch Video, operates across hardware, video management, and analytics with capabilities that now include generative AI. Their specialty? Providing the WHY behind what you are seeing through, what they like to call, careful, thoughtful, deployment of generative AI. Today, context is everything.

    Moving beyond video capture and on to surveillance intelligence, March Networks was excited to share their new brand resulting from their merger with Vivotek under the Delta Group. By layering advanced business intelligence directly onto their video surveillance systems, they are enabling organizations to transform raw visual data into actionable insights that drive operational improvements and increase profitability.

    Many organizations already have the security equipment, the cameras, and video installed. Today the challenge is getting AI for all this physical security equipment without replacing it all! Stepping up to the plate is omniQ, ready to bring AI to physical security equipment at your organization.

    Safetrust is known for being major supporters of open IoT-based ecosystems. Manufacturing advanced sensors and equipment Safetrust also produces the software to access the sensors. Their key disrupters are cloud-based firmware updates, federated identities, and an interesting neural adapter panel. This panel eliminates the need for expensive hardware panels and related copper wiring. Specifically, the neural adapter panel functions by leveraging a combination of PoE (power over ethernet), panel emulation, and direct software connection. One final exciting feature, Safetrust is incorporating Dilithium and Kyber into their technology, providing post Quantum readiness.  

    Physical Cyber Security is often a fragmented, world of antiquated hardware being asked to provide sophisticated access control. The difficulty often can be simply connecting to the device to get its data into a system to enable any type of analytics or intelligence. Braxos understands this and brought their solution to ISC West with over 200 connectors. Their connectors span elevator systems, parking management, vending machines and intercoms.

    Conference Vibe

    After over 50 videos and two dozen fact checks, our coverage of ISC West 2026 closes. Registration was quite efficient IFF you printed your badge at home and went to the correct line; otherwise it may have been a flashback to your TSA experience to get to Vegas. Overall, it was a very engaged atmosphere where attendees could literally feel the momentum of the crowd. Everyone’s meetings seems to go as planned with the expected mixture of vendors. Enjoy the walkabout to and through expo hall. Venetians standard eateries were open throughout the convention including the various Bistros and the Café Presse locations.

    We always try to bring you fresh perspective to our coverage of an event over prior coverage as well as new vendors but you will recognize many brands in the walkabout. For additional coverage in  physical cyber security, cybersecurity and identity and access management enjoy our prior coverage of ISC West, Identiverse, and Black Hat USA 2025.

    Unfortunately, the connectivity at the event was too challenging to be able to live stream. This also caused an interruption to upload  videos in the hall versus from expo hall.

    We conducted research for five additional forthcoming Whisper Reports for our clients. The playlists are unlisted but available with the video version to be distributed via YouTube Whisper Club upper tier membership area on our YouTube Channel.

    Readers and viewers wishing to experience the entire event are encouraged to view the Conference Whispers: ISC West 2026 Playlist in its entirety. The playlist will be sited in the end screen, description, and as a pinned comment of the video edition. Be sure to monitor future broadcasts editions’ of Computer Talk Radio for the forthcoming coverage of ISC West 2026.

    Finally, the video edition will conclude with gratitude towards those that contributed and a montage of responses to Bonus Question, “What’s the best part about attending ISC West live in Las Vegas?”.

    Next Year’s Conference  

    The ISC West 2027 will once again return to Las Vegas and will be held at the Venetian Expo on March 31 through April 2, 2027.

    *When vendors’ names are shared as examples in this document, it is to provide a concrete example of what was on display at the conference, not an evaluation or recommendation. Evaluation and recommendation of these vendors are beyond the scope of this specific research document. Other examples products in the same category may have also been on display.

    Corporate Headquarters

    2884 Grand Helios Way

    Henderson, NV 89052

    ©2019-2026 TBW Advisors LLC. All rights reserved. TBW, Technical Business Whispers, Fact-based research and Advisory, Conference Whispers, Industry Whispers, Email Whispers, The Answer is always in the Whispers, Whisper Reports, Whisper Studies, Whisper Ranking, Whisper Club, Whispers, The Answer is always in the Whispers, Vegas Convention Library, and One Change a Month, are trademarks or registered trademarks of TBW Advisors LLC. This publication may not be reproduced or distributed in any form without TBW’s prior written permission. It consists of the opinions of TBW’s research organization which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, TBW disclaims all warranties as to the accuracy, completeness or adequacy of such information. TBW does not provide legal or investment advice and its research should not be construed or used as such. Your access and use of this publication are governed by the TBW Usage Policy. TBW research is produced independently by its research organization without influence or input from a third party. For further information, see Fact-based research publications on our website for more details.