Find the Hidden NTLM Fallback in Your AD Forest with Linda Taylor, Principal Software Engineer at Microsoft

https://youtu.be/d6EoyriqiZQ Passkeys are now the default authentication method in Entra ID. If you’re responsible for Entra ID identity, the question you …

Recorded live at Black Hat 2026, this episode features Sarah Gosler, Managing Director and Head of Cyber Resiliency and Human Defense at Wells Fargo. Sarah and Sean discuss why humans are the largest attack surface rather than the weakest link, how AI has industrialized social engineering, and why simple human-centric tools like safe words are becoming critical defenses against deepfakes.

This episode features Wylie Shanks, a cybersecurity consultant who currently leads an OT cybersecurity program for a large North American energy company’s business unit. With over 25 years of experience working with critical infrastructure organizations, he designs, defends, and recovers environments spanning enterprise IT to industrial control systems. His expertise spans security architecture, incident response, privileged access management, and cyber risk management—translating complex challenges into practical, auditable solutions. Wylie holds numerous certifications, including GIAC Security Expert (GSE), ISSAP, GIAC Response and Industrial Defense (GRID), and GIAC Cyber Incident Leader (GCIL).

This episode features Marc Jason Grens, President of Chaintrax, a compliance and blockchain forensics firm that has advised on ransomware incidents since 2017. In this episode, Marc explains why ransomware victims decide to pay, why that payment can violate US sanctions law if it isn't vetted first, and why tracking the money afterward is how law enforcement works to recover it.

This episode features Chris Steinke, Director of Product Strategy at Semperis, a technology executive with more than 20 years of experience across cybersecurity, digital identity, and infrastructure. In this episode, Chris explains why moving identity to the cloud creates a single point of failure, why backup and recovery alone aren't enough, and why the next frontier is making trust portable, so applications aren't locked to a single identity provider.

This episode features Phil Keibler, Vice President and CISO at Meijer, who has held CISO roles at Bass Pro Shops and Finish Line across nearly three decades in security leadership. Phil shares why CISOs who struggle to get budget usually have a storytelling problem, how he defines success in a role where stopping every attack is impossible, and why fundamentals matter more than chasing new tools.

In this episode, they walk through what the shared responsibility model actually means for Entra tenant data, how token-based attacks sidestep phishing-resistant authentication, and what happens when a threat actor hard-deletes objects and locks you out.

This episode features Jim Bowie, VP and CISO at Tampa General Hospital, joined by co-host Courtney Guss, Director of Crisis Management at Semperis. He discusses why healthcare is uniquely exposed during cyber incidents, why recovery is where most organizations are losing time, and how disciplined rehearsal is the highest-leverage move available to resource-constrained security teams.

This episode features Geoffrey Mattson, CEO of SecureAuth, joined by co-host Sarah Cecchetti, Director of Product Management at Semperis. He discusses why agentic …

In this episode, Mark explains how Gartner's research model works and what his team is prioritizing across identity verification, authorization, ITDR, and decentralized identity. He also breaks down what AI means for identity right now and why securing AI agents is harder than most teams realize.