Stay up to date with the latest on SANS cloud security, DevSecOps, and application security.
Joined May 2009
- Tweets9.5K
- Following421
- Followers15K
- Likes348
After class in Raleigh: a talk on guardrails for AI coding tools on Nov 3 and Community Night on Nov 4. Join Us. #SEC540 #DevSecOps
What can advanced AI models reveal about code already under continuous AI review?
Join us at SANS AI Cybersecurity Summit Fall as Amy Herzog shares firsthand insights from testing Mythos Preview against AWS code.
📅 Nov. 2–3 | Arlington & Live Online
➡️ go.sans.org/AAslWm
First-pass review on every merge request, in seconds. Learn how at SEC540 in Raleigh, Nov. 2 to 7. #DevSecOps #AI-DrivenDevSecOps #CloudSecurity
Course details and a complimentary preview: buff.ly/71DQnDN
Attackers don't break in. They log in.
Identity is how adversaries move through modern environments—abusing tokens, OAuth consent, and hybrid trust to operate with legitimate access.
SEC559 teaches defenders to detect, govern & respond. 👇
#IdentitySecurity #CloudSecurity
Product teams are shipping faster with AI. SEC540 in Raleigh, Nov. 2 to 7, helps security keep up. #DevSecOps #SEC540 #CloudSecurity
⏳ SEC559 starts Monday.
Last-minute seats still open. Las Vegas + live online.
🔗 buff.ly/uJeYSfb
#IdentitySecurity #SEC559
📺 Now OnDemand: Comparing AI Harnesses and Models for Cloud Security Use Cases.
Watch Ahmed Abugharbia walk through comparative results for AI harnesses, foundation models, and the tradeoffs that appear across cloud security workflows.
🔗 buff.ly/8wu9BEY
SEC559 beta, SANS Network Security, Sept 21–25.
Small cohort. Direct author access. Beta pricing. Last seats across in-person and live online.
🔗 buff.ly/uJeYSfb
#IdentitySecurity #CloudSecurity
🚨 Starting in 1 hour.
This session compares leading AI harnesses and foundation models across cloud security workflows, with results tied to accuracy, speed, cost, reliability, and operational efficiency.
📅 Sep 2 | 12:00 PM ET
🔗 buff.ly/8wu9BEY
Tomorrow: compare AI harnesses and models through the lens of cloud security work.
Join us and evaluate the speed, accuracy, cost, reliability, and efficiency of popular AI tools and platforms as they relate to real cloud security use cases.
🔗 buff.ly/8wu9BEY
Cloud teams are moving AI from experimentation into daily security workflows.
This session shares a comparative evaluation method for AI harnesses and foundation models, including the metrics used to judge performance and tradeoffs.
🔗 buff.ly/8wu9BEY
Detection and response for identity attacks across Entra ID and hybrid AD. Direct access to the course author throughout.
In-person + live online. Sept 21–25.
🔗 buff.ly/uJeYSfb
#IdentitySecurity
The fastest AI workflow may not be reliable and the most accurate may not be cost-effective.
This session breaks down the tradeoffs between leading AI harnesses and models using practical cloud security tasks rather than generic benchmarks.
🔗 buff.ly/8wu9BEY
📺 Now OnDemand: Beyond MFA: A Defender’s Guide to Token Theft and AiTM.
Maxim Deweerdt explains how token theft works, why password-plus-OTP MFA fails against AiTM, and how to reduce token replay risk.
🔗 buff.ly/RNpPSOV
New attacker techniques are outpacing most teams' ability to track them. Stephen Sims keynotes #SANSNetworkSecurity 2026 on AI and the threat landscape shift. Sep 21-26, Las Vegas + virtual. Save $777 with code SIMS777.
Register: go.sans.org/jWgrR5
#SANSLiveTraining
🚨 Starting in 1 hour.
This session explains how AiTM phishing captures sessions, how refresh tokens extend access, and how identity teams can test whether their MFA strategy still holds against token replay.
📅 Aug 13 | 9:30 AM ET
🔗 buff.ly/RNpPSOV
