Seems like @alexcpsec and I will actually have to write the presentation now that we got the confirmation that our talk submission for RSA Conference 2026 was accepted!

We'll discuss the intersection of UX, licensing and architecture choices by cloud providers with security outcomes, combining Verizon DBIR and Tenchi Security datasets to bring data-driven insights, debunk fallacies and confirm wise intuitions of the security practitioners around this aspect of hashtag#cloud hashtag#security.

Add session CLS-W09, "The Impact of Security Usability Challenges in Cloud Environments", to your conference schedule now! See you all on March 25th, 2026 at 2:25 PM.

#RSAC #RSAC2026

Thrilled to announce that my talk with @boblord has been accepted to #RSAC! We’re speaking on “Less Blood, More Bits: Learning From ‘Near Misses’ In Cybersecurity.”

You Think There's Time—Until There Isn't

The 2026 Cybersecurity Conference Season Is Coming—And Coverage Spots Are Limited And Moving Fast.

For over 10 years, ITSPmagazine has been on the ground at the industry's most important events. These conferences are where we reconnect with our community, where the conversations that matter happen, and where the future of cybersecurity takes shape.

Our coverage goes deep: daily recaps, editorial opinion pieces, extensive photo documentation, and conversations with the experts we've known for years alongside the new voices shaping what comes next.

Three Major Events in 2026:

📍 RSAC Conference | San Francisco | March 23–26

📍 Infosecurity Europe | London | June 3–5

📍 Black Hat USA | Las Vegas | August 1–6

We'd love for you to join us on this adventure and place your brand in the spotlight as we share what happens on location and reveal the future of our industry.

What We Offer:

🎯 Full Coverage Sponsorship – Your brand sponsors all editorial content before, during, and after the event. Includes pre-event briefing, on-site conversation with Sean Martin, CISSP and me, banner advertising, sponsorship recognition across articles and podcasts, and full content rights. $3,000 per event. Six spots per event.

🎙️ On-Location Briefing – 20-minute recorded briefing, companion article, placement on event coverage page, full content rights. $1,500 per event. Six spots per event.

Special Offer:

Two Full Coverage Sponsorships: $5,000 (save $1,000) – Use code 1KOFFTWO

Both programs traditionally sell out before event dates.

📋 Learn More & Book: https://www.studioc60.com/performance

💳 Book Two Events (Special Offer): https://payments.itspmagazine.com/b/00w3cu1AebQD3wYedk4ZG0F

☎️ Sean and I are happy to get on a call and answer your questions: https://cal.com/team/itspmagazine/program-preview

View Our Coverage Pages:

RSAC: https://www.itspmagazine.com/rsac-2026-conference-san-francisco-usa-cybersecurity-event-infosec-conference-coverage

Infosecurity Europe: https://www.itspmagazine.com/infosecurity-europe-2026-infosec-london-cybersecurity-event-coverage

Black Hat USA: https://www.itspmagazine.com/black-hat-usa-2026-cybersecurity-event-coverage-in-las-vegas

See all our event coverage: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

Join us!

Marco Ciappelli & Sean Martin, CISSP

#Cybersecurity #InfoSec #RSAC #InfoSecurityEurope #BlackHat #EventCoverage #MediaPartnership #cybersecuritymarketing #cybersecurityevents

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“DevSecOps Worst Practices”
📽️ https://twp.ai/4ip1ZL

#CyberSecurity #SecurityAwareness #appsec #RSAC

Develop and implement a secure generative Al Slack bot with guidance from Veradigm Sr Principal Software Engineer Kyler Middleton in this #RSAC Webcast.

Wednesday the September 19 @ 1:00 PM ET

Register: https://www.rsaconference.com/library/webcast/194-secure-ai-assistant

Develop and implement a secure generative Al Slack bot with guidance from Veradigm Sr Principal Software Engineer Kyler Middleton in this #RSAC Webcast.

September 19| 1:00 PM ET

Register: https://www.rsaconference.com/library/webcast/194-secure-ai-assistant

BLACK HAT FIRESIDE CHAT: Straiker extends ‘red teaming’ to the AI layer as AI attacks surge - The enterprise software model that defined the past two decades — SaaS — is being ... https://www.lastwatchdog.com/black-hat-fireside-chat-straiker-extends-red-teaming-to-the-ai-layer-as-ai-attacks-surge/ #firesidechat #topstories #rsac

MY TAKE: The GenAI security crisis few can see — but these startups are quietly mapping the gaps - LAS VEGAS — A decade ago, the rise of public cloud brought with it a familiar patt... https://www.lastwatchdog.com/my-take-the-genai-security-crisis-few-can-see-but-these-startups-are-quietly-mapping-the-gaps/ #topstories #mytake #rsac

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“DevSecOps Worst Practices”
📽️ https://twp.ai/4ioAXg

#CyberSecurity #SecurityAwareness #appsec #RSAC

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“DevSecOps Worst Practices”
📽️ https://twp.ai/4ioMmQ

#CyberSecurity #SecurityAwareness #appsec #RSAC

STRATEGIC REEL: APIs are the new perimeter — and business logic attacks are slipping through - APIs have become the digital glue of the enterprise — and attackers know it.
Relat... https://www.lastwatchdog.com/strategic-reel-apis-are-the-new-perimeter-and-business-logic-attacks-are-slipping-through/ #topstories #rsac

So #DEFCON is a ”US native born persons with no hint of international connections only” event now for actual physical presence? Or do the goons, bless them, help you against ICE?

Puts a whole new ”frisson” on ”Spot the Fed”, I suppose - win, get a teesh; lose, get a paid vacation to South America.

Jokes aside, does *any* foreigners go to US convs like #DEFCON, #BlackHat, #RSAC or #SANS anymore? I sure af wouldn’t right now, and I’m as male, white, middle+aged, fat, priviliged and downright boring as they come.

STRATEGIC REEL: APIs are the new perimeter — and business logic attacks are slipping through - APIs have become the digital glue of the enterprise — and attackers know it.
Relat... https://www.lastwatchdog.com/strategic-reel-apis-are-the-new-perimeter-and-business-logic-attacks-are-slipping-through/ #topstories #rsac

In this #RSAC conference interview, I sit down with Dustin Lehr to dive into the power of Security Champions Programs—why they matter, how to build them, and what makes them succeed.
https://twp.ai/4in4Hr
1/2

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“DevSecOps Worst Practices”
📽️ https://twp.ai/4in9of

#CyberSecurity #SecurityAwareness #appsec #RSAC

RSAC Fireside Chat: Operationalizing diverse security to assure customers, partners–and insurers - Catastrophic outages don’t just crash systems — they expose assumptions.
Related: ... https://www.lastwatchdog.com/rsac-fireside-chat-operationalizing-diverse-security-to-assure-customers-partners-and-insurers/ #topstories #rsac

I had the opportunity to sit down with former DTer, Joe Slowik at #RSAC to talk about suspicious domains.

Here are some of the key takeaways from our conversation:

🔹 Joe shared how attackers are playing the long game—like in the SolarWinds attack, where a fake AWS domain sat dormant for nearly a decade.
🔹 From aged domains to hijacked home routers, adversaries are evolving. And groups like Volt Typhoon are targeting U.S. critical infrastructure with chilling precision.
🔹 It’s time to rethink defense—beyond tools, toward resilient architecture and even manual fallbacks.

Listen to the podcast here: https://podcasts.apple.com/us/podcast/breaking-badness/id1456143419?i=1000711183082

Cyber threats are personal: watch Vivian Schiller, Kiersten Todt, and Michael Schmidt, and me take main stage at #RSAC to discuss how storytelling helps us fight back
#Take9 #CyberCivilDefense
https://www.youtube.com/watch?v=J0Qk3BlMb6c

I just published my Trip Report from an amazing week at B-Sides SF and #RSAC2025! Highlights, photos, and everything in between — check it out here:
https://twp.ai/4in5Xh

#AppSec #BSidesSF #RSAC #Infosec

In this #RSAC conference interview, I sit down with Dustin Lehr to dive into the power of Security Champions Programs—why they matter, how to build them, and what makes them succeed.
https://twp.ai/4in5XR
1/2