I speak at events and run sessions for organisations. Here are some of my recent talks and workshops.
The Age of AI-Driven Attacks
At Black Hat MEA in Riyadh I spoke about how artificial intelligence is changing the attacker’s playbook. Cybercriminals now use AI to move faster, customise each attack, automate their pipelines and scale extortion, which makes attacks harder to detect and harder to contain.
The talk mapped the main AI-driven threats by their impact and by how difficult they are to detect: AI-driven and polymorphic malware, automated exploitation, AI-enabled ransomware, AI-enhanced phishing and deepfakes, and AI disinformation campaigns. For each one, we looked at why traditional controls struggle and what defenders need to change.
The message for security leaders: attackers already work at machine speed, so detection and response have to work at the same speed, with AI on the defenders’ side as well.
Cybersecurity Awareness: Security Focus on the CIA Triad
A cybersecurity awareness session in Dammam built around the CIA triad, the three goals that every security control protects.
- Confidentiality: only the right people can see the information.
- Integrity: information stays accurate and is not changed without authorisation.
- Availability: systems and data are there when the business needs them.
The session connected each goal to everyday work: handling sensitive information, recognising suspicious messages and links, protecting accounts and devices, and reporting incidents early, so that every employee understands their part in protecting the organisation.
Managed Detection & Response (MDR) Workshop
A workshop in Riyadh on Managed Detection and Response (MDR): how an MDR service combines round-the-clock monitoring, threat detection and hunting, and incident response, delivered by a team of specialists on behalf of the organisation.
We looked at how MDR differs from a traditional in-house SOC or a classic managed security service, what an organisation should expect from a provider, and how to measure the results, from the time it takes to detect and respond to the quality of the reporting.
The goal: to help security and IT leaders decide when MDR is the right model, and how to get real value from it.
Invite me to speak
To invite me to speak at your event, send me an e-mail.