Quick Summary
ChiBrrCon 2026, held at the Illinois Institute of Technology, featured over 800 attendees and 27 speakers discussing the impact of AI on security practices. Key sessions included Joshua Peltz’s crisis response strategies, Paul Hill’s insights on modernizing security operations, and Bill Bernard’s warnings about generative AI risks. The conference emphasized the need for operational agility in adapting to AI-driven challenges, highlighting that traditional security models may no longer suffice.
The Securityish Brief
ChiBrrCon 2026 took place at the Illinois Institute of Technology, marking the largest installment of the conference with over 800 tickets sold. The event featured 27 speakers who shared insights on the evolving landscape of cybersecurity, particularly in the context of AI-driven code and applications. Key sessions addressed the urgent need for security teams to adapt their strategies in response to the complexities introduced by AI.
Joshua Peltz, VP of Zero Networks, drew parallels between crisis response in aviation and cybersecurity during his session titled “Resiliency through Adversity: Comparing ‘Flight 1549’ with a Cyber Breach.” He emphasized the importance of preparation and clear communication during incidents, advocating for a focus on containment before recovery and attribution.
Paul Hill from Palo Alto Networks discussed the challenges faced by modern Security Operations Centers (SOCs) in managing the overwhelming volume of daily log events. He highlighted how machine learning (ML) can streamline operations by consolidating data into meaningful incidents, allowing analysts to focus on threat hunting and detection engineering.
Bill Bernard, Field CTO at Between Two Firewalls, warned about the risks associated with generative AI, emphasizing that while it may seem intelligent, it lacks true understanding and can produce confidently incorrect outputs. He urged teams to treat AI as a tool rather than a cognitive partner.
Sean Juroviesky, Security Architect at SoundCloud, presented on the risks of AI illiteracy, linking it to traditional security vulnerabilities. He stressed the importance of mapping trust boundaries and maintaining visibility into data flows to mitigate risks.
Why Operational Agility Is Crucial
The conference underscored that operational agility is essential for security teams to adapt to the rapid pace of AI-driven changes. This agility involves acting on the best available information, even when it is incomplete, and prioritizing actions under pressure. The need for clear authority and decision-making rights was emphasized to prevent hesitation during incidents.
Ultimately, ChiBrrCon 2026 highlighted that the challenges posed by AI are not new but have been accelerated. Building operational agility requires proactive measures, such as stress-testing runbooks and ensuring alerts provide context rather than noise.
- Joshua Peltz, VP of Zero Networks, discussed crisis response strategies using aviation parallels.
- Paul Hill from Palo Alto Networks emphasized the need for ML to streamline SOC operations.
- Bill Bernard warned about the risks of generative AI, stressing it lacks true understanding.
- Sean Juroviesky highlighted the importance of visibility and risk mapping in AI security.
- The conference focused on building operational agility to adapt to AI-driven challenges.
Key Takeaways
- Review and stress-test your incident response runbooks to ensure they are effective under pressure.
- Implement machine learning tools to help streamline your security operations and reduce alert fatigue.
- Educate your team about the limitations of generative AI to avoid over-reliance on its outputs.
- Map your organization’s trust boundaries and ensure visibility into data flows to identify potential risks.
- Foster a culture of operational agility by encouraging quick decision-making in uncertain situations.
Key Terms & Concepts
- Operational Agility: In this article, operational agility refers to the ability of security teams to adapt and respond quickly to incidents in a fast-paced environment.
- Generative AI: Generative AI is a type of artificial intelligence that produces outputs based on statistical predictions from training data, lacking true understanding or context.
- Security Operations Center (SOC): A Security Operations Center is a centralized unit that deals with security issues on an organizational and technical level.
Read the original article here: https://securityboulevard.com/2026/02/ai-is-making-security-more-agile-highlights-from-chibrrcon-2026/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
