The Validation
Summit 26'

Part 01 · Opening keynote

Runtime · 24 mins

Mikko Hyppönen Keynote: Three Decades in Security. This One Is Different.

Mikko Hyppönen, malware researcher since 1991

From the ILOVEYOU worm to AI-discovered zero-days: why this shift is unlike any before it, and why AI-enabled attacks need AI-enabled defense.

What you will learn

• 01Why ransomware hunts exploitable bugs, not companies
• 02How frontier AI is changing zero-day discovery
• 03Why continuous testing is now essential

Part 02 · The answer

Runtime · 52 mins · includes Q&A

Adaptive Validation: Security Testing in the AI Era

Volkan Erturk, Co-founder and CTO, Picus Security

Exploitation now takes hours, so calendar testing leaves gaps. Volkan introduces Adaptive Validation: testing triggered by new threats, CVEs and changes in your environment.

What you will learn

• 01How BAS, autonomous pentesting and exposure validation fit together
• 02From threat signal to action in under six hours with Numi AI
• 03A practical adoption roadmap, plus live Q&A

Part 03 · The demo

Runtime · 23 mins

See It Run: One CVE From Exposed to Closed

Korhan Acar, Ceylin Yavuz and Gürsel Arıcı, Picus Security

One critical CVE, three validation methods, one evidence-based answer, walked live from three team seats.

• BlueBreach and Attack Simulation. Which controls block and detect the threat.
• RedAutonomous Penetration Testing. The attack path from SharePoint toward Domain Admin.
• GreenExposure Validation. Which assets to patch first, on evidence.

Part 04 · CISO fireside

Runtime · 37 mins

Hear It From the CISOs: Preparing for Mythos-Class AI Attacks

CISOs from the NFL and Atlassian, and a luxury retail security lead

Three security leaders on how they are adapting to Mythos-class attacks: what to prioritize, and how to prove defenses work.

What you will learn

• 01Why CVSS alone cannot set priorities
• 02Moving from periodic pentests to continuous validation
• 03Using risk indicators and AI agents to respond faster