Behavioral Defense for the AI-Era Attack Chain

AI has given attackers the speed, scale, and sophistication to move through an enterprise before defenders even know they're in. At the same time, the rapid adoption of AI agents, OAuth-connected integrations, and cross-platform automation has created attack surface that most security stacks weren't built to monitor.

This session traces the evolution of email-borne threats and identity-based attacks—from bulk phishing and stolen credentials to AI-generated social engineering, compromised identity providers, and multi-stage intrusions that pivot across SaaS applications and non-human identities. We'll make the case that the only durable defense is behavioral: modeling what normal looks like for every human and non-human identity, then surfacing the deviations that signal compromise. Attendees will leave with a practical framework for reasoning about AI-era risk and what it actually takes to defend against threats that move at machine speed.