The fastest path into cybersecurity is usually the longest one.
Eric Johnson, SANS Fellow, says to learn IT basics before security basics. Securing something you don’t understand is guesswork.
#SANSCDI 2026 has #CloudSecurity courses built for this: go.sans.org/usHyyV
$600,000 in tokens over three weeks, from an agent that handed over its own API key. The METR incident is a visibility problem first. @aboutsecurity, walks through the METR incident and three visibility challenges for AI agents, in @TheHackersNews: thehackernews.com/2026/09/ze…
81% of employees use unapproved AI tools. 1 in 5 orgs can actually see it happening. Here’s how to close that gap, five capabilities, five fixes. → go.sans.org/wSAkgm
An unverified AI finding can end up in court. For a general-purpose model, the exact version needs to be on record. Heather Barnhart, SANS VP of Curriculum, on documenting what produced a finding, in @TheHackerNews: thehackernews.com/2026/10/wh…
That gives the teams you support more time to reinforce their training after CDI, plus a path toward validating those skills through GIAC certification.
Worth putting in front of managers and practitioners planning their remaining 2026 training. See the CDI course catalog and where your vouchers can take them: go.sans.org/coWeIu
#SANSLiveTraining
Third-party breach exposure and AI failures in critical infrastructure stem from the same root cause: systems that have grown faster than most teams’ visibility into them.
Which worries you more?
0%Third-party breach
0%AI infrastructure failure
0%Both equally
0%Something else
0 votes • 1 hoursThe technology protecting critical infrastructure will keep evolving. The people defending it are the part that matters most.
Michael Harrison, Senior Managing Director, North America Public Sector at SANS Institute, points to how much of daily life, water, power, school, depends on infrastructure people rarely think about.
Tomorrow, October 27, Tim Conway, @RobertMLee, Mark Bristow, and Brian Harrell discuss what it takes to protect it at our executive roundtable.
Register now. go.sans.org/KWNZrC
#CriticalInfrastructure
Eight categories, and your vote picks the community's choice in each.
The 2026 SANS Difference Makers Awards celebrate practitioners, projects, and organizations. Which category do you know best? Voting closes Nov 9.
Cast your vote: feedback.sans.org/733559
For most of the country’s 250-year history, infrastructure was disconnected by design, mechanical and regional. There was no single system to take down.
.@RobertMLee says digitization and standardization made infrastructure more efficient, and also made it something that can now be attacked and taken down at scale.
This Tuesday, October 27, Lee joins Tim Conway, Mark Bristow, and Brian Harrell for an executive roundtable on what that shift means for critical infrastructure.
Register now. go.sans.org/KWNZrC
#CriticalInfrastructure
The way attackers get in has shifted, and credential theft is no longer leading the pack.
Phishing and exploited vulnerabilities are closing the gap fast, and most defensive strategies haven’t caught up yet.
What’s the #1 way in today?
0%Stolen credentials
0%Phishing
0%Exploited vulnerabilities
0%Other
0 votes • Final results SANS North America retweeted
.@secgreene says there’s no instructor bench in the industry that matches SANS.
The SANS Certified Instructor points to experience, knowledge, and dedication across the instructor core, instructors still working the problems they teach, able to answer your specific question.
See that bench at #SANSCDI 2026. go.sans.org/usHyyV
#SANSLiveTraining @SANSAmerica










