At RSAC 2026, the SANS Institute delivered a defining statement. For the first time in the conference’s 25-year history, every dangerous attack technique on its annual list involved AI.
In live demonstrations, attackers moved from initial access to full domain control in less than a minute using AI-driven workflows.