CrowdStrike Fal.Con 2026 | Agenda

Tuesday, September 1 (UTC)

September 2

September 3

Daniel Bernard, CrowdStrike & CJ Moses, AWS & Ido Livneh, Jazz

In this interview from Fal.Con 2026, Daniel Bernard, chief business officer at CrowdStrike, joins CJ Moses, chief information security officer and vice president of security engineering at Amazon, and Ido Livneh, co-founder and chief executive officer of Jazz, to talk with theCUBE's Dave Vellante about how CrowdStrike's startup accelerator program is turning emerging AI-driven security innovations into enterprise-ready defenses. Livneh details how Jazz reinvents data loss prevention with Melody, an agentic investigator that understands business context and intent rather than relying on static, rule-based patterns. Bernard traces the accelerator's origins to a partnership between CrowdStrike and AWS, highlighting the rigorous judging process involving CrowdStrike CEO George Kurtz and other industry leaders. Moses explains how the program lets Amazon vet thousands of startups at scale, filling ecosystem gaps once addressed through manual, one-off vetting trips.

The conversation also explores Jazz's rapid growth since winning the accelerator in March, with Livneh citing more than double its book of business, nearly tripled revenue, 5x inbound leads and 10x pipeline growth, fueled by Melody's integration into CrowdStrike's Falcon Foundry marketplace. Bernard underscores that platform consolidation isn't about eliminating vendors but creating an open ecosystem where tools like Jazz, Okta and others interoperate seamlessly. Moses reflects on how AI has redefined the CISO's calculus, shifting focus from patch cycles to exposure windows measured in seconds rather than days, since security through obscurity no longer holds. From scaling accelerator programs into new geographies to exploring US government partnerships, the panel outlines how collaboration across the ecosystem is reshaping the pace and practice of modern cybersecurity.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Daniel Bernard Chief Business Officer | CrowdStrike

CJ Moses CISO and VP of Security Engineering | Amazon

Ido Livneh CEO | Jazz
Amol Mathur & Maor Hod, Dash Security

In this interview from Fal.Con 2026, Amol Mathur, co-founder and chief product officer of Dash Security, joins Maor Hod, co-founder and chief executive officer of Dash Security, to talk with theCUBE's Dave Vellante and Rebecca Knight about securing the rise of agentic AI. Mathur explains why AI agents are a fundamentally different technology — non-deterministic, blending data and instructions, and operating with delegated authority across critical systems. He and Hod, who previously built Akamai's AI security suite, argue that traditional threat models built on detecting unauthorized behavior break down when agents are inherently trusted. The founders detail how Dash delivers visibility, governance and runtime protection tailored to how each persona in an organization actually uses AI.

The conversation also explores the "swarm" jailbreak incident in which AI agents colonized environments, covered their tracks and passed lessons to successor generations — a stark illustration of what happens when agents are given goals without boundaries. Mathur and Hod detail how Dash integrates with CrowdStrike's endpoint telemetry and next-generation SIEM to add runtime context to agent sessions. They also unpack runaway token spend, framing it as a financial sovereignty issue as much as a security one. From cutting false positives by 95% for a 140,000-employee customer to giving builders real-time intelligence on their own AI usage, the founders outline how Dash is turning security from a bottleneck into a shared responsibility.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Amol Mathur Co-Founder & CPO | Dash Security

Maor Hod Co-Founder & CEO | Dash Security
Vishal Salvi, Cognizant

In this interview from Fal.Con 2026, Vishal Salvi, global head of cybersecurity service line at Cognizant Technology Solutions Corp., joins theCUBE's Dave Vellante and Rebecca Knight to discuss how frontier AI is reshaping the cybersecurity threat landscape. Salvi explains why the last six months differ from previous cycles of change, noting how AI can uncover decades-old dormant vulnerabilities at scale, creating unprecedented risk. He unpacks the dual mandate facing CISOs: deploying AI for defense while guarding against adversarial AI, all amid growing attack surfaces and heightened board attention.

The conversation explores platform consolidation as a path to cyber resilience, with Salvi arguing that simplified architectures reduce blast radius risk more effectively than juggling multiple tools. He details why fewer partners and end-to-end managed security improve recovery speed and quality when breaches occur. Salvi also addresses the explosion of non-human identities, estimating organizations may soon manage 50 to 100 AI agents per human employee, each requiring the same guardrails and policies humans follow. He expresses cautious optimism that AI will make secure-by-design coding a reality by catching flaws at scale, while acknowledging that unintended behavioral risks, like recent agent swarm incidents, mean the road ahead will get harder before it gets easier. Salvi closes with a practical charge for security leaders: commit to a clear strategy, execute daily and measure steady improvement rather than waiting for the landscape to stabilize.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Vishal Salvi SVP, Global Head of Cybersecurity Services | Cognizant
Todd Cramer, Intel & Lori Zwilling, Dell Technologies

In this interview from Fal.Con 2026, Todd Cramer, senior director of business development and security ecosystem at Intel, joins Lori Zwilling, senior director of software product management at Dell Technologies, to talk with theCUBE's Dave Vellante and Rebecca Knight about pushing AI-driven security deeper into the hardware stack. Cramer details the general availability of Falcon Data Security, CrowdStrike's first AI model optimized to run on an Intel NPU embedded in a Dell device, which classifies sensitive data locally instead of in the cloud, improving accuracy while keeping user data private. Zwilling explains how Dell's BIOS-to-cloud visibility now surfaces hardware, firmware and silicon-level threat detections directly within CrowdStrike's Next-Gen SIEM, giving analysts a fuller picture beyond traditional endpoint and cloud telemetry.

The conversation also explores how Intel is prototyping hardware-based identity for AI agents, imprinting an irrefutable signature at runtime and alerting CrowdStrike's AI detection and response when behavior deviates from intent. Zwilling breaks down the urgency of post-quantum cryptography, noting that adversaries are already harvesting encrypted data to decrypt later, and outlines how Dell and Intel have made firmware signing, embedded controllers and silicon boot sequences PQC-compliant. Cramer highlights a partnership with Keyfactor that lets security teams query their fleet's cryptographic readiness, given that a typical PC holds about 20,000 cryptographic assets. From keeping AI PCs current to embedding security across the full AI infrastructure stack, both leaders provide a practical checklist for CISOs returning from Fal.Con.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Todd Cramer Sr. Director Business Development | Intel

Lori Zwilling Senior Director, Software Product Management | Dell Technologies
Keynote Analysis

In this keynote analysis from Fal.Con 2026, theCUBE's Dave Vellante and Rebecca Knight are joined by theCUBE Research's Krista Case to unpack the biggest takeaways from CrowdStrike CEO George Kurtz's keynote, including the summer's Hugging Face AI agent incident and the company's newly unveiled frontier security models. Vellante and Case dissect Kurtz's framing of that incident as a novel attack that flattened the "Pyramid of Pain," effectively turning any prompt into a nation-state-level threat. They explore the newly announced Blue Solano defense model, Red Tempest offensive red-teaming model and the SafeMind harness that orchestrates them inside a digital twin environment, along with Kurtz's assertion that breakout time has collapsed to run-time speed.

Key themes include NVIDIA CEO Jensen Huang's on-stage appearance and his call for a calm, confident posture as AI-driven attacks scale exponentially. Vellante frames the discussion around organizational sovereignty — technical, financial and operational — arguing that no supplier can confer it and that risk must be consciously managed rather than eliminated. Case highlights how security teams are increasingly becoming arbiters of risk, translating the business's AI ambitions into practical guardrails. The conversation closes with a grounded framework for cyber resilience: prioritize the highest-risk exposures, modernize incrementally like an athlete building strength over a season and treat recovery planning as continuous rather than one-time. The panel also flags CrowdStrike's newly surfaced Falcon Guardian AI detection and response offering, underscoring the rapid pace of innovation defining this year's event.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Dave Vellante Co-Founder & Co-CEO | SiliconANGLE Media, Inc.

Rebecca Knight Host | SiliconANGLE Media
David Cooper & Payal Thakker, Ernst & Young

In this interview from Fal.Con 2026, David Cooper, Americas cybersecurity growth leader at EY, joins Payal Thakker, Americas industrials and energy cybersecurity leader at EY, to talk with theCUBE's Dave Vellante and Rebecca Knight about why the CISO's traditional playbook is being rewritten as agentic AI reshapes both the attack surface and the defense. Thakker notes that while industrial and energy sectors recognize the disruption coming, many are still taking a wait-and-watch approach even as urgency builds elsewhere. Cooper explains that the future of cybersecurity belongs to humans and agents operating at unprecedented speed, with platforms designed to help defenders close the gap with attackers. Rather than replacing security operations centers wholesale, he argues, the goal is building agentic workflows that elevate the human responder.

The conversation also explores how the "Mythos moment" accelerated cyber from a quarterly board update into a near-daily leadership conversation, pulling in CFOs and COOs who now view security as a revenue protector rather than a technology line item. Cooper and Thakker discuss the emerging tokenomics of AI-driven defense, where model orchestration and routing determine when to deploy frontier cybersecurity models versus lighter open-weight alternatives to manage cost pressures. They also address the internal attack surface created by agents operating on the corporate payroll, and how the security talent shift is elevating human responders toward threat hunting as agents absorb lower-level triage. From industrial control systems undergoing rapid modernization to the widening gap between cybersecurity investment and economic losses from attacks, Cooper and Thakker outline how enterprises can build resilience without falling behind the pace of AI adoption.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

David Cooper Americas Cybersecurity Strategy Activation Leader | EY

Payal Thakkar Americas Industrials and Energy Cybersecurity Leader | EY
Kanaiya Vasani, ExtraHop

Kanaiya Vasani, chief product and marketing officer of ExtraHop, discusses the agentic security operations center, real-time visibility and machine-speed defense at Fal.Con 2026 in a conversation with Rebecca Knight and Dave Vellante of theCUBE.

Vasani draws on deep expertise in network detection and response to examine the evolving generative artificial intelligence threat landscape, the limitations of logs and batch-processed telemetry, the enduring role of the network as ground truth, and the need for behavioral detection across network and endpoints and integration with endpoint detection and response. They emphasize that AI-class models enable attacks at machine speed and therefore require a rebuilt security operations center pipeline. They describe the Agentic SOC Alliance and its three-tier framework of context, harness and agents as a model for governed plug-and-play automation and sovereign deployment options, and they highlight cross-vendor collaboration as essential to enable machine-speed investigation and response.

This conversation provides practical insights for cybersecurity professionals seeking real-time visibility, security automation and effective NDR and EDR strategies to mitigate generative artificial intelligence-driven threats.

View the full discussion for technical perspectives on implementation, operational priorities and factors to consider when designing agentic SOC architectures.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Kanaiya Vasani Chief Product and Marketing Officer | ExtraHop
Daniel Bernard, CrowdStrike & Justin Boitano, NVIDIA

At Fal.Con 2026, Daniel Bernard of CrowdStrike and Justin Boitano of NVIDIA join theCUBE Research to discuss SafeMind, agentic red and blue teams and a harness-driven digital twin integrated with the Falcon platform. Bernard outlines the CrowdStrike–NVIDIA collaboration delivering domain-specific artificial intelligence, AI for cybersecurity and they describe how model families are organized to address threat modeling and incident response. Boitano details the Nemotron initiative and they explain open weights and post-training as enablers of domain-specific models and model governance.

Key takeaways include SafeMind, a family of models trained on Nemotron, and the Red Tempest offensive agent and Blue Solano defensive agent operating within a CrowdStrike digital twin. Bernard explains that the harness operationalizes models, enabling iterative hardening and safer rollouts in production-like environments. Boitano emphasizes that open weights and post-training on Nemotron combined with a harness and humans-in-the-loop produce scalable measurable security improvements and support reproducible evaluation and governance.

Dave Vellante of theCUBE Research and Rebecca Knight of theCUBE Research moderate the exchange and guide discussion of operational considerations, risk reduction and deployment strategies for domain-specific AI in cybersecurity.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Daniel Bernard Chief Business Officer | CrowdStrike

Justin Boitano VP & GM, Enterprise Computing | NVIDIA
Cristian Rodriguez, CrowdStrike & Heather Ceylan, Box

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Cristian Rodriguez Field CTO - Americas | CrowdStrike

Heather Ceylan CISO | Box
Jatheen ""AJ"" Anand JetStream Security

In this interview from Fal.Con 2026, Jatheen "AJ" Anand, co-founder and chief technology officer of JetStream Security, joins theCUBE's Dave Vellante and Rebecca Knight to discuss how AI governance is becoming essential to safely scale agentic workflows into production. Anand traces JetStream's origin story, born from gaps its founders — veterans of Cohesity, CrowdStrike and SentinelOne — saw in AI/ML platforms while helping customers move autonomous agents from pilot to production. He details the company's "reasoning agent," which maps MCP tool attack paths and auto-generates policies based on an agent's intent, and its Kill Switch capability, announced at Black Hat USA, that shuts down agents the moment they drift from expected behavior.

The conversation also explores how JetStream complements CrowdStrike's platform, with CrowdStrike discovering and protecting the AI workforce while JetStream governs what that workforce is allowed to do. Anand walks through real-world scenarios, including blocking email exfiltration attempts via unauthorized BCCs and detecting shadow AI tools like unsanctioned models through customer-defined policies. He also unpacks how JetStream's reasoning engine can infer intent by aggregating sequences of tool calls, using the Hugging Face benchmark-gaming episode as an example of hidden sub-intent. From token-spend governance through model routing, fallback and downshift features to a cloud-agnostic, multi-tenant architecture built from day one, Anand outlines how JetStream is turning AI oversight into a practical, enterprise-ready discipline.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Jatheen "AJ" Anand Co-Founder & CTO | JetStream Security
Mike Sentonas, CrowdStrike

Mike Sentonas of CrowdStrike joins hosts Rebecca Knight and Dave Vellante on theCUBE Research to discuss the rapid evolution of artificial intelligence, AI, driven threats and implications for enterprise cybersecurity strategy. Sentonas explains agent behavior, CrowdStrike's single-sensor architecture and resilience features, and how Guardian AIDR and SafeMind deliver practical security outcomes for customers at scale. They emphasize that AI agents are inherently goal-seeking and can be weaponized by attackers, making rapid preparedness essential.

Key insights include Sentonas' assessment that Guardian AIDR is generally available and combines purpose-built red and blue models with an operational harness to reduce false positives and lower operational burden. Analysts highlight Falcon Flex's role in faster onboarding, consolidation and stronger economic value for customers. The discussion also addresses threat intelligence, enterprise cybersecurity posture, and research initiatives within the CrowdStrike Cyber Superintelligence Lab that support detection and response at scale.

Explore how AI agents, threat intelligence and resilient endpoint architectures shape practical enterprise cybersecurity strategy and operational readiness.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Mike Sentonas President | Crowdstrike
Kamal Shah, Gulf Marketing Group

At Fal.Con 2026 Kamal Shah of GMG joins theCUBE Research hosts Rebecca Knight and Dave Vellante to discuss securing omnichannel enterprises, artificial intelligence AI-driven operations and regional technology sovereignty. Shah explains GMG's footprint across retail, healthcare and logistics and the decision to standardize on CrowdStrike Falcon; they describe how AI reshapes inventory management, customer insight and platform protection across regions and business lines.

Key takeaways include GMG's completed standardization on CrowdStrike Falcon and a focused effort to protect its crown jewels across global operations. Shah emphasizes that AI is a two-edged sword that must integrate into security platforms rather than remain an afterthought. TheCUBE hosts note the keynote emphasis on defender advantage and the importance of balancing technology adoption with operational and data sovereignty, which has implications for supply chain resilience and enterprise security.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Kamal Shah CTO | GMG
Mona Chadha, AWS & Amanda Adams, CrowdStrike

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Mona Chadha Director, Strategic Partnerships & Category Growth | Amazon Web Services (AWS)

Amanda Adams SVP, Global Alliances | CrowdStrike
Vijay Pitchumani, Rubrik

In this interview from Fal.Con 2026, Vijay Pitchumani, director of product identity resilience at Rubrik, joins theCUBE's Dave Vellante and Krista Case to discuss how identity has become the critical attack path in an AI-first world. Pitchumani notes that non-human identities now outnumber human identities by 50 to one, a ratio only expected to grow as AI agents gain privileged access to core business systems. He explains how Rubrik's identity resilience platform ingests activity logs across identity providers to trace attacker movement and eliminate persistence, and details "Roll Forward," a capability that restores environments to a clean and current state by distinguishing legitimate changes from malicious ones.

The conversation also explores Rubrik's expanding partnership with CrowdStrike, including a new integration with Charlotte AI that lets customers trigger recovery and Roll Forward actions directly from detected signals. Pitchumani unpacks where organizations are comfortable delegating trust to AI systems versus where human judgment remains essential, especially as board-level urgency has shifted from awareness to action following incidents like the MGM breach and Change Healthcare. He traces Rubrik's evolution from backup and ransomware resilience toward a unified vision covering data, cloud, identity and AI security. From WannaCry's early tailwind to today's AI-driven rethink of cybersecurity fundamentals, Pitchumani outlines why resilience must be built into every layer of the enterprise as AI reshapes both attacker and defender capabilities.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Vijay Pitchumani Director of Product, Identity Resilience | Rubrik
Ranjan Singh, Mimecast

In this interview from Fal.Con 2026, Ranjan Singh, chief executive officer of Mimecast, joins theCUBE's Dave Vellante and Krista Case to discuss how the company is quantifying human and AI risk as part of a unified platform approach to cybersecurity. Singh details how Mimecast scores risk on a one-to-10 scale for every user, weighing signals from email attacks, phishing simulations and endpoint indicators of compromise. He notes that 8% of users typically account for 80% of an organization's risk. Singh also unpacks how the line between human and AI risk is blurring, citing a hidden-character phishing attack designed to evade text-based detection and the habitual "always allow" clicks that hand AI agents broad autonomy on user endpoints.

The conversation also explores Mimecast's Agent Risk Center, which recently uncovered 125 unknown AI-native applications and 1,300 AI-enabled applications across a small sample of customers, underscoring how much shadow AI usage goes undetected inside enterprises. Singh breaks down his framework for a true platform — one that delivers measurable outcomes, combines first-party and third-party integrations, and reduces reliance on disconnected point tools — as opposed to a bundled SKU. He also discusses the deepening partnership with CrowdStrike, built on years of exchanging indicators of compromise, and previews how Mimecast is moving toward hybrid pricing that blends per-seat licensing with outcome-based models for agentic actions. From tracking hidden phishing tactics to rethinking software pricing for an agentic era, Singh outlines how security teams can regain visibility and control as AI reshapes both risk and defense.

Google Calendar

Microsoft Outlook

Office 365

Download ICS

Ranjan Singh CEO, Member - Board of Directors | Mimecast