1:30 pm

Registration

2:00 pm

Welcome & short introduction from the moderator Maria Zidkova, Security Officer at City of Zurich

2:00 pm

Benjamin Koltermann, Kubernetes Security Enthusiast and CTO of cenroq AG

The forgotten AI Security Layer in your Kubernetes Clusters
The combination of CNCF projects like Kubeflow and KServe with inference engines like vLLM has made Kubernetes the industry standard for AI deployments. While the industry focuses on application level threats like prompt injections or model poisoning, a critical question remains unanswered regarding the general security of the underlying AI infrastructure stack.

In this talk, we dive deep into the security of Kubernetes-native AI deployments. Moving from deployments on hyperscalers to sovereign on-premise configurations, this talk dives into Cloud Native AI infrastructure security. We will demonstrate real-world attack paths, expose common misconfigurations, and outline actionable strategies to safeguard your Kubernetes AI environments.

2:30 pm

Urs Würgler, Security Champion Banking at Swisscom AG

Zero-Touch PQC: Upgrading Cloud Infrastructure and Shielding Long-Lived Data
For long-lived data - such as backups or forensic archives with a lifespan of 10+ years - the quantum computer is not a distant future, but an immediate threat driven by "Harvest Now, Decrypt Later" attacks. At the same time, upgrading cloud infrastructure to Post-Quantum Cryptography (PQC) risks disrupting live operations through massive key encapsulation payloads, network fragmentation, and middlebox intolerance.

This session delivers a pragmatic architectural blueprint to overcome this double challenge without overwhelming IT operations. We examine how to encapsulate long-lived data using hybrid ML-KEM and shield legacy backend services by terminating complex PQC traffic centrally at modern API gateways. The goal is scalability: Attendees will learn how to achieve a true "Zero-Touch" rollout by leveraging Cryptographic Bill of Materials (CBOM) in CI/CD pipelines, automated certificate rotation via ACME, and policy-driven secrets management.

Short Break

3:10 pm

Milos Pesic, Chief Information Security Officer at Accelleron

Cloud Security to AI-Augmented Cloud Resilience
Enabling AI Securely Without Reinventing Security

As organizations accelerate the adoption of Generative AI and Agentic AI, many assume cloud security must be reinvented. In reality, the fundamentals remain the same. Identity, governance, risk management, resilience, and incident response continue to provide the foundation for managing risks across modern cloud and AI-enabled environments.

This session explores how organizations can evolve from traditional Cloud Security to AI-Augmented Cloud Resilience by extending existing security capabilities rather than creating entirely new frameworks. Drawing on real-world CISO experience and PhD research in AI-Augmented Cyber Resilience, attendees will gain practical insights into securing AI-enabled services, autonomous agents, non-human identities, and increasingly dynamic cloud ecosystems while maintaining business agility and trust.

Key message: AI changes the environment, but it does not change the fundamentals. Success lies in augmenting what already works.

Alex Hoffmann, Enterprise Sales Engineer at Abnormal AI

Malicious v. Defensive: Behavioral Defense for the AI-Era Attack Chain
A different approach: shifting from detecting “bad” to understanding “normal.” By modeling how people communicate and how accounts behave, security teams can identify subtle anomalies that reveal even the most convincing attacks.

3:50 pm

Break

4:30 pm

3 different Breakout Sessions to join - you can choose/attend two of them

Breakout Session 1: Alex Hoffmann, Enterprise Sales Engineer at Abnormal AI 

From Known-Bad to Known-Normal: The Future of Threat Detection
Email and identity have become the primary attack surface as both the volume and sophistication of attacks accelerate. What’s changed is not just how many threats organizations face, but how convincingly they blend into everyday business communication. Messages mirror real conversations, and account activity follows expected patterns, leaving security teams struggling to separate signal from noise at scale.

In this session, we will examine how the threat landscape has shifted, why detection has become harder, and where traditional controls fall short. We explore the evolution of email-borne threats and identity-based attacks—from bulk phishing and stolen credentials to AI-generated social engineering, compromised identity providers, and multi-stage intrusions that pivot across SaaS applications and non-human identities. We'll make the case that the only durable defense is behavioral: modeling what normal looks like for every human and non-human identity, then surfacing the deviations that signal compromise. Attendees will leave with a practical framework for reasoning about AI-era risk and what it actually takes to defend against threats that move at machine speed.  

Breakout Session 2: Boris Achermann, Security Architect at City of Zurich / OIZ

End of Passwords: Securing Cloud Environments and Eliminating the Password Reset Trap
Passwordless authentication and passkeys have been available for several years—yet many companies still rely on traditional credentials. The biggest security bottleneck is often not the daily login, but the insecure password reset process (e.g., social engineering at the help desk or weak fallback mechanisms via email/SMS). At the same time, modern IT infrastructure is increasingly distributed across SaaS, PaaS, and IaaS, each with its own identity mechanisms, API access, and admin roles, and the rise of Adversary-in-the-Middle (AitM) attacks puts additional pressure on organizations.

How do we achieve a real exit from passwords across complex cloud ecosystems without creating new security vulnerabilities? Let's discuss practical challenges, identity governance, and shared solutions.

Breakout Session 3: Andrew Church, Director, Data Confidentiality Protection Leader at UBS AG

Benefits of Modern Cloud Controls
How are you using new SSPM, CASB and RBI to complement established cloud controls like DLP and Secure Web Gateway? I'm happy to share my experiences with you and am curious about yours - so let's discuss!

5:30 pm

Short break and change the room to the next Breakout Session of your choice

5:45 pm

Start of the second Breakout Session round

6:45 pm

Dinner & Networking till open end

Boris Achermann
Security Architect at City of Zurich/OIZ

Andrew Church
Director, Data Confidentiality Protection Leader at UBS AG

Milos Pesic
Chief Information Security Officer at Accelleron