In 2022, the median time between initial access and the secondary threat hand-off was 8 hours. At RSAC 2026, Mandiant put the new number on the main stage: 22 seconds. That one stat explains everything that got announced in San Francisco this year.

This episode of Tech Updates is a full RSAC 2026 recap — the product flood, the agentic AI pivot, and the six predictions every CISO and senior engineer should be tracking over the next 12 months.

⏱ CHAPTERS

0:00 — Intro

0:03 — Cold open: the 22-second attacker hand-off

0:31 — Segment 1: Agentic AI, for real this time

2:20 — Agent Identity & Runtime Control

3:35 — Agentic SOC & the Death of the SIEM

5:09 — AI-Generated Code Security

5:43 — Post-Quantum, Quietly

6:36 — Palo Alto's Full Stack

6:55 — The Cryptographers' Panel

 ...