RSAC 2026 Recap: Agentic AI, the Death of the SIEM, and 22-Second Breakouts
Episode notes
In 2022, the median time between initial access and the secondary threat hand-off was 8 hours. At RSAC 2026, Mandiant put the new number on the main stage: 22 seconds. That one stat explains everything that got announced in San Francisco this year.
This episode of Tech Updates is a full RSAC 2026 recap — the product flood, the agentic AI pivot, and the six predictions every CISO and senior engineer should be tracking over the next 12 months.
⏱ CHAPTERS
0:00 — Intro
0:03 — Cold open: the 22-second attacker hand-off
0:31 — Segment 1: Agentic AI, for real this time
2:20 — Agent Identity & Runtime Control
3:35 — Agentic SOC & the Death of the SIEM
5:09 — AI-Generated Code Security
5:43 — Post-Quantum, Quietly
6:36 — Palo Alto's Full Stack
6:55 — The Cryptographers' Panel
8:10 — Six Predictions for the Next 12 Months
10:45 — The honest takeaway
🔑 VENDORS & PRODUCTS COVERED
• Cisco DefenseClaw · Duo IAM for agents
• Microsoft Entra ID + Foundry guardrails
• Teleport Beams (per-agent Firecracker micro-VMs)
• 1Password Unified Access (Anthropic, Cursor, GitHub, Perplexity, Vercel)
• Astrix Security · shadow agent coverage
• Databricks Lakewatch — agentic SIEM
• Google Cloud Triage & Investigation Agent
• Accenture + Anthropic Cyber.AI
• CrowdStrike Charlotte AI AgentWorks
• SentinelOne Prompt AI Agent Security
• Secure Code Warrior Trust Agent: AI
• Black Duck Signal
• ZeroTier Quantum (hybrid PQC transport)
• Palo Alto Prisma AIRS 3.0 · Agentic SASE · Prisma Browser for Business
• pQCee crypto-agile CNG
• SandboxAQ AQtive Guard
• Acalvio 360 Deception
🎤 KEY QUOTES
"With chatbots you worry about getting the wrong answer. With agents you worry about taking the wrong action." — Jeetu Patel, Cisco
"AI will kill the SIEM in 2026." — Ali Ghodsi, Databricks CEO (CNBC)
"The cryptographic algorithms have really held up over the last 25 years. You can't say that about a lot of areas within cybersecurity." — Paul Kocher, 25th Cryptographers' Panel
"We're spending more on cybersecurity than ever before, but the breaches keep happening. Something is fundamentally broken about how we've approached this problem." — Karl Van den Bergh, Illumio
🎯 SIX PREDICTIONS FOR THE NEXT 12 MONTHS
1. Non-human identity becomes the primary identity problem
2. MCP is now part of the attack surface — treat it like an API gateway
3. The SOC gets automated, or it gets outrun
4. Prompt injection is the new SQL injection
5. Post-quantum is closer than you think (CNSA 2.0 deadlines are real)
6. Active defense and deception are coming back
📚 SOURCES
Mandiant M-Trends 2026 · RSAC 2026 official press releases · SecurityWeek daily roundups · Help Net Security · Futuriom · Google Cloud blog · Lumu Technologies recap · Biometric Update · Govtech Lohrmann column · Hive Pro disclosure of Operation Olalampo + Rust-based Char backdoor
🎧 LISTEN & SUBSCRIBE
Spotify · Apple Podcasts · YouTube
New episode every week.
#RSAC2026 #AgenticAI #Cybersecurity #SIEM #ZeroTrust #PostQuantum #InfoSec #CISO #MCP #PromptInjection #AIAgents #RSAConference