How Modern Threat Actors Are Changing the Defense-in-Depth Playbook

October 8 · 9 AM PDT / 12 PM EDT / 6 PM CEST · Online

Ransomware is still growing, but payouts are shrinking. Enterprises got better at backups, so attackers moved to where defenses are thinner: SaaS, identity, and stolen credentials. Infostealers do the collecting at scale, and AI is widening the gap. Credentials for AI services were the fastest growing category of leaked secrets in 2025, up 81% year over year with 1.27 million exposed (State of Secrets Sprawl 2026). Most defense-in-depth programs were not built with this attack chain in mind.

Join Jason Baker (Practice Lead for Threat Intelligence, GuidePoint Security), Guillaume Valadon (Head of Cybersecurity Research, GitGuardian) and Dwayne McDaniel (Principal Developer Advocate, GitGuardian) for an interactive discussion on what defenders are seeing in the field and how to reassess your security posture against today's attacks.

What we will cover:

• How ransomware, SaaS, identity and credential-focused attacks evolved over the last year, based on GuidePoint's latest quarterly cybercrime research
• What GitGuardian research reveals about infostealer malware, secrets theft and the growing value of AI (and LLM keys) for adversaries
• Practical ideas for tabletop exercises built on real threat actor movements, and for securing the credential layer that underpins the whole attack chain