Ghosts in the Network: APTs, AI and the Future of Cyber Defense (CEU Approved)

State-sponsored threat actors like those behind Volt Typhoon aren’t relying on zero-days or smash-and-grab exploits—they’re quietly infiltrating critical networks by exploiting public vulnerabilities, using stolen credentials and leveraging built-in system tools to stay undetected for months. These campaigns are designed to evade EDR, avoid raising alarms and exploit blind spots that traditional controls were never designed to monitor.

Join Corelight Advisory Member and former NSA Cybersecurity Director Rob Joyce and Corelight’s Field CTO Vincent Stoffer for a high-impact session exploring how today’s Advanced Persistent Threats (APTs) evade detection and how defenders can turn the network into their advantage. Together, they’ll break down the anatomy of stealthy campaigns like Volt Typhoon, explain how "living-off-the-land" techniques operate in practice and show why network-based visibility is critical for catching what endpoint tools miss.

Whether you’re protecting federal agencies, critical infrastructure, or commercial enterprises, this session delivers practical insight into:

• Detecting threats that don't use flashy exploits
• Understanding the evolving role of AI in both attack and defense
• Using NDR to provide clarity, context and confidence in your security operations

The threats may be stealthy—but the answers are in the network.