Session 2.8e Tutorial: Machine-speed Conflict: What Internet-scale Data Reveals about Threat Actor Evolution
Tracks
ㅤ
| Wednesday, November 18, 2026 |
| 4:00 PM - 5:00 PM |
| Sutherland Theatre |
Presentation Outline
Artificial Intelligence has fundamentally transformed the threat landscape. Cyber adversaries are evolving continuously, using industrialized automation, ephemeral infrastructure, and emerging AI capabilities to gain access to vulnerabilities prior to public disclosure and exploit them at machine speed before they become public. Telemetry indicates that threat actors employ AI-assisted reconnaissance and machine-speed exploitation, compressing vulnerability weaponization timelines from weeks to hours. Most significantly, it reveals that attacker behavior itself offers predictive signals: An analysis of 216 malicious activity spikes from GreyNoise Research revealed that 80% preceded CVE disclosures by up to six weeks.
This presentation summarizes 12 months of internet-scale threat telemetry from GreyNoise's Global Observation Grid: 847 billion observations, 12.4 billion malicious events, 2.4 million unique threat IPs, and 216 analyzed campaign spikes. The research reveals fundamental shifts in adversary structures, motivations, and operational tactics. Through analysis of billions of malicious observations, we document the industrialization of cyber operations—where threat actors operate as distributed automation ecosystems rather than individual operators. The key take-away is that attacker behavior offers predictive signals, providing defenders with an actionable early warning window. Defense must also evolve comparably, by leveraging automation, behavioral analytics, and predictive intelligence derived from internet-scale observation. This presentation addresses that challenge, and offers concrete, specific ways to implement intelligence-driven defense.
Speaker
Mr Shawn Smagh
Director of Intelligence
Greynoise Intelligence
ㅤ
Biography
As the principal intelligence liaison executive at GreyNoise Intelligence, Nishawn Smagh leads collaboration with global government and enterprise partners to enhance detection, understanding, and response to advanced cyber threats. Drawing on decades of operational experience, he helps government and commercial organizations strengthen their offensive and defensive capabilities to counter sophisticated adversaries and defend critical networks.
A retired U.S. Air Force intelligence officer with 25 years of service, Nishawn served as Director of Intelligence for the Cyber National Mission Force at U.S. Cyber Command, leading intelligence operations for a 2,000-member joint command charged with deterring, disrupting, and defeating malicious cyber actors. Throughout his Air Force career, Nishawn commanded at the squadron, group, and wing levels, leading intelligence operations across multiple global theaters. His decorations include the Defense Superior Service Medal, two Legions of Merit, the Bronze Star Medal, and the Defense Meritorious Service Medal.
Nishawn graduated from the U.S. Air Force Academy and holds master’s degrees in International Relations and Management. He completed professional military education at the U.S. Army Command and General Staff College and undertook senior development education at the Congressional Research Service, Library of Congress, where he supported congressional oversight and policy analysis on national security issues.
A retired U.S. Air Force intelligence officer with 25 years of service, Nishawn served as Director of Intelligence for the Cyber National Mission Force at U.S. Cyber Command, leading intelligence operations for a 2,000-member joint command charged with deterring, disrupting, and defeating malicious cyber actors. Throughout his Air Force career, Nishawn commanded at the squadron, group, and wing levels, leading intelligence operations across multiple global theaters. His decorations include the Defense Superior Service Medal, two Legions of Merit, the Bronze Star Medal, and the Defense Meritorious Service Medal.
Nishawn graduated from the U.S. Air Force Academy and holds master’s degrees in International Relations and Management. He completed professional military education at the U.S. Army Command and General Staff College and undertook senior development education at the Congressional Research Service, Library of Congress, where he supported congressional oversight and policy analysis on national security issues.
