Day Zero Threat Research Summit will make its debut this year as part of Fal.Con 2026, with CrowdStrike confirming keynote speakers and featured sessions for the cybersecurity-focused gathering. The event is scheduled for August 30 through September 1, 2026, at the Virgin Hotel in Las Vegas. Organizers positioned the summit as a forum dedicated to emerging adversary methods and evolving cyber threat activity.

The conference agenda centers on technical research tied to modern cyber operations. Planned sessions will examine subjects including agentic AI used in offensive activity, changes in China-linked operational methods, North Korean threat actor tactics, and the growing pace of vulnerability exploitation. A featured discussion will also bring together John Hultquist from Google Threat Intelligence Group and Sherrod DeGrippo from Microsoft to address current intelligence challenges facing defenders.

Among the announced keynote presentations is a session led by Martin Wendiggensen of Dreadnode focused on the divide between offensive and defensive AI implementation. The presentation will explore how measuring that gap as a research problem could reshape defensive strategies against increasingly adaptive adversaries. Another featured briefing from Cisco Talos and Recorded Future researchers will analyze Silent Lynx, a threat actor linked to attacks targeting diplomatic missions and government ministries across Central Asia.

Additional speakers represent organizations including Amazon, Augur Security, Chainalysis, CrowdStrike, Macnica, MalwareTech, Mimecast, Proofpoint, and Rook9. Their sessions will address subjects such as cyberespionage, criminal syndicates operating underground networks, coordinated takedown operations, AI-assisted attack methods, and cross-domain intrusion activity. CrowdStrike said the summit is intended to strengthen technical collaboration across the threat research community.

CrowdStrike executive Adam Meyers said the event is designed to help defenders react more quickly by sharing research tied to emerging attack methods and vulnerabilities earlier in the security cycle. According to the company, the summit aims to improve detection and response capabilities by connecting researchers focused on how modern adversaries operate at scale across global networks and infrastructure.

📊 What This Means (Our Analysis)

The launch of Day Zero reflects how cybersecurity conferences are shifting from broad industry discussion toward highly technical collaboration around active threats. The emphasis on AI-enabled attacks, state-linked operations, and accelerated exploitation activity shows how quickly adversary behavior is evolving and why threat intelligence sharing now carries greater operational urgency.

The speaker mix also signals a growing industry preference for cross-company coordination in cyber defense research. By bringing together researchers from cloud providers, intelligence firms, infrastructure security teams, and enterprise vendors, the summit creates a concentrated space for exchanging technical findings that could influence how defenders prepare for increasingly sophisticated intrusion activity.

📌 Our Take: As cyber threats grow faster and more coordinated, research-sharing events are becoming part of frontline defense strategy.