From insightful keynotes and deep-dive sessions to practical workshops and meaningful networking, Predict 2025 offers a rich blend of opportunities to learn, collaborate, and advance your skills. The full agenda will be published soon—check back here for the latest updates
7 October, 2025 07:00 am
Pick up your badge, enjoy breakfast, and connect with fellow attendees before training sessions begin.
7 October, 2025 09:00 am
Join us as we kick off Predict 2025 with opening remarks and celebrate the outstanding contributions of our community. We’ll recognize individuals and teams who are driving innovation, collaboration, and impact with intelligence.
7 October, 2025 09:30 am
In today's complex threat landscape, your security tools are generating more alerts than ever. But are they telling the whole story? Low-severity alerts are often ignored, and critical patterns hidden across disparate systems remain unseen. This session will reveal how to transform your existing security stack into a proactive intelligence engine. We'll explore how to get a "second opinion" on every detection, spot emerging threat trends before they impact your industry, and centralize your security data to uncover the anomalies that signal a sophisticated attack. Stop chasing alerts and start anticipating the adversary's next move. What attendees will walk away with: A strategy to validate and prioritize low-severity alerts that are often overlooked. Methods to identify emerging TTPs and threat trends relevant to their specific industry. An understanding of how to centralize detection data to uncover hidden attack patterns. Inspiration to activate a powerful, free feature that maximizes their current security investments.
Kyle Kohler
7 October, 2025 10:30 am
In this session, we’ll explore how to take a risk-centric approach to cyber threat hunting. You'll learn how to identify and understand organizational risk, and how to leverage the Recorded Future platform to assess and prioritize those risks in real time. From there, we’ll demonstrate how risk intelligence can serve as a powerful driver for proactive threat hunts—enabling you to focus on what matters most, reduce noise, and improve your overall security posture.
Course Objectives:
After completing this hands-on training session, learners will be able to:
This session utilizes Recorded Future’s Threat Intelligence, Vulnerability, Geopolitical, and Third-Party Intelligence Modules.
7 October, 2025 10:30 am
Discover how cyber operations by Russia, China, North Korea, and Iran align with their geopolitical goals. Through real-world case studies, you'll explore how these nations use cyber tactics to influence global narratives, target infrastructure, and disrupt democracies. Learn to analyze these threats using Recorded Future and uncover the deeper connection between cyber activity and global strategy.
Course Objectives:
After completing this hands-on training session, learners will be able to:
Understand the correlation between Cyber Operations and Geopolitical Objectives
Know how to conduct research using Recorded Future to elucidate the connection
Apply Advanced Queries and Recorded Future AI to surface supporting evidence
This session utilizes Recorded Future’s Threat Intelligence and Geopolitical Intelligence Modules.
7 October, 2025 12:15 pm
7 October, 2025 01:45 pm
This session addresses challenges in malware detection and emphasizes proactive monitoring and risk reduction strategies. It highlights how Recorded Future's Malware Intelligence aids security teams with Malware Intelligence workflows for threat hunting, incident response, and detection. The session will also cover using Recorded Future AI and Auto YARA for analysis, reporting, and rule generation.
Course Objectives:
Hunt and investigate malware detections across millions of samples using our Triage and The Recorded Future Sandbox reports
Extract critical IOCs and signatures to accelerate your detection and response
Leverage Auto Yara to instantly generate detection rules
Set up proactive alerts to monitor new malware submissions in real-time
This session utilizes Recorded Future’s Threat Intelligence Module and Recorded Future’s Sandbox.
7 October, 2025 01:45 pm
Level up your Incident Response workflows with intelligence! Using the NIST 800-61 Computer Security Incident Handling Guide as a foundation, we’ll highlight multiple Recorded Future functionalities - Intelligence Cards, Custom Lists, Analyst Notes, Malware Intelligence, and more - that can help surface and organize the intelligence most relevant to you at each stage of the lifecycle. At each step we’ll also work through practical examples using the features so you can continue (or begin!) to work towards an intelligence-led Incident Response program in your organization.
Course Objectives:
Understand how and why intelligence fits into the Incident Response Lifecycle
Incorporate Recorded Future platform features into their Incident Response process
This session utilizes Recorded Future’s Threat Intelligence, Vulnerability, Brand and SecOps Intelligence Modules.
7 October, 2025 03:30 pm
Join us for a friendly Capture the Flag competition to wrap up the day! This is a Jeopardy-style game with questions of varying complexity whose answers can be found in the Recorded Future Platform using the skills you’ve learned throughout the day. There will be prizes for the top scores! A laptop is required for this.
7 October, 2025 03:30 pm
This session equips intelligence analysts, managers, and strategic leaders with two essential disciplines: structured analysis and strategic foresight. Participants will learn how to anticipate and prepare for future threats, especially in complex geopolitical environments, through analytical tools and strategic foresight frameworks. By identifying risks early, organizations can move from a reactive to proactive security posture, minimizing potential harm and enhancing resilience.
Course Objectives:
Apply structured analytical techniques to enhance intelligence assessment and decision-making.
Use strategic foresight to anticipate emerging risks and explore potential future scenarios.
Translate forecasts into actionable risk mitigation strategies using the Recorded Future platform.
7 October, 2025 05:30 pm
Celebrate the start of Predict in The Loop — your hub for connection, discovery, and interactive experiences. After a full day of training, unwind with drinks and light bites alongside fellow attendees as the conference officially kicks off.
8 October, 2025 08:00 am
Grab coffee, enjoy breakfast, and connect with fellow attendees as we kick off Day 1 of the main conference.
8 October, 2025 10:05 am
Join Recorded Future’s CEO, Colin Mahony, as he shares his vision for the evolution from intelligence gathering to decisive action. Chief Product Officer Jamie Zajac will then dive into how that vision comes to life, showing how leaders can leverage precision intelligence to make faster, smarter decisions and strengthen resilience in an ever-changing threat landscape.
Colin Mahony
Jamie Zajac
Adrian Porcescu
8 October, 2025 11:00 am
Join Recorded Future’s co-founders, Dr. Christopher Ahlberg and Staffan Truvé, for an inspiring conversation on the evolving landscape of intelligence. Against the backdrop of rapidly advancing AI and increasingly sophisticated threats, they will share their vision for how precision intelligence is reshaping security and empowering defenders to act faster and smarter.
Dr. Christopher Ahlberg
Staffan Truvé
8 October, 2025 11:45 am
8 October, 2025 01:30 pm
Cyber threat intelligence (CTI) programs often face intense budget scrutiny from executives who question their tangible value. This session shares proven strategies for building observable-based CTI programs that anchor intelligence efforts in documented activity within your environment rather than hypothetical threats. Attendees will learn practical approaches for showing value with Recorded Future in concrete use cases like monitoring brand impersonation, supply chain compromises, and other real-world threats, while ensuring seamless integration with existing security tools. You will also discover actionable methods for correlating intelligence with actual organizational events and communicating measurable ROI to leadership.
Justin Klein Keane
8 October, 2025 02:00 pm
Get ready for a one-of-a-kind experience at Predict 2025 in New York City this October. Colin Jost and Michael Che from Saturday Night Live will bring their humor and energy to the mainstage.
Michael Che
Kalpana Singh
8 October, 2025 02:50 pm
Strategic Track
Third-party risk has become a critical challenge for today’s organizations, with supply chains and vendor ecosystems introducing complex vulnerabilities. This session will examine how strategic use of precision intelligence empowers leaders to gain a comprehensive understanding of their third-party risk landscape.
Jerry Hodge
Kelly White
8 October, 2025 02:50 pm
Most SOCs dismiss low-severity alerts like blocked phishing emails as routine noise, but these are often early warning signs of coordinated attacks. This session demonstrates how feeding internally generated IoCs back into Recorded Future transforms overlooked alerts into threat campaign insights. We'll demonstrate how a single blocked email can expose coordinated attacks targeting multiple executives, shifting defenders from reactive triage to proactive campaign detection.
Sanjay Kumar
8 October, 2025 03:30 pm
Strategic Track
Adversaries are now leveraging AI for more sophisticated, faster attacks. Relying on human-only intelligence is no longer feasible, but full AI automation introduces new strategic risks. The solution lies in a strategic partnership: human expertise as a critical control throughout the AI-augmented threat intelligence lifecycle. This session introduces a methodology for integrating human judgment and ethical oversight into every stage of the Intelligence Lifecycle. Attendees will learn how to move at the speed of AI while ensuring its output is critically assessed and risk is mitigated. The speaker will illustrate this methodology with strategic examples on vulnerability prioritization, third-party assessments, and measuring geopolitical risk.
Robert Moody
8 October, 2025 03:30 pm
Tactical Track
Recorded Future’s Insikt Group presents an in-depth tactical analysis of the RedMike cyber espionage campaign, attributed to the Chinese state-sponsored group Salt Typhoon. This session will cover emerging exploitation techniques, attacker tactics, and practical guidance on detection and response.
Sveva Scenarelli
Kathleen Kuczma
8 October, 2025 04:10 pm
Strategic Track
Join a forward-looking discussion on the operationalization of threat intelligence at scale, from the tools analysts rely on to the workflows that drive detection engineering. This presentation will examine how AI-driven innovation is addressing critical organizational challenges, while also exploring how organizations should approach procuring, adopting, and effectively leveraging these capabilities.
Jitin Shabadu
8 October, 2025 04:10 pm
Tactical Track
Digital risk protection has shifted from nice-to-have to must-have. As threats like brand impersonation, credential theft, and executive spoofing intensify, organizations need proactive detection and rapid response capabilities. Join Recorded Future's Brand Intelligence product team for an exclusive first look at where we're taking digital risk protection. We'll define the use case, reveal the innovations we're building, and show you how we're making comprehensive brand protection faster, smarter, and more powerful than ever.
Maddy Maletz
Christopher Kash
8 October, 2025 04:50 pm
Strategic Track
Third-party cybersecurity threats are affecting companies on an unprecedented scale, posing significant risk to data integrity and operations. At JPMorgan Chase, we have established a dedicated team focused on third-party threat intelligence and incident response. We will delve into our strategies for detecting, preventing, and responding to third-party cyber incidents, and provide a unique perspective for organizations seeking to enhance their supply chain cybersecurity in an increasingly connected world.
Adam Thimons
8 October, 2025 04:50 pm
Tactical Track
Your adversaries don't work 9-to-5, so why should your threat hunting? This session presents a blueprint for building hunting programs that operate continuously, combining human expertise with autonomous capabilities to achieve 24/7 threat discovery.
Laura Hoffman
Jon Miller
8 October, 2025 06:30 pm
The place to be after the day’s sessions. Live music, craft cocktails, and a crowd that knows how to keep the energy going. Connect, unwind, and make the night count.
9 October, 2025 07:00 am
Start the day with coffee, breakfast, and conversation as you check in and get settled. Pick up your badge and connect with peers before the main stage program kicks off.
9 October, 2025 09:00 am
Kelly Moan
Jamie Tarabay
9 October, 2025 09:30 am
Join Colin Ahern, Chief Cyber Officer of New York, for a conversation on how intelligence drives action in the city that never sleeps. This session will explore the role of real-time intelligence in keeping critical infrastructure and communities secure, highlighting how insights inform decisions and shape responses in a complex, fast-moving environment.
Colin Ahern
Jamie Tarabay
9 October, 2025 10:00 am
Michelle will share how accurate, real-time intelligence delivered in the right context can be the difference between disruption and disaster. She will explore how unified intelligence feeds support crisis response, executive protection, and cyber incident response, from thwarting targeted attacks on offices or events to safeguarding people on the ground.
Michelle McCluer
9 October, 2025 10:50 am
Cyber threat actors don’t just exploit networks—they also exploit narratives. This talk explores how adversaries use branding and PR strategies to amplify the impact of their attacks. We’ll focus on specific examples where threat actors have directly engaged with the media, as well as where they have indirectly benefited from fear, uncertainty, and doubt generated by “crime spree” discourse. We’ll also look at how these narratives impact your company’s reputational and legal risks, focusing on the recent proliferation of class action lawsuits relating to data breaches. Finally, we’ll close with actionable steps you can take to get ahead of the narrative and proactively respond to cyber attacks
Megan Keeling
9 October, 2025 10:50 am
Tactical Track
This session will detail how Mastercard uses threat intelligence to build realistic, high-fidelity attack simulations informed by real-time intelligence on adversary tactics, techniques, and procedures (TTPs). Attendees will learn how to use the Recorded Future platform in conjunction with the MITRE ATT&CK framework to focus on testing their defenses against the attack paths and behaviors of prominent threat actors.
Steve Range
Patrick Davey
9 October, 2025 11:30 am
Tactical Track
While traditional vulnerability management focuses on what's broken, modern exposure management demands we understand what matters most before adversaries do. This session explores how leading security organizations are leveraging threat intelligence to transform exposure management from a reactive patching exercise into a predictive, risk-based discipline.
John Bock
Dr. Jared Smith
9 October, 2025 11:30 am
Strategic Track
This session unveils our upcoming game-changing capabilities for the agentic security era. Our new MCP (Model Context Protocol) integration enables seamless connection between our Intelligence platform and your existing AI tools—SOC automation, security copilots, ChatGPT, or internal agents—creating a unified defense network. Learn how you can position your organization at the forefront of the agentic security revolution.
Daniel Gillblad
Staffan Truvé
9 October, 2025 12:00 pm
Strategic Track
What if the most valuable threat intelligence isn't found in feeds, forums, or the dark web? This session pulls back the curtain on Recorded Future's proprietary collection methods that capture thousands of unique indicators daily – intelligence that exists nowhere else in the threat landscape.
Chris Holden
Kathleen Kuczma
9 October, 2025 12:00 pm
Tactical Track
This presentation will be a case study on using Recorded Future cradle to grave to identify, analyze, and attribute adversary infrastructure and activity—from Playbook Alerting identification through Sandbox analysis of adversary operations to grouping TTPs with Visualizations. This comprehensive walkthrough will benefit every level of cybersecurity professional, providing analysts with platform mastery, managers with capability demonstrations, and power-users with advanced pivot techniques to increase adversary costs.
Jack Watson
9 October, 2025 12:30 pm
9 October, 2025 02:20 pm
Security leaders today must do more than collect threat intelligence—they must transform it into coordinated action that delivers measurable business value. This panel brings together experienced security leaders who have successfully bridged the gap between security insights and organizational impact.
Our panelists will share their proven strategies for translating threat intelligence into decisive action, reducing business risk, optimizing team operations, and demonstrating clear ROI from intelligence investments. Discover how leading security teams leverage intelligence to drive meaningful outcomes that align with their organization's strategic priorities and deliver tangible business value.
Lincoln Kaffenberger
Corey Nenno
Marie Brattberg
Mariangela Taylor
9 October, 2025 03:00 pm
Join us for a fireside chat with author Chris Miller, moderated by Adam Janofsky, Editorial Director at The Record. They will explore the global forces shaping technology, geopolitics, and security today, offering insights into emerging trends and strategic decision-making.
Chris Miller
Adam Janofsky