Jen Easterly, Cybersecurity's 'Relentless Optimist,' Hopes Feds Come Back to RSAC Next Year

Why It Matters

AI‑driven security tools could dramatically improve software resilience and lower ransomware costs, while renewed federal participation is essential for coordinated national cyber defense.

Key Takeaways

• RSAC 2026 attracted 43,000 participants in San Francisco
• Easterly links AI adoption to higher software quality, lower ransomware
• Federal agencies withdrew this year, but expected back soon
• AI used for tailored phishing, yet not new cyber risks
• Private sector controls most critical infrastructure, driving conference relevance

Pulse Analysis

The RSA Conference has long been the pulse of the cybersecurity ecosystem, and under Jen Easterly’s leadership it reached a new scale in 2026. Her four‑year tenure at CISA gave her a rare blend of government insight and private‑sector credibility, allowing her to attract a truly global audience. By drawing 43,000 professionals from more than 100 countries, RSAC reinforced its role as the premier venue where vendors, policymakers, and innovators converge to set the agenda for the next decade.

Easterly’s central thesis—that AI and cyber defense are now inseparable—reflects a broader industry shift. Machine‑learning models are already automating code reviews, identifying vulnerabilities faster than human auditors, and refactoring legacy applications into more secure versions. At the same time, adversaries exploit the same technology to craft hyper‑personalized phishing campaigns, raising the bar for detection. The net effect is a race where AI amplifies both offense and defense, prompting firms to invest heavily in AI‑enabled security stacks to stay ahead of increasingly sophisticated threats.

The temporary withdrawal of FBI, NSA and CISA speakers highlighted the delicate balance between public‑sector oversight and private‑sector innovation. Easterly’s pledge to welcome federal agencies back underscores the necessity of shared intelligence and trust in defending critical infrastructure, which remains largely owned by the private sector. As AI continues to mature, the industry is likely to see a contraction in ransomware payouts and a measurable lift in software quality, reshaping the roughly $250 billion cybersecurity market toward more proactive, resilience‑focused solutions.