iVerify and NCFTA to host invite-only mobile security summit in New York

iVerify and the National Cyber-Forensics and Training Alliance will convene CISOs, government leaders, researchers and academics in New York City on Nov. 10 for a closed-door summit on mobile threats. The event comes as AI, phishing and mobile-based social engineering put phones at the center of enterprise intrusion risk.

Why it matters: - Mobile devices have become a weak point in enterprise security as attackers increasingly use phones to reach corporate accounts, data and credentials. - The summit is designed to bring together the people who defend, investigate and study mobile threats so they can share practical intelligence and close gaps faster. - AI is speeding up both attack development and data exposure on mobile devices, raising the stakes for organizations that still rely mainly on patching and legacy network tools.

What happened: - iVerify and NCFTA announced the inaugural Advanced Mobile Security Summit. - The invite-only event will take place in New York City on Nov. 10, 2026. - The closed-door summit will include CISOs, security leaders, government experts, threat researchers and academics. - The organizers said the goal is to advance collaboration on mobile threat detection and response.

The details: - Threat groups including Scattered Spider and ShinyHunters have used phone-based social engineering, including voice phishing and SIM swapping, to reach corporate systems, according to public reporting from CISA and Google Threat Intelligence Group. - iVerify said mobile threats have outpaced the security protections built into device operating systems. - Rocky Cole, iVerify co-founder and COO, said patching alone is no longer enough because AI has shortened the time between vulnerability discovery and exploitation. - Cole said post-attack forensics are increasingly unable to recover meaningful evidence after mobile incidents. - Cole said on-device visibility is critical for detecting advanced mobile threats such as DarkSword and Coruna in real time. - Cole said mobile-first organizations, including banks, airlines and government agencies, are seeking mobile EDR capabilities beyond legacy network solutions such as MTD. - Matt LaVigna, NCFTA’s CEO, said no single organization sees the full mobile threat picture. - LaVigna said the summit is meant to put investigators, researchers and security leaders in the same room so shared intelligence can turn into action. - The summit agenda includes updates on the mobile threat landscape, government perspectives on nation-state mobile operations, AI on mobile devices, a CISO panel on closing the mobile gap, an academic perspective on mobile threats and building mobile security at scale in financial services. - AI-assisted vulnerability research is reducing the time between flaw discovery and weaponization, which makes patching-first defenses less effective. - On-device AI assistants, shadow AI apps and AI features inside ordinary applications can access email, messages and credentials, often without security teams knowing.

Between the lines: - The summit reflects a shift from viewing mobile as a secondary endpoint to treating it as a primary enterprise attack surface. - The focus on government, industry and academic participants suggests mobile defense is becoming a coordination problem, not just a tooling problem. - iVerify is positioning mobile EDR as the next layer beyond mobile threat defense and network-centric monitoring.

What's next: - Organizations that want to attend must request an invite at the summit page. - The event is likely to surface practical guidance on how enterprises detect, investigate and respond to mobile-focused attacks. - iVerify and NCFTA also direct readers to iVerify and NCFTA for more information.

The bottom line: - Mobile phones are no longer just communication tools inside the enterprise. They are a growing pathway for intrusion, fraud and credential theft, and defenders are gathering in New York to figure out how to respond.