Cyber Journalists Went All-In on LinkedIn at RSAC 2026: What It Means for Your Brand

By Kelli Zorn on

If your RSAC strategy was built around press releases and booth traffic, you may have missed where the real conversation was happening. We tracked how 20 of the most influential cybersecurity journalists used LinkedIn and X during RSA Conference 2026 — and what they did (and didn't do) has direct implications for how brands should show up at the next major industry event. Here's what the data revealed:

  • Reporters published over 3x more posts on LinkedIn than X, reinforcing its role as the primary platform for event coverage.
  • LinkedIn drove ~37x more total engagements and 11x higher engagements per post compared to X, signaling a major gap in performance between platforms.
  • A small group of reporters dominated the conversation, with one individual contributing over 25% of all LinkedIn posts, highlighting how visibility is concentrated among highly active voices.
  • Text-led, insight-driven posts consistently outperformed more promotional or low-context content, pointing to a clear preference for substance over surface-level updates.
  • The majority of posts focused on article amplification, but those that added personal POV or key takeaways generated noticeably stronger engagement.

For brands planning their event strategy around X or treating LinkedIn as an afterthought, this data should prompt a real rethink. The audience — and the reporters shaping their perception — has moved.

What the data tells brands about showing up at rSAC

The reporters who drove the most engagement at RSAC weren't just sharing links — they were publishing. Posts extended beyond article promotion to include on-the-ground observations, key takeaways, and forward-looking perspectives. In other words, they were doing what smart brands should be doing: treating LinkedIn as a primary content channel, not a distribution afterthought. The implication for your brand is direct — if you're only posting press releases and product announcements during the event window, you're competing with the wrong playbook. The reporters filling the feed are acting like media entities. Your brand needs to as well.

The RSAC LinkedIn feed wasn't democratically distributed — it was dominated. A small number of reporters drove a disproportionate share of posts and engagement, with one voice alone accounting for 27% of all LinkedIn activity. That level of concentration means the feed your audience is scrolling is already crowded with a few loud, consistent voices. For brands, the lesson is clear: showing up once or twice during the week isn't a strategy. Sustained presence — planned, cadenced, and perspective-driven — is what earns a seat in that conversation.

Content type mattered — but not in the way most brands assume. The posts that drove the strongest engagement weren't polished graphics or video clips. They were text-led, insight-driven posts that offered a point of view on what was happening at the show. Audiences at RSAC aren't just looking for information — they're looking for interpretation. Brands that can offer a clear, credible perspective on the themes emerging from the event will outperform those that simply announce their presence.

key insight

Here's the finding that should reshape your RSAC content brief: dazzle didn't win. Value consistently outperformed visuals across the dataset. In a professional, information-dense environment like RSAC, audiences prioritized substance over aesthetic appeal — particularly when visuals were limited to low-context event photography. Your RSAC social calendar shouldn't be built around booth shots and product renders. It should be built around ideas.

the gaps reporters left — and the opportunity brands missed

Even the most active reporters left real opportunity on the table — and that's where brands can differentiate. LinkedIn's highest-performing format, the Document (carousel) post, was largely underutilized across the dataset. Most content defaulted to link sharing rather than native storytelling, which means the algorithm-favored formats were wide open. On X, the absence of threaded narrative content meant real-time storytelling was largely absent. Brands willing to invest in these formats — carousels that break down key RSAC themes, threaded takes on emerging trends — can occupy space that even the most prolific journalists left vacant.

what this means for the next event

Taken together, these patterns point to a clear strategic imperative for cybersecurity brands. LinkedIn is now the press room — the place where narratives are shaped in real time and authority is established through consistent, insight-driven content. The reporters who understood this captured disproportionate attention. The brands that understand it next will do the same. X remains relevant for immediacy, but it is no longer where influence is built during tentpole events.

The brands that will win the next RSAC — on the feed, not just the show floor — are those that move beyond announcing what they're doing and start explaining why it matters. Timely, perspective-driven content, published consistently across the event window, is what earns a brand a seat in the conversation that reporters and buyers are already having.

If you want to stand out in the moments that matter, you can't rely on visibility alone. You need perspective, timing, and a point of view worth engaging with. We help cybersecurity brands show up that way — before, during, and after the show floor.

If you're ready to rethink how you cut through at your next big moment, let's talk.