9:17:44

2016 BSides - Breaking Ground - Day Two

23:09

PG - And what if it was hacked? Tactics and Impacts of Adversarial Machine Learning

49:07

HG - You Need a Jay-z and a Beyoncé

54:46

IATC - Blood in the Water: Preparing For the Feeding Frenzy

20:02

BG - LOLS: LO Level Shells

55:40

HG - Behavioral Interviewee-ing: Inverting the Corporate Interview to Get You Hired

59:16

IATC - Health Care is in Intensive Care

55:54

GT - Devising and detecting spear phishing

54:36

IATC - Hungry, Hungry Hackers

49:21

PW - Detecting Credential Abuse

23:10

GF - WHOIS the boss? Building Your Own WHOIS Dataset for Reconnaissance

26:19

PG - Unleashing the Future of Development: The Secret World of Nix & Flakes

22:10

GT - What Do We Learn When We Scan the Internet every hour?

25:29

PG - You can be neurodivergent and succeed in InfoSec

43:40

GF - Detection Engineering Demystified: Building Custom Detections for GitHub Enterprise

34:14

CG - 101 Things Your Application is Doing Without Your Knowledge

28:51

BG - JIT Happens: How Instacart Uses AI to Keep Doors Open and Risks Closed

39:15

GF - Pipeline Pandemonium: How to Hijack the Cloud and Make it Rain Insecurity

44:36

GT - Navigating the Changing Cyber Landscape: Trends, Costs, and Risk Mitigation Strategies

35:29

PW - Picking a fight with the banks

15:44

BG - Chrome Cookie Theft on macOS, and How To Prevent It

42:03

CG - How We Accidentally Became Hardware Hackers

1:01:30

HG - Brute Force Your Job Application

53:47

GT - ZERO-RULES Alert Contextualizer & Correlator

37:08

HG - Tracking and hacking your career

18:35

BG - Fuzzing Frontiers: Exploring Unknown Unknown Vulnerabilities

22:49

PG - Taking D-Bus to Explore the Bluetooth Landscape

35:09

GT - Incubated Machine Learning Exploits: Backdooring ML Pipelines Using Input-Handling Bugs

59:59

HG - What Goes Bump in the Night? Recruiter Panel About Job Search and Other Scary Things

24:46

PG - An adversarial approach to Airline Revenue Management

41:25

GT - Seek out new protocols, and boldly go where no one has gone before

56:19

IATC - Living With the Enemy – How to protect yourself (and Energy Systems)

44:34

CG - Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation

41:30

GT - DoH Deception: Evading ML-Based Tunnel Detection with Black-Box Attack Techniques

42:18

BG - Operation So-seki: You Are a Threat Actor. As Yet You Have No Name.

41:34

CG - Security for AI Basics - Not by ChatGPT

51:35

GF - Nothing Went to Plan..... Because You Didn't Have a Plan

24:11

PG - A New Host Touches the Beacon

1:30:49

IATC - Difficult Conversations

20:00

BG - Hell-0_World | Making Weather Cry

43:06

IATC - Security Trek: The Next Generation

18:39

CG - Quantum Computing: When will it break Public Key cryptography?

23:34

PG - GEN-Z Critique on SOC 2

16:42

CG - One Port to Serve Them All - Google GCP Cloud Shell Abuse

1:44:19

IATC - Wars and Rumors of Wars - What are the implications for Domestic Critical Infrastructure?

39:03

PW - Breaking Historical Ciphertexts with Modern Means

19:10

Keynotes - Closing Ceremony

44:43

CG - Introduction to Software Defined Radio – For Offensive and Defensive Operations

24:23

PG - A Quick Story Of Security Pitfalls With Exec Commands In Software Integrations

40:55

PW - Passwords 101

19:05

CG - Free Your Mind: Battling Our Biases

15:52

GF - The road to developers' hearts

51:42

GT - PhishDefend: A Reinforcement Learning Framework

23:49

PW - Standardizing Password Surveys

22:29

GT - Reassessing 50k Vulnerabilities: Insights from SSVC Evaluations in Japan's Largest Telco

35:16

IATC - Cybersec and AI Risk Management Challenges for the Next Generation of Public Safety Systems

42:09

GF - Tactics of a Trash Panda

20:53

GT -Defensive Counting: How to quantify ICS exposure on the Internet when the data is out to get you

37:29

BG - BOLABuster: Harnessing LLMs for Automating BOLA Detection

19:12

CG - Raiders of the Lost Artifacts: Racing for Hidden Treasures in Public GitHub Repositories

44:06

BG - The Fault in Our Metrics: Rethinking How We Measure Detection & Response

36:03

BG - Redis or Not: Argo CD & GitOps from an Attacker's Perspective

28:47

PG - Threat Modeling at Scale: More than shifting left

41:24

GT - Looking for Smoke Signals in Financial Statements, for Cyber

27:19

PW - That's not my name

23:35

GF - EHLO World: Spear-Phishing at Scale using Generative AI

11:42

Keynotes - Opening Remarks - Day One

48:28

CG - On Your Ocean's 11 Team, I'm the AI Guy (or Girl)

2:01:08

IATC - Time is up. You have three years, 3 months, 3 weeks, to protect your Stuff. What do you do?

46:35

Keynote, Day 1: "Secure AI" is 20 years old

17:10

BG - From keyless to careless: Abusing misconfigured OIDC authentication in cloud environments

53:36

GF - Rolling out the C2: A Take on Modern Red Team Infrastructure

55:15

Keynote, Day 2: Homicideware

21:49

PW - Combating phone spoofing with STIR/SHAKEN

48:49

BG - 14 Years Later, Proving Ground is Proving Out

21:20

PG - PCR 9: How a simple misconfiguration can break TPM full disk encryption

20:11

PG - Disinform your Surroundings: AI and disinformation campaigns

22:00

GF - Discover the Hidden Vulnerability Intelligence within CISA's KEV Catalog

26:29

BG - The Dark Side of TheMoon

4:18

Keynote - Opening Remarks - Day Two

37:07

GT - Hacking Things That Think

26:24

GF - Adversaries Also Lift & Shift: Cloud Threats Through the Eyes of an Adversary

43:25

CG - Cyber Harassment: Stop the silence, save lives

19:01

PG - Building a Security Audit Logging System on a Shoestring Budget

33:39

GT - I won't allow my child to have a smartphone: Why Smart parents make not so smart children

26:53

IATC - Introduction to I Am The Cavalry - Day Two - Preparing for 2027

37:16

GF - Building Data Driven Access with the tools you have

22:14

GF - Prepare for the Appocalypse - Exposing Shadow and Zombie APIs

24:13

PW - CVE Hunting: Wi-Fi Routers, OSINT & 'The Tyranny of the Default'

52:14

HG - Cultivating Resilience: How to Succeed in a Role that Didn’t Exist

41:59

PW - Zero downtime credential rotation

45:40

PW - Long Live Short Lived Credentials - Auto-rotating Secrets At Scale

43:44

CG - Don’t Make This Mistake: Painful Learnings of Applying AI in Security

21:31

HG - How Living and Quilting History made me a better Cybersecurity Professional

18:08

PW - Practical Perimeter-less authentication solutions for Startups using AWS native solutions

21:04

PW - We removed passwords, now what?

38:24

HG - Penetration Testing Experience and How to Get It

17:34

GT - AI in the human loop: GenAI in security service delivery

39:49

BG - Introducing Serberus - a multi headed serial hardware hacking tool

19:25

PG - Hacking Trust Establishment