BSidesSF 2025

BSidesSF 2025

arrow_back View All Dates

11:15am PDT

Let's talk about the AI apocalypse. AMC IMAXDylan Ayrey Lex Sleuther - A Novel Approach to Script Language Detection AMC Theatre 09Aaron James The hidden access paths to Smaugs Caven AMC Theatre 07Ben Arent How to train your Detection Dragon? AMC Theatre 06Geet Pradhan Inside the Information Stealer Ecosystem: From Compromise to Countermeasure AMC Theatre 15Olivier Bilodeau

12:00pm PDT

Navigating the Unknowns: Fraud Mitigation for Netflix Live Events AMC IMAXAditi Gupta • Yue Wang One SOC, The Whole SOC, and Nothing But The SOC, So Help Me AMC Theatre 07Carson Zimmerman Resiliency in the uncharted AI landscape AMC Theatre 11Ranita Bhattacharyya The Art of Cybersecurity Mastery: From Entry-Level to Staff+ AMC Theatre 09Florian Noeding

1:00pm PDT

Into The Dragon’s Den AMC Theatre 06Jacob Salassi • Michele Freschi Light in the Labyrinth: Attack Path Analysis for Anyone AMC Theatre 15Parker Shelton

1:30pm PDT

Centralizing Egress Access Controls Across a Hybrid Environment at Block AMC Theatre 07Ramesh Threat Modeling Meets Model Training: Web App Security Skills for AI AMC Theatre 11Breanne Boland WHOIS Your Daddy: Tracking Iranian-backed cyber operations with Passive DNS AMC Theatre 09Austin

2:00pm PDT

Hack, Patch, Repeat: Insider Tales from Android’s Bug Bounty AMC Theatre 15Maria Uretsky • Olivier Tuchon

2:15pm PDT

Adventures & Findings in ISP Hacking AMC Theatre 09Ian Foster Log In Through the Front Door: Automating Defense Against Credential Leaks AMC Theatre 07Barath Subramaniam One Search To Rule Them All: Threat Modelling AI Search AMC Theatre 11Kane Narraway Versus Killnet AMC IMAXAlex Holden

3:00pm PDT

Decoding GraphQL: How to Map Hidden Vulnerabilities AMC Theatre 09Antoine Carossio • Tristan Kalos Everyday AI: Leveraging LLMs for simple, effective security automation AMC Theatre 11Matthew Sullivan • Dominic Zanardi From LOL to LOC: LOLBins are No Laughing Matter AMC Theatre 07Avishay Zawoznik Tracking the Worlds Dumbest Cyber-Mercenaries AMC IMAXCooper Quintin • Eva Galperin 0.0.0.0 Day: Exploiting Localhost APIs From The Browser AMC Theatre 15Gal Elbaz Data Splicing Attacks: Breaking Enterprise DLP from the Inside Out AMC Theatre 06Jeswin Mathai • Audrey Adeline

3:45pm PDT

Fake Hires, Real Threats: When Background Checks Aren’t Enough AMC Theatre 09Mabel Soe Something’s Phishy: See the Hook Before the Bait AMC Theatre 07Malachi Walker Trawling for IOCs: Catching C2 in a sea of data AMC IMAXMoses Schwartz Using AI to discover silently patch vulnerabilities in open-source AMC Theatre 11Mackenzie Jackson

4:00pm PDT

Decentralized Communications: Deep-Dive into APRS and Meshtastic AMC Theatre 06Ankur Tyagi • Mayuresh Dani Service Mesh Security: Shifting Focus to the Application Layer AMC Theatre 15Daniel Popescu

4:30pm PDT

Blank Space: Filling the Gaps in Atomic and Behavioral Cloud-Specific IoCs AMC Theatre 07Merav Bar • Gili Tikochinski BSidesSF plays incident response AMC IMAXMaya Kaczorowski • Whitney Merrill Dragging out Dragons: Slaying Hidden Threats in Residential Proxies AMC Theatre 09Christo Roberts Enhancing Secret Detection in Cybersecurity with Lean LLMs AMC Theatre 11Danny Lazarev • Erez Harush

5:00pm PDT

Netsec is dead(?): Modern Network Fingerprinting for Real-World Defense AMC Theatre 15Vlad Iliushin

5:15pm PDT

Mind vs Machine: Role of Human Psychology and AI in Security Culture AMC Theatre 11Anubha Nagawat • Ashutosh Gupta