BSidesSF 2025

BSidesSF 2025

arrow_back View All Dates

9:00am PDT

Breakfast

9:00am PDT

Espresso & Coffee

9:00am PDT

Capture the Flag

9:00am PDT

Participant Hall

9:00am PDT

(ISC)2 Silicon Valley

9:00am PDT

Electronic Frontier Foundation (EFF)

9:00am PDT

Pacific Hackers Association

9:00am PDT

Secure Diversity/Day of Shecurity

9:00am PDT

WiCyS

9:00am PDT

WISP

9:00am PDT

Bar and Chill Out

9:00am PDT

Headshots

9:00am PDT

Info Desk

9:00am PDT

Lounge

9:00am PDT

Prayer & Mother's Room

9:00am PDT

Registration

9:00am PDT

Sponsors

9:00am PDT

Adversary Village

9:00am PDT

Bug Bounty Village

9:00am PDT

Career Village

9:00am PDT

Cloud Village

9:00am PDT

Crypto & Privacy Village

9:00am PDT

Embedded Systems Village

9:00am PDT

Hardware Challenge Village

9:00am PDT

IoT Village

9:00am PDT

Lockpick Village

9:00am PDT

Villages

9:00am PDT

AI Village

9:00am PDT

T-Shirt Sales

9:00am PDT

Coat Check

10:00am PDT

Opening Remarks

10:15am PDT

Fire, Brimstone, and Bad Security Decisions

10:30am PDT

Connect with Women in CyberSecurity (WiCyS)

11:00am PDT

Pacific Hackers

11:15am PDT

Not Every Groundbreaking Idea Needs to Become a Billion-Dollar Startup

11:15am PDT

The Four Tribes of Security Champions

11:15am PDT

The Growing Crisis in CVE Data Quality

11:15am PDT

AI Dragons: Threats, Risks, and What We Can Do About Them

11:15am PDT

How are System Defenders Effectively Using LLMs?

11:15am PDT

Global BSides Organizers Meetup

11:30am PDT

Mind the Gap: Career Growth and Management for Security Engineers

11:30am PDT

Don’t Sh*t-Left: How to Actually Shift-Left

11:30am PDT

Effective Handling of Third-Party Supplier Incidents

11:30am PDT

When AI Goes Awry: Responding to AI Incidents

12:00pm PDT

Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies!

12:00pm PDT

The Product Security Imperative: Lessons from CISA

12:00pm PDT

Trust Engineering: Building Security Leadership at Early-Stage Startups

12:00pm PDT

Lunch

12:30pm PDT

Cloud Security Meetup

12:30pm PDT

LLM Mayhem: Hands-on Red Teaming LLM-Powered Chatbots

12:30pm PDT

Purple Teaming Okta Detections

1:15pm PDT

State of (Absolute) AppSec

1:15pm PDT

AI's Bitter Lesson for SOCs: Let Machines Be Machines

1:15pm PDT

Confidential Computing: Protecting Customer Data in the Cloud

1:15pm PDT

CyberCAN: A Roadmap for Municipal Support of Nonprofit Cybersecurity in SF

1:30pm PDT

Iron-Clad PKI: Crypto Agility for the Quantum Era

1:30pm PDT

Lessons from Running a Product Security-Focused Cybersecurity Clinic

1:30pm PDT

The Power of Persuasion: Better Security Through... Manipulation?

1:30pm PDT

Day of Shecurity

2:15pm PDT

Don't Trust, Verify! - How I Found a CSRF Bug Hiding in Plain Sight

2:15pm PDT

Mapping the SaaS Attack Surface

2:15pm PDT

Radical Results: A Security Org's Version of Radical Candor

2:15pm PDT

Third-party Risk Management: SOC 2s, Security Questionnaires, and Psychosis

2:15pm PDT

Sponsor Passport Raffle

2:15pm PDT

CISO Series Podcast - LIVE!

2:15pm PDT

Compliance Without the Chaos: Building It Right Into Your DevOps Pipeline

2:15pm PDT

Securing AI Agents: Exploring Critical Threats and Exploitation Techniques

2:45pm PDT

Building Adversary Emulation Capabilities in Your Organization

2:45pm PDT

Harnessing GenAI for Cutting-Edge Detection Engineering

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network

3:00pm PDT

Care and Feeding of HSMs: Key Management in Hard Mode

3:00pm PDT

Intro to Privacy-Enhancing Technologies (PETs)

3:00pm PDT

There and Back Again: Discovering OT Devices Across Protocol Gateways

3:15pm PDT

15 Years of BSidesSF: Behind the Scenes AMA

3:15pm PDT

How to Tame Your Dragon: Productionizing Agentic Apps Reliably and Securely

3:15pm PDT

Slaying the Dragons: A Security Professional’s Guide to Malicious Packages

3:45pm PDT

Follow the Trace: How Traditional AppSec Tools Have Failed Us

3:45pm PDT

Is Vulnerability Management Dead? A Security Architect’s Survival Guide

3:45pm PDT

Scalably Securing Third-party Dependencies in Heterogeneous Environments

3:45pm PDT

Shadow IT Battlefield: The CyberHaven Breach and Defenses That Worked

4:15pm PDT

The Silent Breach: Security Threats in Google Workspace

4:15pm PDT

Slaying Dragons Together: Multidisciplinary Solutions to Security Issues

4:15pm PDT

GenAI Application Security: Not Just Prompt Injection

4:30pm PDT

Fireproof Your Castle with Risk-First GRC

4:30pm PDT

How to Pull Off a Near Undetectable DDoS Attack (And How to Stop It)

4:30pm PDT

Round and Around We Go: Interviews, What Do You Know?

4:30pm PDT

Understanding IRSF Fraud: Protecting Against SMS Exploitation

5:15pm PDT

Closing Remarks