Loading…
Type: Presentation clear filter
arrow_back View All Dates
Sunday, April 27
 

11:15am PDT

Not Every Groundbreaking Idea Needs to Become a Billion-Dollar Startup
Sunday April 27, 2025 11:15am - 11:45am PDT
AMC IMAX
The cybersecurity industry has 5,000+ startups yet many key problems are overlooked for not being "venture scale." This talk explores alternative paths (bootstrapping, Silicon Valley Small Businesses) and why niche markets and smaller ideas can drive impactful solutions without unicorn pressure.
Speakers
avatar for Ross Haleliuk

Ross Haleliuk

Co-founder, Stealth
Sunday April 27, 2025 11:15am - 11:45am PDT
AMC IMAX AMC at Metreon
  Presentation, General

11:15am PDT

The Four Tribes of Security Champions
Sunday April 27, 2025 11:15am - 11:45am PDT
AMC Theatre 07
“The Four Tribes of Security Champions” is a framework to describe successful security champion programs. The tribes include: The Apprentices, The Fan Club, The Learners, and The Sentinels. We’ll explore a benchmarking tool for each tribe to pick which approach is right for you!
Speakers
avatar for Marisa Fagan

Marisa Fagan

Head of Product, Katilyst
Marisa Fagan is Head of Product at a “security champions as a service” startup called Katilyst. She works on building security into the SDLC and empowering developers to own secure code. Previously, she has worked as a security culture expert at places like Atlassian, Salesforce... Read More →
Sunday April 27, 2025 11:15am - 11:45am PDT
AMC Theatre 07 AMC at Metreon
  Presentation, General

11:15am PDT

The Growing Crisis in CVE Data Quality
Sunday April 27, 2025 11:15am - 11:45am PDT
AMC Theatre 09
Explore the escalating issues in CVE data: inconsistent reporting, low-quality submissions, and outdated info. Learn why these threaten cybersecurity and what solutions can restore trust in this critical database.
Speakers
avatar for Jerry Gamblin
Sunday April 27, 2025 11:15am - 11:45am PDT
AMC Theatre 09 AMC at Metreon
  Presentation, General

12:00pm PDT

Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies!
Sunday April 27, 2025 12:00pm - 12:30pm PDT
AMC IMAX
Most people aren’t dragon slayers. There are dragon slayers out there, but they’re not us. EDR isn’t a dragon slayer. Neither is the SOC. That’s okay — when the dragon comes, the goal should be *survival,* not going out in a blaze of glory.
Speakers
avatar for Adrian Sanabria

Adrian Sanabria

Principal Researcher, Defenders Initiative
Adrian is a successful generalist with over two decades of experience hacking, fixing, breaking, building, and teaching in InfoSec. He’s always trying to see the big picture and figure out the best security strategies. Despite all these years in the industry, he is still optimistic... Read More →
Sunday April 27, 2025 12:00pm - 12:30pm PDT
AMC IMAX AMC at Metreon
  Presentation, General

12:00pm PDT

The Product Security Imperative: Lessons from CISA
Sunday April 27, 2025 12:00pm - 12:30pm PDT
AMC Theatre 09
Policymakers worldwide have recently taken up product security, making topics like memory safety prominent. In this talk, hear from former CISA Senior Advisor Jack Cable on lessons learned leading CISA's Secure by Design initiative, and what a shift towards product security means for the industry.
Speakers
avatar for Jack Cable

Jack Cable

CEO & Co-Founder, Corridor
Jack Cable is the CEO and Co-Founder of Corridor. Corridor is the AI-powered Secure by Design platform and is backed by Conviction, Alex Stamos, and Christina Cacioppo. Prior to starting Corridor, Jack served as a Senior Technical Advisor at CISA, where he led the agency’s Secure... Read More →
Sunday April 27, 2025 12:00pm - 12:30pm PDT
AMC Theatre 09 AMC at Metreon
  Presentation, General

12:00pm PDT

Trust Engineering: Building Security Leadership at Early-Stage Startups
Sunday April 27, 2025 12:00pm - 12:30pm PDT
AMC Theatre 07
Being the first security leader at a startup is a wild ride. This talk explores "Trust Engineering," a hands-on approach to earn trust, navigate chaos, and build a security foundation with limited resources. Learn how to handle executive expectations and support fast-paced growth.
Speakers
avatar for Mike Privette

Mike Privette

Cybersecurity Economist, Return on Security
Mike Privette is a former CISO turned cybersecurity economist and the creator of Return on Security, a weekly market intelligence newsletter read by thousands of cybersecurity leaders, founders, and investors.He previously led security at Passport Labs, served as a Divisional CISO... Read More →
Sunday April 27, 2025 12:00pm - 12:30pm PDT
AMC Theatre 07 AMC at Metreon
  Presentation, General

1:30pm PDT

Iron-Clad PKI: Crypto Agility for the Quantum Era
Sunday April 27, 2025 1:30pm - 2:00pm PDT
AMC Theatre 07
Quantum computing is breaking RSA/ECC; your PKI is at risk! Learn strategies to align with NIST PQC standards and secure your cryptographic resilience for the post-quantum era.
Speakers
PS

Prasanth Sundararajan

Head of Product Security, Appviewx Inc
Sunday April 27, 2025 1:30pm - 2:00pm PDT
AMC Theatre 07 AMC at Metreon
  Presentation, General

1:30pm PDT

Lessons from Running a Product Security-Focused Cybersecurity Clinic
Sunday April 27, 2025 1:30pm - 2:00pm PDT
AMC Theatre 09
We established Stanford's product security clinic in 2023 to help community organizations secure the software services they offer, diverging from traditional university cybersecurity clinics that focus on corporate security. Here's what we learned from our first two years of operation.
Speakers
AS
JH
Sunday April 27, 2025 1:30pm - 2:00pm PDT
AMC Theatre 09 AMC at Metreon
  Presentation, General

1:30pm PDT

The Power of Persuasion: Better Security Through... Manipulation?
Sunday April 27, 2025 1:30pm - 2:00pm PDT
AMC IMAX
Security’s weakest link comes with ten fingers, ten toes and an uncanny ability to find ways past your thoughtfully implemented controls. Learn well-tested psychology principles that drive positive security outcomes. From social proof to reciprocity, small changes in approach bring outsized results.
Speakers
avatar for Nate Lee
Sunday April 27, 2025 1:30pm - 2:00pm PDT
AMC IMAX AMC at Metreon
  Presentation, General

2:15pm PDT

Don't Trust, Verify! - How I Found a CSRF Bug Hiding in Plain Sight
Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC Theatre 14
This talk explores the discovery of a long-standing CSRF (Cross-Site Request Forgery) vulnerability in the popular gorilla/csrf Go library. The goal is to encourage the audience to perform vulnerability research experiments in their own commonly used tools.
Speakers
avatar for Patrick O'Doherty

Patrick O'Doherty

Member of Technical Staff, Tailscale
Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC Theatre 14 AMC at Metreon
  Presentation, General

2:15pm PDT

Mapping the SaaS Attack Surface
Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC Theatre 07
In this presentation, attendees will be introduced to the concept of SaaS attack surface mapping. We will conduct an analysis of current techniques while also unveiling novel approaches that have not been previously disclosed. We will release an open-source tool designed to implement this.
Speakers
avatar for Jaime Blasco

Jaime Blasco

Cofounder / CTO, Nudge Security
Jaime Blasco is known for his security research and efforts to enable more collaborative threat-intelligence sharing. He is CTO and co-founder of Nudge Security. Using a patented, network-less approach to SaaS discovery and governance, Nudge Security drives meaningful behavioral change that strengthens SaaS security postures without disrupting the pace of work. Previously, he led the threat intelligence and data science unit at AT&T Alien Labs. Pr... Read More →
Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC Theatre 07 AMC at Metreon
  Presentation, General

2:15pm PDT

Radical Results: A Security Org's Version of Radical Candor
Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC IMAX
Security practitioners are put in tough positions whether you're new to security or an experienced CISO. Based on "Radical Candor", you'll leave this talk with new perspective on the way security teams are perceived by their peers and how to optimize the good and minimize the unavoidable bad.
Speakers
avatar for Evan Johnson

Evan Johnson

CEO, RunReveal
Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC IMAX AMC at Metreon
  Presentation, General

2:15pm PDT

Third-party Risk Management: SOC 2s, Security Questionnaires, and Psychosis
Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC Theatre 09
Condemning “check-box” vendor risk management and security questionnaires is a hot talking point nowadays. This talk will discuss the related but distinct problems in the TPRM space and offer practical, creative solutions to help deliver high-value outcomes via third-party risk management.
Speakers
avatar for Eleanor Mount

Eleanor Mount

Security Risk and Compliance Manager, Asana
Eleanor is a Security Risk and Compliance Manager at Asana, where she has helped build and scale GRC programs from the ground up, including risk management, customer trust, and the implementation of new security compliance frameworks. Prior to Asana, she worked in the health technology... Read More →
Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC Theatre 09 AMC at Metreon
  Presentation, General

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network
Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC IMAX
The presentation will cover research into pig butchering scams connected to FUNNULL CDN-hosted money laundering, retail phishing campaigns targeting luxury brands, and more. Technical analysis steps will be provided and explained in-depth as we cover this threat which we have dubbed “Triad Nexus."
Speakers
ZE
Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC IMAX AMC at Metreon
  Presentation, General

3:00pm PDT

Care and Feeding of HSMs: Key Management in Hard Mode
Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC Theatre 14
Cryptography's dirty secret: your security is only as strong as your key management. Dive into the treacherous world of HSMs, which promise salvation but deliver operational nightmares and hidden costs. HSMs: not for the faint of heart!
Speakers
NP

Nick Pelis

Security Engineering Manager, Verkada
Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC Theatre 14 AMC at Metreon
  Presentation, General

3:00pm PDT

Intro to Privacy-Enhancing Technologies (PETs)
Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC Theatre 07
Privacy-Enhancing Technologies (PETs) are transforming data handling by ensuring privacy and security throughout the data lifecycle. This talk explores the latest advancements in PETs, focusing on Secure Multiparty Computation (MPC), Homomorphic Encryption (HE), and their real-world applications.
Speakers
avatar for Harshal Shah

Harshal Shah

Sr. Software Engineer, Visa Research
Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC Theatre 07 AMC at Metreon
  Presentation, General

3:00pm PDT

There and Back Again: Discovering OT Devices Across Protocol Gateways
Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC Theatre 09
Operational Technology (OT) describes devices that control things in the real world, like factories and generators. This talk discusses the security implications of the convergence of IT and OT, with deep dives into OT protocols and device discovery — even behind legacy protocol gateways.
Speakers
RK
Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC Theatre 09 AMC at Metreon
  Presentation, General

3:45pm PDT

Follow the Trace: How Traditional AppSec Tools Have Failed Us
Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC Theatre 09
Join the journey of an application data trace as it navigates runtime application security. Follow a trace through an application, uncovering how tools like RASP provide real-time insights, detect threats, and block attacks. Learn how traces enhance security by revealing vulnerabilities in action.
Speakers
avatar for Kennedy Toomey

Kennedy Toomey

Application Security Researcher & Advocate, Datadog
Kennedy Toomey is an Application Security Researcher & Advocate at Datadog. Previously she was an Application Security Engineer where she spent her time working with developers to help fix vulnerabilities and write more secure code.
Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC Theatre 09 AMC at Metreon
  Presentation, General

3:45pm PDT

Is Vulnerability Management Dead? A Security Architect’s Survival Guide
Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC Theatre 07
This session discusses the necessary shift from traditional vulnerability management and explores a security architect's journey in building a robust cloud risk remediation program. We will outline best practices for risk prioritization & triage, navigating IaC & cloud-native mitigating controls.
Speakers
avatar for Snir Ben Shimol

Snir Ben Shimol

CEO | CSO, ZEST Security
Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC Theatre 07 AMC at Metreon
  Presentation, General

3:45pm PDT

Scalably Securing Third-party Dependencies in Heterogeneous Environments
Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC IMAX
Learn how Anthropic automates dependency security at scale across diverse infrastructure and environments while still letting engineers use the tools and dependencies they need. We'll explore Dependant, our tool to enforce our dependency posture at the network level, and how users interact with it.
Speakers
avatar for Ziyad Edher

Ziyad Edher

Software Engineer, Anthropic
avatar for Chris Norman

Chris Norman

Member of Technical Staff, Anthropic
Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC IMAX AMC at Metreon
  Presentation, General

3:45pm PDT

Shadow IT Battlefield: The CyberHaven Breach and Defenses That Worked
Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC Theatre 14
Discover how the Cyberhaven breach case exposed critical Shadow IT risks — and the proactive allowlist strategy that minimized business disruption. The proactive controls saved our 40M+ users from being impacted. Gain insights, metrics, and a blueprint for continuous monitoring.
Speakers
RB
ZP
Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC Theatre 14 AMC at Metreon
  Presentation, General

4:15pm PDT

The Silent Breach: Security Threats in Google Workspace
Sunday April 27, 2025 4:15pm - 4:45pm PDT
AMC Theatre 06
Google Workspace enables enterprise productivity, but attackers exploit logging gaps to escalate privileges, exfiltrate data, and evade detection. This talk reveals real-world attacks that bypass monitoring and shares techniques to investigate these threats, even without sufficient logs.
Speakers
RG
KN
Sunday April 27, 2025 4:15pm - 4:45pm PDT
AMC Theatre 06 AMC at Metreon
  Presentation, General

4:30pm PDT

Fireproof Your Castle with Risk-First GRC
Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC Theatre 07
GRC teams can be more than just gridlock, red tape, and checklists. By prioritizing a risk-first approach, leveraging both quantitative and qualitative methodologies, and adopting principles-based compliance, GRC becomes a proactive force that empowers organizations to effectively combat security.
Speakers
AY
LP
Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC Theatre 07 AMC at Metreon
  Presentation, General

4:30pm PDT

How to Pull Off a Near Undetectable DDoS Attack (And How to Stop It)
Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC IMAX
What happens when a bad actor has access to millions of browsers? They can pull off a massive attack.
Speakers
SW
Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC IMAX AMC at Metreon
  Presentation, General

4:30pm PDT

Round and Around We Go: Interviews, What Do You Know?
Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC Theatre 09
In this talk, I’ll discuss hiring trends for Security Engineers and Leaders in 2024, covering metrics like time to hire, interview rounds, formats, and rejection trends. Data comes from 30+ placements at 10+ tech startups, mainly in SF, offering insights into the cybersecurity hiring landscape.
Speakers
EB
Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC Theatre 09 AMC at Metreon
  Presentation, General

4:30pm PDT

Understanding IRSF Fraud: Protecting Against SMS Exploitation
Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC Theatre 14
Attackers making money from MY 2FA? It's more likely than you think! SMS is a common 2FA method but creates risk: International Revenue Share Fraud, inflating SMS traffic to siphon revenue. Attendees will learn how to detect and mitigate IRSF with Cloudflare, OpenAI, and Datadog.
Speakers
avatar for Vien Van
avatar for Senthil Sivasubramanian

Senthil Sivasubramanian

Eng Leader, Gusto
Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC Theatre 14 AMC at Metreon
  Presentation, General
 
Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
Filtered by Date - 
Clear filter
Saturday, April 26
Sunday, April 27
AMC Concessions
AMC IMAX
AMC Mezzanine
AMC Theatre 01
AMC Theatre 02
AMC Theatre 03
AMC Theatre 06
AMC Theatre 07
AMC Theatre 09
AMC Theatre 11
AMC Theatre 13
AMC Theatre 14
City View at Metreon
City View Lobby
City View Tent
City View Terrace
Coat Check
Participant Hall
Participant Hall / City View Tent
Participant Hall / Twin Peaks
  • Birds of a Feather
  • Community Organization
  • Food & Drink
  • General
  • Keynote
  • Meetup
  • Panel
  • Presentation
  • Village
  • Village/AI
  • Village/Demo
  • Workshop
  • Popular