BSidesSF 2025: Full Schedule

arrow_back View All Dates

10:00am PDT

Opening Remarks

Sunday April 27, 2025 10:00am - 10:15am PDT

AMC IMAX

Welcome to day two of BSidesSF 2025!

Sunday April 27, 2025 10:00am - 10:15am PDT
AMC IMAX AMC at Metreon

10:15am PDT

Fire, Brimstone, and Bad Security Decisions

Sunday April 27, 2025 10:15am - 11:00am PDT

AMC IMAX

An important facet of resilience in cybersecurity has to do with recovery from making wrong decisions, such as a strategic choice in policy, design, architecture, or even procurement. How do you back out of something that seemed like a good idea at the time, but that you now realize is creating problems? And how can we stay curious in the face of being wrong, as well as design security for the future to make redirection easier? This session covers the need to plan for human fallibility – and may itself be wrong …

Speakers

Wendy Nather

Senior Research Initiatives Director, 1Password

Wendy Nather is the Senior Research Initiatives Director at 1Password. She was previously the Director of Advisory CISOs at Duo Security, Research Director at the Retail ISAC, and Research Director of the Information Security Practice at 451 Research. Wendy led IT security for the... Read More →

Sunday April 27, 2025 10:15am - 11:00am PDT
AMC IMAX AMC at Metreon

Keynote

11:15am PDT

Not Every Groundbreaking Idea Needs to Become a Billion-Dollar Startup

Sunday April 27, 2025 11:15am - 11:45am PDT

AMC IMAX

The cybersecurity industry has 5,000+ startups yet many key problems are overlooked for not being "venture scale." This talk explores alternative paths (bootstrapping, Silicon Valley Small Businesses) and why niche markets and smaller ideas can drive impactful solutions without unicorn pressure.

Speakers

Ross Haleliuk

Co-founder, Stealth

Sunday April 27, 2025 11:15am - 11:45am PDT
AMC IMAX AMC at Metreon

Presentation, General

12:00pm PDT

Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies!

Sunday April 27, 2025 12:00pm - 12:30pm PDT

AMC IMAX

Most people aren’t dragon slayers. There are dragon slayers out there, but they’re not us. EDR isn’t a dragon slayer. Neither is the SOC. That’s okay — when the dragon comes, the goal should be *survival,* not going out in a blaze of glory.

Speakers

Adrian Sanabria

Principal Researcher, Defenders Initiative

Adrian is a successful generalist with over two decades of experience hacking, fixing, breaking, building, and teaching in InfoSec. He’s always trying to see the big picture and figure out the best security strategies. Despite all these years in the industry, he is still optimistic... Read More →

Sunday April 27, 2025 12:00pm - 12:30pm PDT
AMC IMAX AMC at Metreon

Presentation, General

1:30pm PDT

The Power of Persuasion: Better Security Through... Manipulation?

Sunday April 27, 2025 1:30pm - 2:00pm PDT

AMC IMAX

Security’s weakest link comes with ten fingers, ten toes and an uncanny ability to find ways past your thoughtfully implemented controls. Learn well-tested psychology principles that drive positive security outcomes. From social proof to reciprocity, small changes in approach bring outsized results.

Speakers

Nate Lee

Sunday April 27, 2025 1:30pm - 2:00pm PDT
AMC IMAX AMC at Metreon

Presentation, General

2:15pm PDT

Radical Results: A Security Org's Version of Radical Candor

Sunday April 27, 2025 2:15pm - 2:45pm PDT

AMC IMAX

Security practitioners are put in tough positions whether you're new to security or an experienced CISO. Based on "Radical Candor", you'll leave this talk with new perspective on the way security teams are perceived by their peers and how to optimize the good and minimize the unavoidable bad.

Speakers

Evan Johnson

CEO, RunReveal

Sunday April 27, 2025 2:15pm - 2:45pm PDT
AMC IMAX AMC at Metreon

Presentation, General

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network

Sunday April 27, 2025 3:00pm - 3:30pm PDT

AMC IMAX

The presentation will cover research into pig butchering scams connected to FUNNULL CDN-hosted money laundering, retail phishing campaigns targeting luxury brands, and more. Technical analysis steps will be provided and explained in-depth as we cover this threat which we have dubbed “Triad Nexus."

Speakers

Zach Edwards

Sunday April 27, 2025 3:00pm - 3:30pm PDT
AMC IMAX AMC at Metreon

Presentation, General

3:45pm PDT

Scalably Securing Third-party Dependencies in Heterogeneous Environments

Sunday April 27, 2025 3:45pm - 4:15pm PDT

AMC IMAX

Learn how Anthropic automates dependency security at scale across diverse infrastructure and environments while still letting engineers use the tools and dependencies they need. We'll explore Dependant, our tool to enforce our dependency posture at the network level, and how users interact with it.

Speakers

Ziyad Edher

Software Engineer, Anthropic

Chris Norman

Member of Technical Staff, Anthropic

Sunday April 27, 2025 3:45pm - 4:15pm PDT
AMC IMAX AMC at Metreon

Presentation, General

4:30pm PDT

How to Pull Off a Near Undetectable DDoS Attack (And How to Stop It)

Sunday April 27, 2025 4:30pm - 5:00pm PDT

AMC IMAX

What happens when a bad actor has access to millions of browsers? They can pull off a massive attack.

Speakers

Simon Wijckmans

Sunday April 27, 2025 4:30pm - 5:00pm PDT
AMC IMAX AMC at Metreon

Presentation, General