BSidesSF 2025

BSidesSF 2025

arrow_back View All Dates

11:15am PDT

Not Every Groundbreaking Idea Needs to Become a Billion-Dollar Startup

11:15am PDT

The Four Tribes of Security Champions

11:15am PDT

The Growing Crisis in CVE Data Quality

11:30am PDT

Don’t Sh*t-Left: How to Actually Shift-Left

11:30am PDT

Effective Handling of Third-Party Supplier Incidents

11:30am PDT

When AI Goes Awry: Responding to AI Incidents

12:00pm PDT

Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies!

12:00pm PDT

The Product Security Imperative: Lessons from CISA

12:00pm PDT

Trust Engineering: Building Security Leadership at Early-Stage Startups

1:15pm PDT

AI's Bitter Lesson for SOCs: Let Machines Be Machines

1:15pm PDT

Confidential Computing: Protecting Customer Data in the Cloud

1:15pm PDT

CyberCAN: A Roadmap for Municipal Support of Nonprofit Cybersecurity in SF

1:30pm PDT

Iron-Clad PKI: Crypto Agility for the Quantum Era

1:30pm PDT

Lessons from Running a Product Security-Focused Cybersecurity Clinic

1:30pm PDT

The Power of Persuasion: Better Security Through... Manipulation?

2:15pm PDT

Don't Trust, Verify! - How I Found a CSRF Bug Hiding in Plain Sight

2:15pm PDT

Mapping the SaaS Attack Surface

2:15pm PDT

Radical Results: A Security Org's Version of Radical Candor

2:15pm PDT

Third-party Risk Management: SOC 2s, Security Questionnaires, and Psychosis

2:15pm PDT

Compliance Without the Chaos: Building It Right Into Your DevOps Pipeline

2:15pm PDT

Securing AI Agents: Exploring Critical Threats and Exploitation Techniques

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network

3:00pm PDT

Care and Feeding of HSMs: Key Management in Hard Mode

3:00pm PDT

Intro to Privacy-Enhancing Technologies (PETs)

3:00pm PDT

There and Back Again: Discovering OT Devices Across Protocol Gateways

3:15pm PDT

How to Tame Your Dragon: Productionizing Agentic Apps Reliably and Securely

3:15pm PDT

Slaying the Dragons: A Security Professional’s Guide to Malicious Packages

3:45pm PDT

Follow the Trace: How Traditional AppSec Tools Have Failed Us

3:45pm PDT

Is Vulnerability Management Dead? A Security Architect’s Survival Guide

3:45pm PDT

Scalably Securing Third-party Dependencies in Heterogeneous Environments

3:45pm PDT

Shadow IT Battlefield: The CyberHaven Breach and Defenses That Worked

4:15pm PDT

The Silent Breach: Security Threats in Google Workspace

4:15pm PDT

GenAI Application Security: Not Just Prompt Injection

4:30pm PDT

Fireproof Your Castle with Risk-First GRC

4:30pm PDT

How to Pull Off a Near Undetectable DDoS Attack (And How to Stop It)

4:30pm PDT

Round and Around We Go: Interviews, What Do You Know?

4:30pm PDT

Understanding IRSF Fraud: Protecting Against SMS Exploitation