BSidesSF 2025

BSidesSF 2025

arrow_back View All Dates

9:00am PDT

Breakfast Participation Hall Espresso & Coffee Participation HallDeepTempo • Meta • Vanta Headshots TBDOpal Security Info Desk Lobby Prayer & Mother's Room Lobby Registration TBD Sponsors Participation Hall Capture the Flag TBDAdobe Villages Participation Hall Bar and Chill Out Participation Hall Lounge City View Terrace T-Shirt Sales Coat Check Coat Check Coat Check

10:00am PDT

Opening Remarks (Sunday) AMC IMAX

10:15am PDT

Keynote (Sunday) AMC IMAXSwathi Joshi

11:15am PDT

Not every groundbreaking idea needs to become a billion-dollar startup AMC IMAXRoss Haleliuk The Four Tribes of Security Champions AMC Theatre 07Marisa Fagan The Growing Crisis in CVE Data Quality AMC Theatre 09Jerry Gamblin AI Dragons: Threats, Risks, and What We Can Do About Them AMC Theatre 01Tanya Janca

11:30am PDT

Mind the Gap: Career Growth and Management for Security Engineers AMC Theatre 13Josh Liburdi • elle mckenna • Sarai Rosenberg • Andrew Kline Don’t Sh*t-Left: How to Actually Shift-Left AMC Theatre 15Ahmad Sadeddin Trace to Triage: How to Connect Product Vulnerabilities to Security Paths AMC Theatre 06Ben Stav

12:00pm PDT

Lessons from running a product security-focused cybersecurity clinic AMC Theatre 07Aditya Saligrama • Joey Holtzman Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies! AMC IMAXAdrian Sanabria The Product Security Imperative: Lessons from CISA AMC Theatre 09Jack Cable Lunch Participation Hall

12:30pm PDT

Sponsor Raffle TBD LLM Mayhem - Hands on Red Teaming LLM Powered Chatbots AMC Theatre 02Travis Smith • Jack Parker Purple Teaming Okta Detections AMC Theatre 01Ken Westin

1:15pm PDT

State of (Absolute) AppSec AMC Theatre 13Seth Law • Lakshmi Sudheer AI's Bitter Lesson for SOCs: Let Machines Be Machines AMC Theatre 11Jackie Bow • Peter Sanford Confidential Computing: Protecting Customer Data in the Cloud AMC Theatre 15Jordan Mecom CyberCAN: A Roadmap for Municipal Support of Nonprofit Cybersecurity in SF AMC Theatre 06Sarah Powazek • Shannon Pierson

1:30pm PDT

Iron-Clad PKI - Crypto Agility for the Quantum Era AMC Theatre 07Prasanth Sundararajan The Power of Persuasion: Better Security Through... Manipulation? AMC IMAXNate Lee

2:15pm PDT

Charting the SSH Multiverse AMC IMAXHD Moore don't trust, verify! - how I found a CSRF bug hiding in plain sight AMC Theatre 15Patrick O'Doherty There and Back Again: Discovering OT devices across protocol gateways AMC Theatre 07Rob King Third Party Risk Management: SOC 2s, security questionnaires, and psychosis AMC Theatre 09Eleanor Mount CISO Series (Podcast) AMC Theatre 13 Compliance Without the Chaos: Building it Right into Your DevOps Pipeline AMC Theatre 06Varun Gurnaney Securing AI agents: Exploring Critical Threats and Exploitation Techniques AMC Theatre 11Naveen Konrajankuppam Mahavishnu • Mohankumar Vengatachalam

2:45pm PDT

Building adversary emulation capabilities in your organization AMC Theatre 02Abhijith "Abx" B R Harnessing GenAI for Cutting-Edge Detection Engineering AMC Theatre 01Matt Bromiley

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network AMC IMAXZach Edwards Care and Feeding of HSMs: Key Management in Hard Mode AMC Theatre 15Nick Pelis Intro to Privacy-Enhancing Technologies (PETs) AMC Theatre 07Harshal Shah Radical Results: A security org's version of radical candor AMC Theatre 09Evan Johnson

3:15pm PDT

15 Years of BSidesSF: Behind the Scenes AMA AMC Theatre 13 How to Tame Your Dragon: Productionizing Agentic Apps Reliably and Securely AMC Theatre 11Thomas Vissers • Tim Van hamme When AI Goes Awry: Responding to AI Incidents AMC Theatre 06Eoin Wickens • Marta Janus

3:45pm PDT

Scalably Securing Third-party Dependencies in Heterogenous Environments AMC IMAXZiyad Edher Shadow IT Battlefield: The CyberHaven Breach and Defenses that worked AMC Theatre 15Rohit Bansal Trust Engineering: Building Security Leadership at Early-Stage Startups AMC Theatre 07Mike Privette

4:15pm PDT

Slaying Dragons Together: Multidisciplinary Solutions to Security Issues AMC Theatre 13Stanley Barr Effective Handling of Third-Party Supplier Incidents AMC Theatre 06Kasturi Puramwar

4:30pm PDT

Fireproof your castle with risk-first GRC AMC Theatre 07Aakash Yadav • Lindsey Pilver How to pull off a near undetectable DDoS attack (and how to stop it) AMC IMAXSimon Wijckmans Round and Around we go - Interviews, what do you know? AMC Theatre 09Erin Barry Understanding IRSF Fraud: Protecting Against SMS Exploitation AMC Theatre 15Vien Van • Senthil

5:15pm PDT

Closing Remarks AMC Theatre 13