BSidesSF 2025

BSidesSF 2025

arrow_back View All Dates

9:00am PDT

Breakfast Participant Hall / City View Tent Espresso & Coffee Participant HallDeepTempo • Meta • Vanta Capture the Flag Participant Hall / Twin PeaksAdobe Participant Hall City View at Metreon (ISC)2 Silicon Valley Participant Hall Electronic Frontier Foundation (EFF) Participant Hall Pacific Hackers Association Participant Hall Secure Diversity/Day of Shecurity Participant Hall WiCyS Participant Hall WISP Participant Hall Bar and Chill Out Participant HallChainguard Headshots AMC ConcessionsOpal Security Info Desk City View Lobby Lounge City View TerraceChainguard Prayer & Mother's Room City View Lobby Registration AMC Concessions Sponsors Participant Hall Adversary Village Participant Hall Bug Bounty Village Participant Hall Career Village Participant Hall Cloud Village Participant Hall Crypto & Privacy Village Participant Hall Embedded Systems Village Participant Hall Hardware Challenge Village Participant Hall IoT Village Participant Hall Lockpick Village Participant Hall Villages Participant Hall AI Village Participant Hall T-Shirt Sales Coat Check Coat Check Coat Check

10:00am PDT

Opening Remarks AMC IMAX

10:15am PDT

Fire, Brimstone, and Bad Security Decisions AMC IMAXWendy Nather

10:30am PDT

Connect with Women in CyberSecurity (WiCyS) AMC Theatre 03

11:00am PDT

Pacific Hackers AMC Theatre 03

11:15am PDT

Not Every Groundbreaking Idea Needs to Become a Billion-Dollar Startup AMC IMAXRoss Haleliuk The Four Tribes of Security Champions AMC Theatre 07Marisa Fagan The Growing Crisis in CVE Data Quality AMC Theatre 09Jerry Gamblin AI Dragons: Threats, Risks, and What We Can Do About Them AMC Theatre 01Tanya Janca How are System Defenders Effectively Using LLMs? AMC Theatre 02Doug Wilson Global BSides Organizers Meetup AMC Theatre 03Ricky • Reed Loden

11:30am PDT

Mind the Gap: Career Growth and Management for Security Engineers AMC Theatre 13Josh Liburdi • Elle McKenna • Sarai Rosenberg • Andrew Kline Don’t Sh*t-Left: How to Actually Shift-Left AMC Theatre 14Ahmad Sadeddin Effective Handling of Third-Party Supplier Incidents AMC Theatre 06Kasturi Puramwar When AI Goes Awry: Responding to AI Incidents AMC Theatre 11Eoin Wickens • Marta Janus

12:00pm PDT

Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies! AMC IMAXAdrian Sanabria The Product Security Imperative: Lessons from CISA AMC Theatre 09Jack Cable Trust Engineering: Building Security Leadership at Early-Stage Startups AMC Theatre 07Mike Privette Lunch Participant Hall / City View Tent

12:30pm PDT

Cloud Security Meetup AMC Theatre 03 LLM Mayhem: Hands-on Red Teaming LLM-Powered Chatbots AMC Theatre 02Travis Smith • Jack Parker Purple Teaming Okta Detections AMC Theatre 01Ken Westin

1:15pm PDT

State of (Absolute) AppSec AMC Theatre 13Seth Law • Ariel Shin • Lakshmi Sudheer • Ken Johnson AI's Bitter Lesson for SOCs: Let Machines Be Machines AMC Theatre 11Jackie Bow • Peter Sanford Confidential Computing: Protecting Customer Data in the Cloud AMC Theatre 14Jordan Mecom CyberCAN: A Roadmap for Municipal Support of Nonprofit Cybersecurity in SF AMC Theatre 06Sarah Powazek • Shannon Pierson

1:30pm PDT

Iron-Clad PKI: Crypto Agility for the Quantum Era AMC Theatre 07Prasanth Sundararajan Lessons from Running a Product Security-Focused Cybersecurity Clinic AMC Theatre 09Aditya Saligrama • Joey Holtzman The Power of Persuasion: Better Security Through... Manipulation? AMC IMAXNate Lee Day of Shecurity AMC Theatre 03

2:15pm PDT

Don't Trust, Verify! - How I Found a CSRF Bug Hiding in Plain Sight AMC Theatre 14Patrick O'Doherty Mapping the SaaS Attack Surface AMC Theatre 07Jaime Blasco Radical Results: A Security Org's Version of Radical Candor AMC IMAXEvan Johnson Third-party Risk Management: SOC 2s, Security Questionnaires, and Psychosis AMC Theatre 09Eleanor Mount Sponsor Passport Raffle Participant Hall CISO Series Podcast - LIVE! AMC Theatre 13David Spark • Andy Ellis • Alexandra Landegger Compliance Without the Chaos: Building It Right Into Your DevOps Pipeline AMC Theatre 06Varun Gurnaney Securing AI Agents: Exploring Critical Threats and Exploitation Techniques AMC Theatre 11Naveen Konrajankuppam Mahavishnu • Mohankumar Vengatachalam

2:45pm PDT

Building Adversary Emulation Capabilities in Your Organization AMC Theatre 02Abhijith "Abx" B R Harnessing GenAI for Cutting-Edge Detection Engineering AMC Theatre 01Matt Bromiley

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network AMC IMAXZach Edwards Care and Feeding of HSMs: Key Management in Hard Mode AMC Theatre 14Nick Pelis Intro to Privacy-Enhancing Technologies (PETs) AMC Theatre 07Harshal Shah There and Back Again: Discovering OT Devices Across Protocol Gateways AMC Theatre 09Rob King

3:15pm PDT

15 Years of BSidesSF: Behind the Scenes AMA AMC Theatre 13Reed Loden • Ricky • Steve • Tania McClain • Meghan Manfre How to Tame Your Dragon: Productionizing Agentic Apps Reliably and Securely AMC Theatre 11Thomas Vissers • Tim Van hamme Slaying the Dragons: A Security Professional’s Guide to Malicious Packages AMC Theatre 06Kirill Boychenko

3:45pm PDT

Follow the Trace: How Traditional AppSec Tools Have Failed Us AMC Theatre 09Kennedy Toomey Is Vulnerability Management Dead? A Security Architect’s Survival Guide AMC Theatre 07Snir Ben Shimol Scalably Securing Third-party Dependencies in Heterogeneous Environments AMC IMAXZiyad Edher • Chris Norman Shadow IT Battlefield: The CyberHaven Breach and Defenses That Worked AMC Theatre 14Rohit Bansal • Zach Pritchard

4:15pm PDT

The Silent Breach: Security Threats in Google Workspace AMC Theatre 06Rex Guo • Khang Nguyen Slaying Dragons Together: Multidisciplinary Solutions to Security Issues AMC Theatre 13Stanley Barr • Mary C Yang • Leslie Z Anderson GenAI Application Security: Not Just Prompt Injection AMC Theatre 11Ahmed Abugharbia

4:30pm PDT

Fireproof Your Castle with Risk-First GRC AMC Theatre 07Aakash Yadav • Lindsey Pilver How to Pull Off a Near Undetectable DDoS Attack (And How to Stop It) AMC IMAXSimon Wijckmans Round and Around We Go: Interviews, What Do You Know? AMC Theatre 09Erin Barry Understanding IRSF Fraud: Protecting Against SMS Exploitation AMC Theatre 14Vien Van • Senthil Sivasubramanian

5:15pm PDT

Closing Remarks AMC Theatre 13