BSidesSF 2025

BSidesSF 2025

arrow_back View All Dates

11:15am PDT

Not Every Groundbreaking Idea Needs to Become a Billion-Dollar Startup AMC IMAXRoss Haleliuk The Four Tribes of Security Champions AMC Theatre 07Marisa Fagan The Growing Crisis in CVE Data Quality AMC Theatre 09Jerry Gamblin

12:00pm PDT

Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies! AMC IMAXAdrian Sanabria The Product Security Imperative: Lessons from CISA AMC Theatre 09Jack Cable Trust Engineering: Building Security Leadership at Early-Stage Startups AMC Theatre 07Mike Privette

1:30pm PDT

Iron-Clad PKI: Crypto Agility for the Quantum Era AMC Theatre 07Prasanth Sundararajan Lessons from Running a Product Security-Focused Cybersecurity Clinic AMC Theatre 09Aditya Saligrama • Joey Holtzman The Power of Persuasion: Better Security Through... Manipulation? AMC IMAXNate Lee

2:15pm PDT

Don't Trust, Verify! - How I Found a CSRF Bug Hiding in Plain Sight AMC Theatre 14Patrick O'Doherty Mapping the SaaS Attack Surface AMC Theatre 07Jaime Blasco Radical Results: A Security Org's Version of Radical Candor AMC IMAXEvan Johnson Third-party Risk Management: SOC 2s, Security Questionnaires, and Psychosis AMC Theatre 09Eleanor Mount

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network AMC IMAXZach Edwards Care and Feeding of HSMs: Key Management in Hard Mode AMC Theatre 14Nick Pelis Intro to Privacy-Enhancing Technologies (PETs) AMC Theatre 07Harshal Shah There and Back Again: Discovering OT Devices Across Protocol Gateways AMC Theatre 09Rob King

3:45pm PDT

Follow the Trace: How Traditional AppSec Tools Have Failed Us AMC Theatre 09Kennedy Toomey Is Vulnerability Management Dead? A Security Architect’s Survival Guide AMC Theatre 07Snir Ben Shimol Scalably Securing Third-party Dependencies in Heterogeneous Environments AMC IMAXZiyad Edher • Chris Norman Shadow IT Battlefield: The CyberHaven Breach and Defenses That Worked AMC Theatre 14Rohit Bansal • Zach Pritchard

4:15pm PDT

The Silent Breach: Security Threats in Google Workspace AMC Theatre 06Rex Guo • Khang Nguyen

4:30pm PDT

Fireproof Your Castle with Risk-First GRC AMC Theatre 07Aakash Yadav • Lindsey Pilver How to Pull Off a Near Undetectable DDoS Attack (And How to Stop It) AMC IMAXSimon Wijckmans Round and Around We Go: Interviews, What Do You Know? AMC Theatre 09Erin Barry Understanding IRSF Fraud: Protecting Against SMS Exploitation AMC Theatre 14Vien Van • Senthil Sivasubramanian