BSidesSF 2025

BSidesSF 2025

11:15am PDT

Enhancing Secret Detection in Cybersecurity with Small LMs AMC Theatre 11Danny Lazarev • Erez Harush Let's Talk About the AI Apocalypse AMC IMAXDylan Ayrey Lex Sleuther - A Novel Approach to Script Language Detection AMC Theatre 09Aaron James The Hidden Access Paths to Smaugs Cavern AMC Theatre 07Ben Arent

12:00pm PDT

Navigating the Unknowns: Fraud Mitigation for Netflix Live Events AMC IMAXAditi Gupta • Yue Wang One SOC, The Whole SOC, and Nothing But The SOC, So Help Me AMC Theatre 07Carson Zimmerman Resilience in the Uncharted AI Landscape AMC Theatre 11Ranita Bhattacharyya The Art of Cybersecurity Mastery: From Entry-Level to Staff+ AMC Theatre 09Florian Noeding

1:30pm PDT

Centralizing Egress Access Controls Across a Hybrid Environment at Block AMC Theatre 07Ramesh Ramani Charting the SSH Multiverse AMC IMAXHD Moore Threat Modeling Meets Model Training: Web App Security Skills for AI AMC Theatre 11Breanne Boland WHOIS Your Daddy: Tracking Iranian-backed Cyber Operations with Passive DNS AMC Theatre 09Austin Northcutt

2:15pm PDT

Adventures & Findings in ISP Hacking AMC Theatre 09Ian Foster Log In Through the Front Door: Automating Defense Against Credential Leaks AMC Theatre 07Barath Subramaniam One Search To Rule Them All: Threat Modelling AI Search AMC Theatre 11Kane Narraway Versus Killnet AMC IMAXAlex Holden

3:00pm PDT

Decoding GraphQL: How to Map Hidden Vulnerabilities AMC Theatre 09Antoine Carossio • Tristan Kalos Everyday AI: Leveraging LLMs for Simple, Effective Security Automation AMC Theatre 11Matthew Sullivan • Dominic Zanardi From LOL to LOC: LOLBins Are No Laughing Matter AMC Theatre 07Matan Mittelman Tracking the World's Dumbest Cyber Mercenaries AMC IMAXCooper Quintin • Eva Galperin

3:45pm PDT

Fake Hires, Real Threats: When Background Checks Aren’t Enough AMC Theatre 09Mabel Soe Something’s Phishy: See the Hook Before the Bait AMC Theatre 07Malachi Walker Trawling for IOCs: Catching C2 in a Sea of Data AMC IMAXMoses Schwartz Using AI to Discover Silently Patched Vulnerabilities in Open Source AMC Theatre 11Mackenzie Jackson

4:30pm PDT

AI Won’t Help You Here AMC Theatre 11Ian Amit Blank Space: Filling the Gaps in Atomic and Behavioral Cloud-Specific IoCs AMC Theatre 07Merav Bar • Gili Tikochinski BSidesSF Plays Incident Response AMC IMAXMaya Kaczorowski • Whitney Merrill Dragging Out Dragons: Slaying Hidden Threats in Residential Proxies AMC Theatre 09Christo Roberts

5:15pm PDT

Mind vs Machine: The Role of Human Psychology and AI in Security Culture AMC Theatre 11Anubha Nagawat • Ashutosh Gupta Your Intrusion Detection Still Sucks (And What to Do About It) AMC Theatre 09Jason Craig

11:15am PDT

Not Every Groundbreaking Idea Needs to Become a Billion-Dollar Startup AMC IMAXRoss Haleliuk The Four Tribes of Security Champions AMC Theatre 07Marisa Fagan The Growing Crisis in CVE Data Quality AMC Theatre 09Jerry Gamblin

12:00pm PDT

Preparing for Dragons: Don’t Sharpen Swords. Set Traps, Gather Supplies! AMC IMAXAdrian Sanabria The Product Security Imperative: Lessons from CISA AMC Theatre 09Jack Cable Trust Engineering: Building Security Leadership at Early-Stage Startups AMC Theatre 07Mike Privette

1:30pm PDT

Iron-Clad PKI: Crypto Agility for the Quantum Era AMC Theatre 07Prasanth Sundararajan Lessons from Running a Product Security-Focused Cybersecurity Clinic AMC Theatre 09Aditya Saligrama • Joey Holtzman The Power of Persuasion: Better Security Through... Manipulation? AMC IMAXNate Lee

2:15pm PDT

Don't Trust, Verify! - How I Found a CSRF Bug Hiding in Plain Sight AMC Theatre 14Patrick O'Doherty Mapping the SaaS Attack Surface AMC Theatre 07Jaime Blasco Radical Results: A Security Org's Version of Radical Candor AMC IMAXEvan Johnson Third-party Risk Management: SOC 2s, Security Questionnaires, and Psychosis AMC Theatre 09Eleanor Mount

3:00pm PDT

A Deep Dive into the Triad Nexus Pig Butchering & Money Laundering Network AMC IMAXZach Edwards Care and Feeding of HSMs: Key Management in Hard Mode AMC Theatre 14Nick Pelis Intro to Privacy-Enhancing Technologies (PETs) AMC Theatre 07Harshal Shah There and Back Again: Discovering OT Devices Across Protocol Gateways AMC Theatre 09Rob King

3:45pm PDT

Follow the Trace: How Traditional AppSec Tools Have Failed Us AMC Theatre 09Kennedy Toomey Is Vulnerability Management Dead? A Security Architect’s Survival Guide AMC Theatre 07Snir Ben Shimol Scalably Securing Third-party Dependencies in Heterogeneous Environments AMC IMAXZiyad Edher • Chris Norman Shadow IT Battlefield: The CyberHaven Breach and Defenses That Worked AMC Theatre 14Rohit Bansal • Zach Pritchard

4:15pm PDT

The Silent Breach: Security Threats in Google Workspace AMC Theatre 06Rex Guo • Khang Nguyen

4:30pm PDT

Fireproof Your Castle with Risk-First GRC AMC Theatre 07Aakash Yadav • Lindsey Pilver How to Pull Off a Near Undetectable DDoS Attack (And How to Stop It) AMC IMAXSimon Wijckmans Round and Around We Go: Interviews, What Do You Know? AMC Theatre 09Erin Barry Understanding IRSF Fraud: Protecting Against SMS Exploitation AMC Theatre 14Vien Van • Senthil Sivasubramanian