Middle Ground Events Breaking Ground Common Ground Ground Floor Ground Truth Hire Ground I Am The Cavalry PasswordsCon Proving Ground Training Ground Skytalks

Monday
August 4th

Tuesday
August 5th

Wednesday
August 6th

07:00-07:00

Info Booth Opens, Monday

07:00-08:30

Breakfast, Monday

07:30-07:30

Registration Opens, Monday

08:30-08:30

Middle Ground Opens, Monday

08:30-08:30

Silent Auction Opens

09:00-10:00

Skytalks Token Drop 1

10:00-11:30

Morning Talks, Monday

10:30-14:30

Morning Trainings, Monday

12:30-13:30

Skytalks Token Drop 2

12:30-14:00

Lunch, Monday

14:00-16:00

Afternoon Talks, Monday

14:30-14:30

Trainer Box Lunches Delivered, Monday

15:00-19:00

Afternoon Trainings, Monday

17:00-19:00

Evening Talks, Monday

19:00-19:00

Middle Ground Closes, Monday

19:00-19:00

Info Booth Closes, Monday

19:00-19:00

Registration Closes, Monday

09:00-09:00

PvJ CTF Play Begins, Monday

16:00-16:00

PvJ CTF Play Ends, Monday

16:00-17:00

Happy Hour, Monday

17:00-17:30

PvJ CTF Hotwash, Monday

19:00-22:00

WhoAmI.exe - Can You Find The Threat?

19:00-22:00

Board Game Night

19:00-21:00

Friends of Bill W Meet-Up, Monday

20:00-22:00

BSLV Volunteer Reception

20:00-22:00

Skytalks Reception

22:00-00:00

Queercon Mixer

09:30-09:55

Opening Remarks, Monday

10:00-10:45

Who Scans the Scanner? Exploiting Trend Micro Mobile Security

11:00-11:20

Creating the Torment Nexus: Using Machine Learning to Defeat Machine Learning

11:30-12:15

The Scene is Dead

14:00-14:45

My friend Ben: solid employee, DPRK agent

15:00-15:45

Shedding Light on Web Isolation Technologies and Their Bypass Techniques: C2 Communication via Outlook Using SMTP and IMAP

17:00-17:45

The (Un)Rightful Heir: My dMSA Is Your New Domain Admin

18:00-18:45

Detecting, Deobfuscating, and Preventing Obfuscated Script Execution with Tree-sitter

10:00-10:45

Locking Hands: Ransomware Meets Bioimplants

11:00-11:20

So You Want to Give A Talk: How to Write a CFP

14:00-14:45

Agentic AI Malware: Why the Cybersecurity Battle Isn’t Over

15:00-15:45

Dungeons & Dragons: The security tool you didn’t know you needed

17:00-17:45

New Protocol: Novel Threats--Exploring MCP’s Emerging Security Risks

18:00-18:45

From interview questions to cluster damage: Adventures in k8s cluster shenanigans

10:00-10:45

Beyond the Breach: Why Your Tabletop Exercise Should be Your Worst Nightmare

11:00-11:20

Turbo Tactical Exploitation: 22 Tips for Tricky Targets

14:00-14:45

Avoiding Credential Chaos: Authenticating With No Secrets

15:00-15:20

Hacking Secure Coding Into Education

15:30-15:50

Casting Light on Shadow Cloud Deployments

17:00-17:45

Don't be LLaMe - The basics of attacking LLMs in your Red Team exercises

18:00-18:45

.e'X'es and 'O'auths (They Haunt Me): In-Depth Analysis of OAuth/OIDC Misconfigurations and Token Replay Attacks

10:00-10:20

“PEBKAC Rebooted: A Hacker’s Guide to People‑Patching in 90 Days”

10:30-11:15

The Hackbot Builder's Guide to IDOR Detection

14:00-14:45

Hazard Analysis of Military AI Systems Using STPA-Sec: A Systems-Theoretic Approach to Secure and Assured Autonomy

15:00-15:45

Human Attack Surfaces in Agentic Web: How I Learned to Stop Worrying and Love the AI Apocalypse

17:00-17:45

Automating Phishing Infrastructure Development Using AI Agents

18:00-18:45

A Framework for Evaluating the Security of AI Model Infrastructures

10:00-10:45

From Help Desk to CISO

11:00-11:20

Hack Your Network: Career Connections for Cyber Pros

14:00-14:45

Where’s Waldo? Why Recruiters Can’t Find You (and What To Do About It)

15:00-15:45

Craps, Clout, and Career Chaos: The Game They Forgot to Explain

16:00-18:00

Hire Ground Mixer, Monday

18:00-18:55

Hire Ground Resume Reviews, Monday Evening

10:00-11:30

Setting the Table - WarGames 2027 & Maslow's Hierarchy of Needs as Hybrid Warfare Nears

14:00-16:00

Defending Our Water - Defending Our Lives

17:00-17:40

Cyber Incident Command System (CICS) A people orchestration layer

17:40-18:20

Nonprofit (In)security: Creative Protections for Service Organizations

18:20-19:00

Cascading Failure, Unified Defense: Defending Water, Power, Healthcare, & EMS

10:00-10:45

I'm A Machine, And You Should Trust Me: The Future Of Non-Human Identity

11:00-11:20

The Rise of Synthetic Passwords in Botnet & Attack Operations

14:00-14:45

Extending Password (in)Security to the Browser: How Malicious Browser Extensions Are Used to Steal User Passwords

15:00-15:45

Password ~Audit~ Cracking in AD: The Fun Part of Compliance

17:00-17:45

The HMAC Trap: Security or Illusion?

18:00-18:45

Machine Identity & Attack Path: The Danger of Misconfigurations

10:00-10:25

Detect and Respond? Cool Story — or Just Don’t Let the Bad Stuff Start.

10:30-10:55

I Didn’t Register for This: What’s Really in Google’s Artifact Registry?

11:00-11:25

SOC Like a Genius: Cognitive Agents Delivering Wisdom at Scale

14:00-14:25

Innovative, Shiny, and Vulnerable: Four Ways to Exploit Modern SaaS Data Platforms

14:25-14:50

Broke but Breached: Secret Scanning at Scale on a Student Budget

15:00-15:25

Prompt Hardener - Automatically Evaluating and Securing LLM System Prompts

15:30-15:55

Community Defense in Depth: Teaching digital security and privacy practices for the public good

17:00-17:25

Azazel System: Tactical Delaying Action via the Cyber-Scapegoat Gateway

17:30-17:55

The Perfect BLEnd: Reverse engineering a bluetooth controlled blender for better smoothies

18:00-18:25

RAGnarok: Assisting Your Threat Hunting with Local LLM

Reservations via Eventbrite are required.

10:30-14:30

Writing Windows Kernel Drivers for Power and Visibility, AM

10:30-14:30

Multi-Cloud (AWS, Azure & GCP) Security [25 Edition], Day One, AM

10:30-14:30

From Command Line to Center Stage: Hack Your Way to Confident Speaking

10:30-14:30

Cybersecurity Roleplaying Training: Design & Implement Engaging Incident Response Exercises

10:30-14:30

Building your own CA infrastructure on cheap HSMs

10:30-14:30

Introduction to Cryptographic Attacks

15:00-19:00

Writing Windows Kernel Drivers for Power and Visibility, PM

15:00-19:00

From Code to Cloud: Securing Your Stack with Open-Source Tools

15:00-19:00

Cyber Threat Landscaping Workshop

15:00-19:00

Workshop on Cybersecurity Policy in Practice

15:00-19:00

Multi-Cloud (AWS, Azure & GCP) Security [25 Edition], Day One, PM

15:00-19:00

Career Campaigns: A Tabletop RPG Workshop for Your Next Infosec Role

Tokens required for entry. Don't forget to pick up your Skytalks token in Middle Ground.

10:00-11:00

(01) Ask the Fed

14:00-14:45

(02) The Botnet Strikes Back: how we assembled a coalition to take down a criminal network & their all-out response

15:00-15:45

(03) The Remote Grift: Cunning Meets Naivete, and the Victims Become the Criminals

16:00-16:20

(04) Real Life Needs an ESP Overlay — So we Made One!

17:00-17:45

(05) Oh Hotel No!: How A Hopeless Hooligan Helped A Homie From Homeless To Homeowner In 9 Months

18:00-18:45

(06) Indexing the Chaos: Extracting PII from Ransomware Leaks

Code of Conduct & Photo Policy

Security BSides Las Vegas, Inc. is a federally recognized 501(c)(3) since 2012

©2025 Security BSides Las Vegas, Inc.