2026 BSides Las Vegas Schedule Tuesday August 4th
Events Breaking Ground Common Ground Ground Truth Hire Ground I Am The Cavalry PasswordsCon Proving Ground Training Ground Skytalks

Find us on HackerTracker

MONDAY
August 3

TUESDAY
August 4

WEDNESDAY
August 5

Events

Breaking Ground

Common Ground

Ground Truth

Hire Ground

I Am The Cavalry

PasswordsCon

Proving Ground

Training Ground

Skytalks

09:00-09:30

Hallway

Skytalks token drop 7,8,9

12:30-13:00

Hallway

Skytalks token drop Tokens 10,11,12,13

15:00-15:30

H114

Mental Health Wellness With Dr. Sara

16:00-17:00

Florentine C/D

Happy Hour

19:00-21:00

Siena

BSides Organizers Meetup

19:00-20:00

Pool

Data Science Meetup

19:00-19:30

Florentine C/D

Middle Ground closes

19:30-22:00

G103

Recovery Hackers

21:00-23:59

Copa

Pub Quiz

22:00-02:00

Pool

Karaoke

Located in Florentine A

10:00-10:45

AD security is not the end : Why Middleware is the New Tier 0 and How It Can Be Weaponized for Total Compromise

11:00-11:30

Your Red Team Doesn't Follow a Kill Chain: What 95 Engagements Actually Look Like

11:30-12:15

Bashing CloudShells for mining, networking, exfil and persistence at scale

14:00-14:30

Mind the Gap: Bridges, Backplanes, and BloodHound

14:30-15:00

Finding vulnerabilities in windows kernel drivers & performing BYOVD attacks

15:00-15:30

FLASI: When Your SIEM Is Too Expensive to Tell You the Truth

15:30-16:00

When CI Trusts Attackers: Exploiting Metadata Injection in GitHub Actions for Supply Chain Compromise

17:00-17:45

Breaking the Modern Boot Chain on Windows and Linux: Exploiting UEFI Internals

18:00-19:00

Lyra: An LLVM IR Obfuscator for Rust

Located in Florentine F

10:00-11:00

Destroyed by Breach: Corporate casualties of cybersecurity failures

11:00-11:30

Trust No Agent: Cryptographic Identity and Verifiable Messaging for AI

11:30-12:15

X-Ray Specs for Agents: Pentesting MCPs, Skills, and the Plugin Supply Chain

14:00-15:00

Ask EFF

15:00-15:30

Ghost in the Hiring Machine: How to Spot Fake Personas Before They're on Your Payroll

15:30-16:00

Catch Me If You Can: Hooking your way into encrypted intimate IoT traffic

17:00-17:45

(A)I Feel the Need: The Need for Ludicrous Speed

18:00-18:45

Five AIs Walk Into a Severity Meeting: Auto-Triage and the Evolution of GM’s Bug Bounty

Located in Florentine E

10:00-10:45

Putting the CAT in the HAT: Exploring Cognitive Threats in the Context of Human Autonomy Teams (HAT)

11:00-11:45

The Meeple Problem: How to Build Risk Controls Around Actions, Not Roles

15:00-15:45

Your Context is Mine! When a Single Drop Poisons the AI Agent's Well

17:00-17:45

Social Engineering Has a Grammar: Reverse-Engineering the Sequence Behind Real Attacks

18:00-18:45

ScamBench: Measuring Real-World Risk of AI-Generated Social Engineering

Located in Florentine B

10:00-10:55

IT Security Certifications: Everything you wanted to know and more

11:00-11:55

If an Autistic Girl From Rural Mississippi Can Make It in Infosec, So Can You: Building a Cybersecurity Career on Your Own Terms

12:00-12:25

Sybil-Resistant Hiring: Verifying Real Signal in Cyber Interviews

14:00-14:55

Dr. Strangeprompt, or How I Learned to Stop Coding and Love my AI

15:00-15:45

Burn the Five Year Plan: An Anti-Roadmap for the Rest of Us

Located in Copa Lounge

10:00-10:45

Broadcast, Don't Chat: Hyperlocal Emergency Comms on $11 Radios Or: Why the Mesh Won't Save You

10:45-11:30

Proxy Networks and the Threat to Critical Infrastructure

14:00-15:00

Power Resilience for Lifelines :Can The Electrotech Stack Light the Way?

15:00-16:00

Glass Houses: AI-Era OT/ICS Sprints

17:00-17:45

CI Fortify

18:00-18:30

The DIE Triad: The Past Present and Future of Security and How to Stop It

18:30-19:15

Operation Graceful Exit: Creating Smart Policies For Software End of Life

Located in Siena

10:00-11:00

DPAPI Was Never a Lock: How Infostealers Break Every Windows Credential Store

11:00-12:00

Introduction to offline password cracking with Hashcat

12:00-12:30

Kill the Login: Continuous Trust in the Age of AI

12:30-12:45

Everything I had to learn about Passkeys

14:00-14:30

The Dots Do Matter: Gmail's Invisible Blindspot

14:30-15:00

My email address is an API key?

15:00-16:00

Criminal Hijacking: Profiling Threat Actors engaged in session takeover with Infostealer Logs

18:00-18:30

Who Goes There? Actively Detecting Intruders With Cyber Deception Tools

18:30-19:00

The Synthetic Insider: Securing Non-Human Identities in Cloud Workflows

Located in Firenze

10:00-10:30

Crypto Is Fine. The Code Is Not: Real-World Cryptographic Failures

10:30-11:00

Decentralized Deception: EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

11:00-11:30

Democratizing Hack-The-Box: Intent as Infrastructure for Vulnerable Topologies

11:30-12:00

From the Wild West to Yes, If: Building an AI Security & Governance Program

12:00-12:45

Legalized Discrimination: How Algorithms gradually take away our rights

14:00-14:30

Quality Over Quantity: A Targeted Approach to Breaking Into Cybersecurity

14:30-15:00

Stack Overflow, but the Largest Byte is 3F

15:00-15:30

After the Jailbreak: A Product Security Incident Response Playbook for Agentic LLM Applications

15:30-16:00

For Prompt Injection, Press 1: Hacking AI Voice Agents

17:00-17:30

Spanning the Eras: Egress Domain Governance from On-Premises to Agentic Sandboxes

17:30-18:00

MCP Servers Are a New Attack Surface: A Practitioner's Guide to Building and Using Them Securely

18:00-18:15

The State of Mac Malware: How macOS Became a First-Class Target

Located in Building H & Pub 365

Reservations via Humanitix are required.

10:30-18:30

Wi-Fight Club: I am Jack's Evil Twin

10:30-14:30

From Copilot to Commander: Building Agentic AI for Security Investigations

10:30-14:30

Mitigating Digital Risk in Critical Infrastructure

10:30-14:30

Binary Jiujitsu: White Belt and Blue Belt Fundamentals - Part 3

15:00-19:00

From Prompt to Pwn: Hands-On Exploitation of LLM-Powered Applications with OWASP Techniques

15:00-19:00

Binary Jiujitsu: White Belt and Blue Belt Fundamentals - Part 4

15:00-19:00

Reverse Engineering and Exploitation from Real DEF CON Challenges

15:00-19:00

Security Before Cyber: Building Robust Security & Compliance Programs from Scratch

15:00-19:00

Hands on with USB HID Attacks

Located in Tuscany

Tokens required for entry. Don't forget to pick up your Skytalks token in Middle Ground. Click here for more info.

10:00-11:00

Social Tech for the AIpocalypse - TOKEN: 7

11:15-11:45

Translating Cybersecurity Expertise into Community Practice: Lessons from Minneapolis Mutual Aid Work - TOKEN: 8

12:00-12:30

SIGINT and the U.S. Intelligence Community: What I Actually Did During OEF - TOKEN: 9

14:00-14:45

The Erosion of the Neutral Web and What Can Be Done to Save It - TOKEN: 10

15:00-15:45

Breaking The Silence: Cyber Harassment Research Continued.... - TOKEN: 11

17:00-17:45

How to Break Into My Home - Home Alarm Hacking 101 - TOKEN: 12

18:00-18:45

Always Cloudy in Chengdu, Inside the Sophos Pacific Rim Campaign - TOKEN: 13

18:45-19:00

Every ride you take - Hacking a City’s Public Transportation (PART 2) - TOKEN: 13

Code of Conduct & Photo Policy

Security BSides Las Vegas, Inc. is a federally recognized 501(c)(3) since 2012

©2026 Security BSides Las Vegas, Inc.