BSidesLV

@UCpNGmljppAJbTIA5Msms1Pw - 5K subscribers

Recordings of Security BSides Las Vegas sessions, selected sessions of sister conferences and other Information Security related educational materials.

Home Videos Live Playlists

Broke but Breached: Secret Scanning at Scale on a Student Budget

Broke but Breached: Secret Scanning at Scale on a Student Budget BSidesLV

53 views - 2 months ago

Avoiding Credential Chaos: Authenticating With No Secrets

Avoiding Credential Chaos: Authenticating With No Secrets BSidesLV

47 views - 2 months ago

No IP, No Problem: Exfiltrating Data Behind IAP

No IP, No Problem: Exfiltrating Data Behind IAP BSidesLV

61 views - 2 months ago

Human Attack Surfaces in Agentic Web: How I Learned to Stop Worrying and Love the AI Apocalypse

Human Attack Surfaces in Agentic Web: How I Learned to Stop Worrying and Love the AI Apocalypse BSidesLV

36 views - 2 months ago

The Protocol Behind the Curtain: What MCP Really Exposes

The Protocol Behind the Curtain: What MCP Really Exposes BSidesLV

73 views - 2 months ago

Rewriting the Playbook: Smarter Vulnerability Management with EPSSv3, CVSSv4, SSVC & VEX Frameworks

Rewriting the Playbook: Smarter Vulnerability Management with EPSSv3, CVSSv4, SSVC & VEX Frameworks BSidesLV

48 views - 2 months ago

The Two Types of Fool – Generations in Cybersecurity

The Two Types of Fool – Generations in Cybersecurity BSidesLV

29 views - 2 months ago

Hardening Containers with Seccomp: Hands-On Profiles, Pitfalls, and Real Exploits

Hardening Containers with Seccomp: Hands-On Profiles, Pitfalls, and Real Exploits BSidesLV

22 views - 2 months ago

The Not So Boring Threat Model of CSP-Managed NHI’s

The Not So Boring Threat Model of CSP-Managed NHI’s BSidesLV

15 views - 2 months ago

PEBKAC Rebooted: A Hacker’s Guide to People‑Patching in 90 Days

PEBKAC Rebooted: A Hacker’s Guide to People‑Patching in 90 Days BSidesLV

27 views - 2 months ago

The Scene is Dead

The Scene is Dead BSidesLV

45 views - 2 months ago

Opening Remarks, Tuesday: Breaking Ground

Opening Remarks, Tuesday: Breaking Ground BSidesLV

10 views - 2 months ago

Take all my money – penetrating ATMs

Take all my money – penetrating ATMs BSidesLV

667 views - 2 months ago

Advancing Network Threat Detection Thru Standardized Feature Extraction & Dynamic Ensemble Learning

Advancing Network Threat Detection Thru Standardized Feature Extraction & Dynamic Ensemble Learning BSidesLV

16 views - 2 months ago

Hackers Kinda Like to Eat

Hackers Kinda Like to Eat BSidesLV

27 views - 2 months ago

The Age of Zygote Injection

The Age of Zygote Injection BSidesLV

56 views - 2 months ago

The World Famous Hire Ground Panel, Tuesday Edition

The World Famous Hire Ground Panel, Tuesday Edition BSidesLV

9 views - 2 months ago

The Unbearable Weight of Commercial Licensing. Combining Closed Systems with Open Source Defense

The Unbearable Weight of Commercial Licensing. Combining Closed Systems with Open Source Defense BSidesLV

9 views - 2 months ago

Defending Our Water – Defending Our Lives

Defending Our Water – Defending Our Lives BSidesLV

8 views - 2 months ago

Agentic AI Malware: Why the Cybersecurity Battle Isn’t Over

Agentic AI Malware: Why the Cybersecurity Battle Isn’t Over BSidesLV

20 views - 2 months ago

Malicious Packages – they’re gonna get ya!

Malicious Packages – they’re gonna get ya! BSidesLV

58 views - 2 months ago

RAG Against the Machine: Using Retrieval-Augmented Generation & MCP to Fortify Cybersecurity Defense

RAG Against the Machine: Using Retrieval-Augmented Generation & MCP to Fortify Cybersecurity Defense BSidesLV

28 views - 2 months ago

Time is Running Out – Tying it All Together – What Will You Do in the Near Term?

Time is Running Out – Tying it All Together – What Will You Do in the Near Term? BSidesLV

9 views - 2 months ago

Taking down the power grid!

Taking down the power grid! BSidesLV

45 views - 2 months ago

Indexing the Chaos: Extract PII from Ransomware Leaks

Indexing the Chaos: Extract PII from Ransomware Leaks BSidesLV

8 views - 2 months ago

Rusty pearls: Postgres RCE on cloud databases

Rusty pearls: Postgres RCE on cloud databases BSidesLV

20 views - 2 months ago

Phish-Back: How to turn the problem into a solution.

Phish-Back: How to turn the problem into a solution. BSidesLV

16 views - 2 months ago

XSS is dead – Browser Security Features that Eliminate Bug Classes

XSS is dead – Browser Security Features that Eliminate Bug Classes BSidesLV

21 views - 2 months ago

Let’s Go Shopping: Third-Party Vendors and CyberRisk

Let’s Go Shopping: Third-Party Vendors and CyberRisk BSidesLV

7 views - 2 months ago

Hacking Secure Coding Into Education

Hacking Secure Coding Into Education BSidesLV

15 views - 2 months ago

Setting the Table – WarGames 2027 & Maslow’s Hierarchy of Needs as Hybrid Warfare Nears

Setting the Table – WarGames 2027 & Maslow’s Hierarchy of Needs as Hybrid Warfare Nears BSidesLV

2 views - 2 months ago

eXes & Oauths They Haunt Me: In-Depth Analysis of OAuthOIDC Misconfigurations & Token Replay Attacks

eXes & Oauths They Haunt Me: In-Depth Analysis of OAuthOIDC Misconfigurations & Token Replay Attacks BSidesLV

17 views - 2 months ago

Power Play: AI Dominance Depends on Energy Resilience

Power Play: AI Dominance Depends on Energy Resilience BSidesLV

3 views - 2 months ago

What to Tell Your Developers About NHI Secrets Security and Governance

What to Tell Your Developers About NHI Secrets Security and Governance BSidesLV

12 views - 2 months ago

Keeping Our History Alive: The Hacker’s Guide to Sticker Preservation

Keeping Our History Alive: The Hacker’s Guide to Sticker Preservation BSidesLV

5 views - 2 months ago

Cyber Civil Defense: Volunteers to the Rescue

Cyber Civil Defense: Volunteers to the Rescue BSidesLV

8 views - 2 months ago

Boost Your Career: Get Practical InfoSec Experience in Your Community

Boost Your Career: Get Practical InfoSec Experience in Your Community BSidesLV

4 views - 2 months ago

End of Life (EOL) Equipment should not mean End of Life (Your Life)

End of Life (EOL) Equipment should not mean End of Life (Your Life) BSidesLV

10 views - 2 months ago

Cracking Hidden Identities: Understanding the Threat Surface of Hidden Identities...

Cracking Hidden Identities: Understanding the Threat Surface of Hidden Identities... BSidesLV

19 views - 2 months ago

Thwarting Key Extraction and Supply Chain attacks by Detonating GPUs

Thwarting Key Extraction and Supply Chain attacks by Detonating GPUs BSidesLV

5 views - 2 months ago

Autonomous Discovery of Logic-based API Vulnerabilities

Autonomous Discovery of Logic-based API Vulnerabilities BSidesLV

57 views - 2 months ago

My friend Ben: solid employee, DPRK agent

My friend Ben: solid employee, DPRK agent BSidesLV

20 views - 2 months ago

Risk it for the Biscuit: Crunching the Numbers on Cyber Threats

Risk it for the Biscuit: Crunching the Numbers on Cyber Threats BSidesLV

2 views - 2 months ago

Shedding Light on Web Isolation Technologies and Their Bypass Techniques...

Shedding Light on Web Isolation Technologies and Their Bypass Techniques... BSidesLV

7 views - 2 months ago

Detecting, Deobfuscating, and Preventing Obfuscated Script Execution with Tree‑sitter

Detecting, Deobfuscating, and Preventing Obfuscated Script Execution with Tree‑sitter BSidesLV

23 views - 2 months ago

Poison in the Wires: Interactive Network Visualization of Data Attacks

Poison in the Wires: Interactive Network Visualization of Data Attacks BSidesLV

22 views - 2 months ago

Neighborhood & Household Resilience – A Month Without External Assistance

Neighborhood & Household Resilience – A Month Without External Assistance BSidesLV

6 views - 2 months ago

Unawakened Wakeup: A Novel PHP Object Injection Technique to Bypass __wakeup()

Unawakened Wakeup: A Novel PHP Object Injection Technique to Bypass __wakeup() BSidesLV

24 views - 2 months ago

Extending Password (in)Security to the Browser

Extending Password (in)Security to the Browser BSidesLV

15 views - 2 months ago

The Rise of Synthetic Passwords in Botnet & Attack Operations

The Rise of Synthetic Passwords in Botnet & Attack Operations BSidesLV

13 views - 2 months ago

Lessons from Black Swan Events and Building Anti-Fragile Cybersecurity Systems

Lessons from Black Swan Events and Building Anti-Fragile Cybersecurity Systems BSidesLV

9 views - 2 months ago

So You Want to Give A Talk: How to Write a CFP

So You Want to Give A Talk: How to Write a CFP BSidesLV

15 views - 2 months ago

Turbo Tactical Exploitation: 22 Tips for Tricky Targets

Turbo Tactical Exploitation: 22 Tips for Tricky Targets BSidesLV

29 views - 2 months ago

Predicting the Lifespans of Internet Services: Falling down the ML Rabbit Hole, and What We Learned

Predicting the Lifespans of Internet Services: Falling down the ML Rabbit Hole, and What We Learned BSidesLV

7 views - 2 months ago

So… You want to build your own hacking device…

So… You want to build your own hacking device… BSidesLV

13 views - 2 months ago

Automating Phishing Infrastructure Development Using AI Agents

Automating Phishing Infrastructure Development Using AI Agents BSidesLV

41 views - 2 months ago

RAGnarok: Assisting Your Threat Hunting with Local LLM

RAGnarok: Assisting Your Threat Hunting with Local LLM BSidesLV

29 views - 2 months ago

Securing AI Infrastructure: Lessons from National Cybersecurity Strategies...

Securing AI Infrastructure: Lessons from National Cybersecurity Strategies... BSidesLV

17 views - 2 months ago

When the Breach Hits the Fan: Understanding Cyber Insurance

When the Breach Hits the Fan: Understanding Cyber Insurance BSidesLV

40 views - 2 months ago

Dungeons & Dragons: The security tool you didn’t know you needed

Dungeons & Dragons: The security tool you didn’t know you needed BSidesLV

13 views - 2 months ago