Schedule details are subject to change.

Friday, October 23, 2026

Time Track 1Track 2Workshop AWorkshop B
09:00 Registration opens (all-day, room 101, first floor)
09:30 Opening remarks
10:00 Translating Cybersecurity Expertise into Community Practice: Lessons from Minneapolis Mutual Aid Work Jessa Riley Gegax Off the record — do not record
10:30
11:00 Bring Your Own Trusted Caller (BYOTC): A New Way to Exploit Vulnerable Windows Drivers Xusheng Li LLMs vs. Crypto: The Crypto Arms Race in Modern Ransomware Guilherme Venere Missing: Live-Playing an ARG-Style CTF Maya Douglas (Hacker name - Ace of Hearts) One Request to Rule Them All Corey Ball
11:30
12:00 How to catch your agent in a lie Chase Douglas Trust the Output, Board the Ship: Why AI Security Workflows Fail in Production vampyrhacker
12:30 Uncovering an Android dropper campaign Fernando Ruiz Second Set of Eyes: AI-Accelerated Security Analysis Without Giving Up the Wheel Devin McCarthy
13:00 Delete Your Data in the Age of AI Nick Shook VibeCheck: Failed Alex Ronquillo Eyes Only: Build a Gate Detector for an Autonomous Drone Alec Hunter
13:30 Malicious weights in LLMs Vladimir de Turckheim Phishing With Misfortune Cookies - Onsite Social Engineering And Exploiting Assumed Trust Lucas Zahorik, Tyler Aldous
14:00 Privacy Challenges in Parenting manchicken Catch Me If You Can: Stealing OAuth Tokens with an Interception Attack Nathan Goodman
14:30 Turning The Valve: Diving Into the Steam Platform Bryan Alexander Why You (Still) Need SBOMs Nisha Kumar
15:00 BGP: A Gateway to Insecure Insanity: Why the internet works and when it doesn't. Nate Balmain ForesightOps - Automate Remediation before vulnerability reaches code: Not another security scanner Divya Dharshini Arthanari Theory and Practice of Intercepting Voice Radio Transmissions Dan Tending Play our new card game to get better at defense Jens Mache Off the record — do not record
15:30 Retro Floppy Archive Project 0verShares Put Community Lists in your Kill Chain BadSamurai
16:00 Das Blinken hpux735 Detecting Inlined Functions in Compiled Binaries Using a Graph Neural Network Eric Johnson, Zeen Zheng
16:30 Death by a Thousand Paper Cuts Ken Hollis How We Let an AI Agent Into Our Security Review Process (And What did we learn) Pankaj Upadhyay, Saurabh Sabnis
17:00 Closing remarks
17:15 Friday Reception Movie: The Conversation (1974) Drinks and Snacks Vanport room, back of Track 1

Saturday, October 24, 2026

Time Track 1Track 2Workshop A+B
09:00 Registration opens (all-day, room 101, first floor)
09:30 Opening remarks
10:00 BSidesPDX... How did we get here? Esteban, Joe, etc.
10:30
11:00 InQuorigible: Quora in OSINT Groucho Marxist Is North Korea in Your node_modules? Rene Brandel
11:30 You wouldn't hack a satellite: Breaking the Cubesat Space Protocol Riccardo Nannini PipeLive: Using LLMs as Duct Tape to Craft a Self-Healing Pipeline Joao Moreira
12:00
12:30 Reverse Engineering A Camera/Lens Control Aleks Nikolic What I would do if I had to start my offensive cybersecurity journey today Jon Parrish The Prince and the Prompt: Automating Chaos for Email Scammers indrora, Lucky Off the record — do not record
13:00 Post-Quantum Privacy with EFF and Let's Encrypt Jacob Hoffman-Andrews I Have No Mouth and I Must Slop: Human Security Engineering For Bot-Authored Codebases Nate Norton We run a community hackerspace, AMA romkey, Daniel Cook, manchicken Off the record — do not record
13:30 No Model Was Harmed in the Making of This Exploit Harsh Akshit Building a Primitive-First LLM Security Framework: An Alternative to Tool-Wrapping and Narrative Triage Brent Holtsclaw
14:00 Your Sandbox Has an Identity Crisis: When Network Reachability Becomes Cloud Identity Rohit Gurunath Off the leash: Lessons from self hosting LLMs and building AI agents for security research Shane Kell My first year on the job in Infosec, AMA Kai Morita-McVey, Abi Whittle, St0_ic Off the record — do not record
14:30 Good Boy: Turning Datadog into a C2 Channel Mike Kuenzel How (not) to self-host AI Sparks
15:00 From Edge Telemetry to Automated Defense: Mining WAF Logs with Python Ash Naiku A NEW BLUEPRINT for High-Yield Tabletop Exercises for SMB's Katin Imes I was a first time DEFCON speaker, AMA Cory Solovewicz, nyx, Groucho Marxist, Maxie, rey Off the record — do not record
15:30 Telemetry to Detection: A Practitioner’s Guide to detection.wiki Sonny Yeung Banned Book Library: A Cyberpunk Dead Drop Rick Osgood
16:00 Closing remarks
17:00 After party PDX Hackerspace, near Interstate Transit Center MAX stop. Bring your Badge!