AI
📙 Kidnapping a Library: How Ransomware Taught the British Library to Follow Well-Known Best Practices 🏗️
malware and threat intelgovernance and riskdefensive security
Topic
Malware & Threat Intel
Tracking the adversary and the tools they use — malware analysis, reverse engineering, APT tracking, ransomware, and CTI workflows.
- malware analysis
- reverse engineering
- threat intelligence
- CTI
- threat feeds
- IOC analysis
- APT tracking
- ransomware analysis
- malware families
- sandbox analysis
- static analysis
- dynamic analysis
- binary analysis
- threat actor profiling
- campaign tracking
- dark web monitoring
- STIX
- TAXII
- YARA rules
- MITRE ATT&CK
67
Talks
6
Conferences
BSidesSF 2026
8 talks📙 From $10 to $30M: Operating in the Data-Extortion Aftermath 🔥
defensive securitymalware and threat intel
📙 Who Watches the NPM Watchers? 🏗️
application securitymalware and threat intel
📙 Reverse Engineering Go Malware: From Manual to AI-Powered Analysis 🤖
malware and threat intelai security
📙 Demystifying File Similarity for Malware Detection 🔥
malware and threat intel
📗 Threat Chords: Tuning into Persistent Patterns in Adversary Behavior 🔥
malware and threat intelidentity and access
📙 Anatomy and Defense of LOTL Fileless Intrusions 🔥
defensive securitymalware and threat intel
📗 The Phaaaaaaaaantom of the Salt Typhoon is there, inside i-SOON 🔥
malware and threat intel
[un]prompted 2026
2 talksZeal of the Convert: Taming Shai-Hulud with AI
ai securitymalware and threat intel
From OSINT Chaos to Knowledge Graph: Building Production-Scale AI-Powered Threat Intelligence
malware and threat intelai security
NDC Security 2026
1 talkHas your flight been cancelled? You might be eligible for a cybersec session!
application securitymalware and threat intel
DefCamp 2025
8 talksHacked by Words: A Live Ransomware Negotiation at DefCamp 2025
defensive securitymalware and threat intel
Agentify OSINT: Transforming Security News Feeds Into Actionable Intelligence at DefCamp 2025
malware and threat inteldefensive security
Fake Jobs, Real Malware. Uncovering How Cybercriminals are Exploiting the Employment Market
malware and threat intel
CLR DLL Side-Loading, a secret technique used by APT41 at DefCamp 2025
malware and threat intel
Analyzing 100 Hacker's scripts using Claude Sonnet and ChatGPT at DefCamp 2025
malware and threat intel
Containing the Threat: Analyzing cryptomining campaigns at DefCamp 2025
malware and threat intelcloud security
Threat Actor Branding: The Strange World of APT Marketing at DefCamp 2025
malware and threat intel
AI-Powered Threat Intelligence: A Game Changer for Cyber Crisis Management
malware and threat inteldefensive security
DEF CON® 33 Hacking Conference
37 talksScamming the Scammers: Weaponizing Open Source Against Pig Butchering and Organized Crime
malware and threat intelgovernance and risk
Where's My Crypto, Dude? The Ultimate Guide to Crypto Money Laundering (and How to Track It)
malware and threat intelcryptography
Kill Chain Reloaded: Abusing Legacy Paths for Stealth Persistence
offensive securitymalware and threat intel
Don't Cry Wolf: Evidence-based assessments of ICS Threats
malware and threat intelnetwork and infrastructure
Silent Sabotage: How Nation-State Hackers Turn Human Error into Catastrophic Failures
defensive securitynetwork and infrastructuremalware and threat intel
OSINT Enabled Ghost Mode: Counter-Surveillance for Everyday People Like Us
defensive securitymalware and threat intel
Mastering Apple's Endpoint Security for Advanced macOS Malware Detection
defensive securitymalware and threat intel
Binary Facades: Reversing approaches to extract embedded scripts in compiled macOS malware
malware and threat inteldefensive security
Virtualization-Based (In)security - Weaponizing VBS Enclaves
offensive securitymalware and threat intel
Operational Twilight: APTs, OT, and the geopolitics of a dying climate
malware and threat intelnetwork and infrastructure
Playing Dirty Without Cheating - Getting Banned for Fun and No Profit
offensive securitymalware and threat intelnetwork and infrastructure
Threat Dynamics on the Seas
malware and threat intelnetwork and infrastructuregovernance and risk
The Things know What You Did Last Session
defensive securitymalware and threat intel
Edge of Tomorrow: Foiling Large Supply Chain Attacks By Taking 5k Abandoned S3 Buckets from Malware and Benign Software
application securitycloud securitymalware and threat intel
Carding is Dead, Long Live Carding: How MaaS is fueling NFC relay attacks
malware and threat inteloffensive security
Navigating the Invisible
offensive securitynetwork and infrastructuremalware and threat intel
Firewalls Under Fire: China's 5+ year campaign to penetrate perimeter network defenses
network and infrastructuremalware and threat intel
Hackers Dropping Mid-Heist Selfies: LLM Identifies Information Stealer Infection Vector and Extracts IoCs
defensive securitymalware and threat intel
Amber64: Mining Hacker History from Over Half a Million Commodore 64 Disks
offensive securitymalware and threat intel
The depths that marketers will plummet to
governance and riskmalware and threat intel
China's Health Sector Ambitions and Information Needs: Implications for U.S. Health Care Cyber Defense
malware and threat intelgovernance and risk
Red Russians: How Russian APT groups closely follow offensive security research
malware and threat inteldefensive security
Cybersecurity in Latin America: The Untold Stories of Resilience & Innovation
security leadershipmalware and threat inteloffensive security
RATs & Socks abusing Google Services
offensive securitymalware and threat intel
Kill List: Hacking an Assassination Site on the Dark Web
offensive securitymalware and threat intel
Inside Look at a Chinese Operational Relay Network
malware and threat intelnetwork and infrastructureoffensive security
Malware in the gist: How malicious packages on npm bypass existing security tools
application securitymalware and threat intel
Infecting the Boot to Own the Kernel: Bootkits and Rootkits Development
offensive securitymalware and threat intel
Weaponizing Trust: Investigating a Threat Actor Targeting Security Researchers and Academics
malware and threat inteloffensive securityapplication security
Blurred Lines of Cyber Threat Attribution: The Evolving Tactics of North Korean Cyber Threat Actors
malware and threat inteldefensive security
Man-in-the-Malware: Intercepting Adversarial Communications
defensive securitymalware and threat intel
Carding, Sabotage & Survival: A Darknet Market Veteran’s Story
offensive securitymalware and threat intel
Building a Malware Museum
malware and threat intel
De-Virtualizing the Dragon: Automated Unpacking and Deobfuscation of Nested VM-Based Protectors using Symbolic Execution and Taint Tracking
malware and threat inteloffensive security
Killing Killnet
malware and threat intel
What Game Hackers teach us about Offensive Security and Red Teaming
offensive securitymalware and threat intel
Bare Metal Reverse Engineering
malware and threat intelmobile and iot security
Black Hat USA 2025
11 talksThree Decades in Cybersecurity: Lessons Learned and What Comes Next
malware and threat intelsecurity leadership
No Hoodies Here: Organized Crime in AdTech
malware and threat intel
Shade BIOS: Unleashing the Full Stealth of UEFI Malware
malware and threat intel
LLMs-Driven Automated YARA Rules Generation with Explainable File Features & DNAHash
malware and threat intelai security
Hackers Dropping Mid-Heist Selfies: LLM Identifies Information Stealer Infection Vector and Extracts IoCs
malware and threat intel
Firewalls Under Fire: China's 5+ Year Campaign to Penetrate Perimeter Network Defenses
malware and threat intelnetwork and infrastructure
The New Frontline: Cyber on the Precipice
malware and threat intelai security
XUnprotect: Reverse Engineering macOS XProtect Remediator
malware and threat inteldefensive security
Training Specialist Models: Automating Malware Development
ai securitymalware and threat intel
Black Hat USA 2025 | Vulnerability Haruspicy: Picking Out Risk Signals from Scoring System Entrails
governance and riskmalware and threat intel
Clue-Driven Reverse Engineering by LLM in Real-World Malware Analysis
malware and threat intelai security