AI
📙 Your Load Balancer is Your New Perimeter: Attacks & Defenses at Scale 🏗️
network and infrastructurecloud security
Topic
Network & Infrastructure
Defending the wires, the boxes, and the protocols — network security, IDS/IPS, DNS/BGP, ICS/SCADA/OT, firmware, and hardware hacking.
- network security
- firewall
- IDS
- IPS
- VPN
- network segmentation
- DNS security
- DDoS mitigation
- BGP security
- protocol analysis
- packet analysis
- wireless security
- Wi-Fi hacking
- Bluetooth security
- ICS
- SCADA
- OT security
- critical infrastructure
- embedded systems
- firmware analysis
- hardware hacking
109
Talks
9
Conferences
BSidesSF 2026
4 talks📙 Securing Space: The Next Frontier for Security Engineers 🏗️
network and infrastructureoffensive security
📗 Gettings PCAPs from Stingrays for $20 with Rayhunter
mobile and iot securitynetwork and infrastructure
📗 Lessons Learned from Building Custom Hacker Hardware 🏗️
offensive securitynetwork and infrastructure
Signed, Sealed, Delivered: Why Reverse Proxies Outperform VPNs - Peter ONeill, Teleport & Boris Kurktchiev, Independent
identity and accessnetwork and infrastructure
Bob and Alice Revisited: Understanding Encryption in Kubernetes - Jackie Maertens & Mitch Connors, Microsoft
cryptographycloud securitynetwork and infrastructure
[un]prompted 2026
2 talksAI go Beep Boop!
offensive securitynetwork and infrastructure
Traditional ML vs LLMs: who can classify better?
ai securitynetwork and infrastructure
NDC Security 2026
3 talksFrom WAN to NAS: A Pwn2Own Journey Through the SOHO Attack Surface
offensive securitynetwork and infrastructure
Connecting the dots to go from tabular security incident data to behavioral graph understanding
defensive securitynetwork and infrastructure
Three decades of curl
network and infrastructureapplication security
DefCamp 2025
2 talksThreat Assessment and Remediation Analysis for Nanosatellite On Board Computers at DefCamp 2025
network and infrastructureapplication security
Security layers: how much security is enough at DefCamp 2025
network and infrastructuredefensive security
OWASP Global AppSec USA 2025
3 talksOWASP Nettacker Project
offensive securitynetwork and infrastructure
Peeling Back the Plastic: Finding 0-Days in IoT Devices
mobile and iot securityoffensive securitynetwork and infrastructure
How to Defend Your PKI Estate: Lessons Learned from Eight Years of CAA and Certificate Transparency
cryptographynetwork and infrastructure
DEF CON® 33 Hacking Conference
71 talksCritically Neglected: Cybersecurity for buildings
network and infrastructuregovernance and risk
Locked Down, Not Locked Out: How I Escaped Your Secure Operator Workstation
offensive securitynetwork and infrastructure
Zero Trust, Total Bust - Breaking into thousands of cloud-based VPNs with one bug
offensive securityidentity and accessnetwork and infrastructure
DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks
offensive securitynetwork and infrastructure
Access Control Done Right the First Time
offensive securitynetwork and infrastructure
Don't Cry Wolf: Evidence-based assessments of ICS Threats
malware and threat intelnetwork and infrastructure
Silent Sabotage: How Nation-State Hackers Turn Human Error into Catastrophic Failures
defensive securitynetwork and infrastructuremalware and threat intel
Remote code execution via MIDI messages
offensive securitynetwork and infrastructure
Fear vs. Physics: Diagnosing Grid Chaos
network and infrastructuregovernance and risk
Reconfigurable HSMs: Future-Proofing Hardware Security Against Evolving Threats
cryptographynetwork and infrastructure
Hull Integrity: Applying MOSAICS to Naval Mission Systems
network and infrastructuregovernance and risk
Smart Bus Smart Hacking: From Free WiFi to Total Control
mobile and iot securityoffensive securitynetwork and infrastructure
Safeguarding the Industrial Frontier: OT SOC & Incident Response
defensive securitynetwork and infrastructuregovernance and risk
Reverse Engineering Marine Engines: How to make powerboats do your bidding
network and infrastructuremobile and iot security
Ghosts in the Machine Check - Conjuring Hardware Failures for Cross-ring Privilege Escalation
offensive securitynetwork and infrastructure
Veilid la revoluçion : Your data is yours to own
network and infrastructurecryptographygovernance and risk
The Missing Link: Draytek's New RCEs Complete the Chain
offensive securitynetwork and infrastructure
Direct Memory, Access Everywhere
application securitynetwork and infrastructure
Fighting the Digital Blockade: A View from Taiwan
network and infrastructuregovernance and risk
Off-Grid Datarunning in Oppresive Regimes: Sneakernet and Pirate Box
network and infrastructure
One Key, Two Key, I Just Stole Your goTenna Key
network and infrastructureoffensive securitycryptography
Operational Twilight: APTs, OT, and the geopolitics of a dying climate
malware and threat intelnetwork and infrastructure
Metal-as-a-Disservice: Exploiting Legacy Flaws in Cutting-Edge Clouds
offensive securitycloud securitynetwork and infrastructure
Playing Dirty Without Cheating - Getting Banned for Fun and No Profit
offensive securitymalware and threat intelnetwork and infrastructure
Modern Odometer Manipulation
mobile and iot securitynetwork and infrastructure
Making the DEF CON 33 Badge
offensive securitynetwork and infrastructure
Teaching Your Reverse Proxy to Think: Fingerprint-Based Bot Blocking & Dynamic Deception
defensive securitynetwork and infrastructure
Threat Dynamics on the Seas
malware and threat intelnetwork and infrastructuregovernance and risk
SSH-nanigans: Busting Open the Mainframes Iron Fortress through Unix
offensive securitynetwork and infrastructure
Voice Cloning Air Traffic Control: Vulnerabilities at Runway Crossings
network and infrastructureai security
Win-DoS Epidemic: A crash course in abusing RPC for Win-DoS & Win-DDoS
offensive securitynetwork and infrastructure
Navigating the Invisible
offensive securitynetwork and infrastructuremalware and threat intel
Fingerprinting Maritime NMEA2000 Networks
network and infrastructuredefensive security
Firewalls Under Fire: China's 5+ year campaign to penetrate perimeter network defenses
network and infrastructuremalware and threat intel
Resilient and Reconfigurable Maritime Comms.
network and infrastructure
Moonlight Defender - Purple Teaming in Space!
defensive securitynetwork and infrastructure
What’s Really in the Box? The Case for Hardware Provenance and HBOMs
application securitynetwork and infrastructuregovernance and risk
Intro to Common Industrial Protocol Exploitation
offensive securitynetwork and infrastructure
One Modem to Brick Them All: Exploiting Vulnerabilities in the EV Charging Communication
offensive securitymobile and iot securitynetwork and infrastructure
ReVault! Compromised by your Secure SoC
offensive securitynetwork and infrastructure
Hacking Space to Defend It: Generating IoBs with SPARTA
defensive securitynetwork and infrastructure
Context Aware Anomaly Detection in Automotive CAN Without Decoding
network and infrastructuremobile and iot security
DDoS: The Next Generation
network and infrastructure
Creating a Virtual Ship Environment Optimized for Cybersecurity Use
defensive securitynetwork and infrastructure
Boarding the VSAT: Real-World Exploits, Testbed Validation, and Policy Gaps in Maritime Connectivity
network and infrastructureoffensive security
There and Back Again: Discovering OT devices across protocol gateways
network and infrastructure
Ghost Calls: Abusing Web Conferencing for Covert Command & Control
offensive securitynetwork and infrastructure
Pirates of the North Sea
offensive securitynetwork and infrastructure
Rebadged, Relabeled, and Rooted: Pwnage via the Solar Supply Chain
offensive securitynetwork and infrastructure
Take all my money – penetrating ATMs
offensive securitynetwork and infrastructure
Flipping Locks - Remote Badge Cloning with the Flipper Zero and More
offensive securitynetwork and infrastructure
Journey to the center of the PSTN: How I became a phone company, and why you should too.
network and infrastructureoffensive security
No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol
cryptographynetwork and infrastructureoffensive security
Stories from a Tor dev
network and infrastructuregovernance and risk
The Ultimate Hack: Applying Lessons Learned from the loss of TITAN to Maritime Cybersecurity
network and infrastructuregovernance and risk
So you want to make a badge? Badge Creation 101, from SAO to full #badgelife
network and infrastructuremobile and iot security
Inside Look at a Chinese Operational Relay Network
malware and threat intelnetwork and infrastructureoffensive security
Emulating Embedded Linux Devices at Scale with Light-Touch Firmware Rehosting
network and infrastructuremobile and iot security
Breaking Wi-Fi Easy Connect: A Security Analysis of DPP
network and infrastructureoffensive security
Gateways to Chaos - How We Proved Modems Are a Ticking Time Bomb That Hackers Can Access Everywhere
mobile and iot securitynetwork and infrastructure
Diamonds Are For Hackers - Building the first fully open source and hackable Quantum Sensor
network and infrastructuremobile and iot security
State of the Pops: Mapping the Digital Waters
offensive securitynetwork and infrastructure
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
offensive securitynetwork and infrastructure
Recording PCAPs from Stingrays With a $20 Hotspot
defensive securitynetwork and infrastructure
Red Alerts and Blue Oceans: Incident Response from a Sysadmin’s War Room in Maritime Ops
defensive securitynetwork and infrastructuregovernance and risk
From Shanghai to the Shore: The Silent Threat in Global Shipping
network and infrastructuregovernance and risk
Help! Linux in my Webcam! (•_•)
network and infrastructureoffensive security
The Worst ICS/OT Love Story Ever Told
network and infrastructuregovernance and risk
How Computers Kill People: Marine Systems
network and infrastructuregovernance and risk
Dead Reckoning: Hijacking Marine Autopilots
network and infrastructure
TSPU: Russia's Firewall and Defending Against the Future of Digital Repression
network and infrastructureoffensive security
Black Hat USA 2025
18 talksReVault! Compromised by Your Secure SoC
offensive securitynetwork and infrastructure
Ghosts in the Machine Check - Conjuring Hardware Failures to Breach CPU Privilege Boundaries
offensive securitynetwork and infrastructure
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
offensive securitynetwork and infrastructure
Burning, Trashing, Spacecraft Crashing: A Collection of Vulnerabilities That Will End Your Space Mission
offensive securitynetwork and infrastructure
Black Hat USA 2025 | The 5G Titanic
network and infrastructureoffensive security
Firewalls Under Fire: China's 5+ Year Campaign to Penetrate Perimeter Network Defenses
malware and threat intelnetwork and infrastructure
No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol
cryptographynetwork and infrastructure
Peril at the Plug: Investigating EV Charger Security and Safety Failures
offensive securitymobile and iot securitynetwork and infrastructure
How to Secure Unique Ecosystem Shipping 1 Billion+ Cores?
network and infrastructure
Protecting Small Organizations in the Era of AI Bots
defensive securitynetwork and infrastructure
Unmasking Supply Chain Attacks via Application Behaviour
defensive securitynetwork and infrastructure
2 Cops 2 Broadcasting: TETRA End-To-End Under Scrutiny
cryptographynetwork and infrastructure
Black Hat USA 2025 | Use and Abuse of Palo Alto's Remote Access Solution
offensive securitynetwork and infrastructure
Exploiting DNS for Stealthy User Tracking
network and infrastructuregovernance and risk
Open RAN, Open Risk: Uncovering Threats and Exposing Vulnerabilities in Next-Gen Cellular RAN
network and infrastructureoffensive security
Smart Charging, Smarter Hackers: The Unseen Risks of ISO 15118
mobile and iot securitynetwork and infrastructure
Securing America: Readiness, Response, and Resilience for Critical Infrastructure Defense
defensive securitynetwork and infrastructure
The 11th Annual Black Hat USA Network Operations Center (NOC) Report
network and infrastructuredefensive security
OWASP Global AppSec USA 2024
4 talksThe Missing Link - How we collect and leverage SBOMs
application securitygovernance and risknetwork and infrastructure
OWASP Coraza - Web Application Firewall
application securitynetwork and infrastructure
Web Security Experts: Are you overlooking WebRTC vulnerabilities?
offensive securityapplication securitynetwork and infrastructure
OWASP Nettacker
offensive securitynetwork and infrastructure