#bsides312 — Public Fediverse posts

It was a true honor to be a part of my hometown #BSides. Congrats again to the organizers of #BSides312 for an unforgettable day of learning and community!
https://blog.gitguardian.com/bsides312-2026/

It was a true honor to be a part of my hometown #BSides. Congrats again to the organizers of #BSides312 for an unforgettable day of learning and community!
https://blog.gitguardian.com/bsides312-2026/

All too soon, we are at the final talk of the day at #BSides312 2026

Beyond the Self Check-Out
from ギンジ🐾ターラノー

All too soon, we are at the final talk of the day at #BSides312 2026

Beyond the Self Check-Out
from ギンジ🐾ターラノー

The Walking Dead of AD: Uncovering rare DACL-led escalation and a BloodHound-integrated tool
Nikos Vourdas, Senior Offensive Security Consultant

#BSides312 2026

The Walking Dead of AD: Uncovering rare DACL-led escalation and a BloodHound-integrated tool
Nikos Vourdas, Senior Offensive Security Consultant

#BSides312 2026

Definitely Not Secure (DNS)
Matt Scheurer - InfoSec Rock Star at ThreatReel Podcast

#BSides312 2026

Definitely Not Secure (DNS)
Matt Scheurer - InfoSec Rock Star at ThreatReel Podcast

#BSides312 2026

Countdown To ZeroPay- When the fall is all that’s left, it matters a great deal.
from rand0h - founder of DC610

#BSides312 2026

Countdown To ZeroPay- When the fall is all that’s left, it matters a great deal.
from rand0h - founder of DC610

#BSides312 2026

So, You Want to be a Forensicator...
from
Catherine Ullman, Principal Technology Architect, Security at the University at Buffalo

#BSides312 2026

So, You Want to be a Forensicator...
from
Catherine Ullman, Principal Technology Architect, Security at the University at Buffalo

#BSides312 2026

The Orange Line Track has been getting a great crowd. Right now HelpMeRob is talking about Signal and security! #Bsides312 #BSides

#BSides312 2026 KEYNOTE
Community Doesn’t Start With a Conference
from
Heidi Potter, COO at Turngate

#BSides312 2026 KEYNOTE
Community Doesn’t Start With a Conference
from
Heidi Potter, COO at Turngate

Keynote with Heidi Pitter starting now! Green track room! #Bsides312

OpenSource Poison: A Long Ignored Risk
Sean Juroviesky, Senior Security Engineer at SoundCloud

#BSides312 2026

OpenSource Poison: A Long Ignored Risk
Sean Juroviesky, Senior Security Engineer at SoundCloud

#BSides312 2026

#BSides312 2026 is officially underway!!!
So grateful for this amazing community

#BSides312 2026 is officially underway!!!
So grateful for this amazing community

Seems BSides312 is happening today, have fun people! And if you feel like being a speaker, check out cfptime.org cc @bsides312 #Bsides312

Seems BSides312 is happening today, have fun people! And if you feel like being a speaker, check out cfptime.org cc @bsides312 #Bsides312

The big security conferences have their place. You get the keynotes, the vendor expo, and the sponsored happy hours. What you don't always get is a straight conversation with someone who actually broke something recently and wants to talk about it.

That's why I'm going to BSides312 this weekend.

Saturday, May 16th, at the Irish American Heritage Center in Chicago. Two talk tracks, 15 speakers, a CTF, a lockpicking village, and an after-party. Community-run, non-profit, built for practitioners by practitioners.

If you're in Chicago and work in security, this is where you should be this weekend. Come find me.

https://bsides312.org

#BSides312 #Cybersecurity #InfoSec #Chicago #security #privacy #cloud #312 @bsides312 @[email protected]

The big security conferences have their place. You get the keynotes, the vendor expo, and the sponsored happy hours. What you don't always get is a straight conversation with someone who actually broke something recently and wants to talk about it.

That's why I'm going to BSides312 this weekend.

Saturday, May 16th, at the Irish American Heritage Center in Chicago. Two talk tracks, 15 speakers, a CTF, a lockpicking village, and an after-party. Community-run, non-profit, built for practitioners by practitioners.

If you're in Chicago and work in security, this is where you should be this weekend. Come find me.

https://bsides312.org

#BSides312 #Cybersecurity #InfoSec #Chicago #security #privacy #cloud #312 @bsides312 @[email protected]

Who said BSides312 is a one-day event? We're making it a full weekend!
📢 Correction: doors open 8 AM Saturday. Opening ceremony at 9 AM. Talks at 9:30 AM.
Thursday: BurbSec North (Wheeling) or South (Hickory Hills) → https://burbsec.com
Friday: Rooftop happy hour sponsored by Scanner → https://luma.com/3hlu6uw1
Saturday: BSides312. You already know.
Three nights. One community. See you in Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #Chicago

Who said BSides312 is a one-day event? We're making it a full weekend!
📢 Correction: doors open 8 AM Saturday. Opening ceremony at 9 AM. Talks at 9:30 AM.
Thursday: BurbSec North (Wheeling) or South (Hickory Hills) → https://burbsec.com
Friday: Rooftop happy hour sponsored by Scanner → https://luma.com/3hlu6uw1
Saturday: BSides312. You already know.
Three nights. One community. See you in Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #Chicago

Friendly reminder: BSides312 physical patch badges are back.
If you were there last year, you know how fast these went. "I'll grab one later" were SOL.
Limited. Will not last. Arrive early or live with regret.
Doors open 9:00 AM. May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #Chicago

Friendly reminder: BSides312 physical patch badges are back.
If you were there last year, you know how fast these went. "I'll grab one later" were SOL.
Limited. Will not last. Arrive early or live with regret.
Doors open 9:00 AM. May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #Chicago

Your phishing program has great metrics. Your employees are still clicking.
At BSides312, Mr. Sprawl is sharing a proven blueprint for phishing programs that actually change behavior. One startup went from a 40% click rate to under 10% in a year. No magic tool. Just a better approach.
Professional phisher. Social engineering enthusiast.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #Phishing #SocialEngineering #SecurityAwareness #Chicago

Your phishing program has great metrics. Your employees are still clicking.
At BSides312, Mr. Sprawl is sharing a proven blueprint for phishing programs that actually change behavior. One startup went from a 40% click rate to under 10% in a year. No magic tool. Just a better approach.
Professional phisher. Social engineering enthusiast.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #Phishing #SocialEngineering #SecurityAwareness #Chicago

We wish to thank Gold Sponsor #PushSecurity for their support. Check out their website at https://pushsecurity.com/ and talk to them at #BSides312 on My 16. Tickets are still available at https://bsides312.org/
#BSides

We wish to thank Gold Sponsor #PushSecurity for their support. Check out their website at https://pushsecurity.com/ and talk to them at #BSides312 on My 16. Tickets are still available at https://bsides312.org/
#BSides

"Just use Signal" is not a threat model.
At BSides312, HelpMeRob is covering the security assumptions, risk trade-offs, and blind spots that put orgs at risk even when they're using the "right" tools. 30+ years across federal law enforcement, military cyber defense, and digital forensics.
The encryption isn't the weak link. The assumptions are.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #Signal #OpSec #ThreatModeling #Privacy #Chicago

"Just use Signal" is not a threat model.
At BSides312, HelpMeRob is covering the security assumptions, risk trade-offs, and blind spots that put orgs at risk even when they're using the "right" tools. 30+ years across federal law enforcement, military cyber defense, and digital forensics.
The encryption isn't the weak link. The assumptions are.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #Signal #OpSec #ThreatModeling #Privacy #Chicago

Unable to figure out what to get that special cybersecurity Mother for Mother's Day? When you've already gotten her a Flipper Zero, Rubber Ducky, and a WiFi Pineapple, it is time to think out of the box.

Allow me to suggest his-and-hers tickets to @bsides312, happening next Saturday!

Get your special someone tickets here: https://www.simpletix.com/e/security-bsides312-2026-tickets-247316

#Cybersecurity
#MothersDay
#Bsides312

Unable to figure out what to get that special cybersecurity Mother for Mother's Day? When you've already gotten her a Flipper Zero, Rubber Ducky, and a WiFi Pineapple, it is time to think out of the box.

Allow me to suggest his-and-hers tickets to @bsides312, happening next Saturday!

Get your special someone tickets here: https://www.simpletix.com/e/security-bsides312-2026-tickets-247316

#Cybersecurity
#MothersDay
#Bsides312

We here at #BSides312 appreciate #Vorlon for being a Gold sponsor You can check them out at https://vorlon.io/ or come and see them on May 16th at our event. Tickets are still available at https://bsides312.org/
#BSides

We here at #BSides312 appreciate #Vorlon for being a Gold sponsor You can check them out at https://vorlon.io/ or come and see them on May 16th at our event. Tickets are still available at https://bsides312.org/
#BSides

Your last pen test was outdated before the report was even delivered.
At BSides312, Paul Petefish is introducing the Continuous Penetration Testing Methodology (CPTM), a framework that transforms pen testing from an episodic checkbox into an always-on security function.
20+ years in offensive security. He wrote CPTM because the old way stopped making sense.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #PenTest #OffSec #ContinuousSecurity #Chicago

Your last pen test was outdated before the report was even delivered.
At BSides312, Paul Petefish is introducing the Continuous Penetration Testing Methodology (CPTM), a framework that transforms pen testing from an episodic checkbox into an always-on security function.
20+ years in offensive security. He wrote CPTM because the old way stopped making sense.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #PenTest #OffSec #ContinuousSecurity #Chicago

Thanks to our Gold Sponsor #Material_Sec. We look forward to seeing you at #BSides312! You can check them out at https://material.security/
Don't have a ticket for BSides312 yet? Go to https://bsides312.org/ and get yours today!
#BSides

Thanks to our Gold Sponsor #Material_Sec. We look forward to seeing you at #BSides312! You can check them out at https://material.security/
Don't have a ticket for BSides312 yet? Go to https://bsides312.org/ and get yours today!
#BSides

We at #BSides312 want to thank Gold level sponsor #CardinalOps for their support. Check them out at https://cardinalops.com/ and we will see you on May16. Tickets still are available at https://bsides312.org/
#Bsides

We at #BSides312 want to thank Gold level sponsor #CardinalOps for their support. Check them out at https://cardinalops.com/ and we will see you on May16. Tickets still are available at https://bsides312.org/
#Bsides

Can not believe it is already May...That means we are only a handful of days away from #BSides312 here in my city!
Do you have your tickets yet?
https://bsides312.org/

Can not believe it is already May...That means we are only a handful of days away from #BSides312 here in my city!
Do you have your tickets yet?
https://bsides312.org/

The scariest thing in your Active Directory isn't what you can see. It's the permissions you thought you removed.
At BSides312, Kyprianos Vasilopoulos and Nikos Vourdas are showing how legacy DACL misconfigs and recycled accounts create hidden escalation paths in AD. They built a BloodHound integration to find them first.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #ActiveDirectory #RedTeam #BloodHound #Chicago

The scariest thing in your Active Directory isn't what you can see. It's the permissions you thought you removed.
At BSides312, Kyprianos Vasilopoulos and Nikos Vourdas are showing how legacy DACL misconfigs and recycled accounts create hidden escalation paths in AD. They built a BloodHound integration to find them first.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #ActiveDirectory #RedTeam #BloodHound #Chicago

A single malicious link can turn your AI agent into your biggest insider threat.
At BSides312, Martin Voelk is live-demoing how AI agents connected to enterprise messaging platforms get weaponized through prompt injection and link unfurling. Zero user interaction required.
25+ years in cyber. 6 years as Staff Red Teamer at Uber. He's brought receipts.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #AI #AgenticAI #AISecurity #Chicago

A single malicious link can turn your AI agent into your biggest insider threat.
At BSides312, Martin Voelk is live-demoing how AI agents connected to enterprise messaging platforms get weaponized through prompt injection and link unfurling. Zero user interaction required.
25+ years in cyber. 6 years as Staff Red Teamer at Uber. He's brought receipts.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #AI #AgenticAI #AISecurity #Chicago

We stopped naming our servers. Then we started naming our AI agents. See the problem?
At BSides312, mcdwayne from GitGuardian is digging into the identity crisis happening as AI agents force us to rethink auth, delegation, and access for autonomous systems. Chicago local. 100+ talks worldwide. Karaoke enthusiast. Don't sleep on this one.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #AI #Identity #IAM #AgenticAI #Chicago

We stopped naming our servers. Then we started naming our AI agents. See the problem?
At BSides312, mcdwayne from GitGuardian is digging into the identity crisis happening as AI agents force us to rethink auth, delegation, and access for autonomous systems. Chicago local. 100+ talks worldwide. Karaoke enthusiast. Don't sleep on this one.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #AI #Identity #IAM #AgenticAI #Chicago

🎉 BSides312 GIVEAWAY #2
Less than three weeks out. Your friend still doesn't have a ticket. Not on your watch.
Tag someone who should be at BSides312 and tell us why (or why they'd be kicking themselves if they missed it).
Best answer wins them a free ticket.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #HackerCommunity #Giveaway #Chicago

🎉 BSides312 GIVEAWAY #2
Less than three weeks out. Your friend still doesn't have a ticket. Not on your watch.
Tag someone who should be at BSides312 and tell us why (or why they'd be kicking themselves if they missed it).
Best answer wins them a free ticket.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #HackerCommunity #Giveaway #Chicago

We are just a few short weeks out from #BSides312, my hometown BSides.
I have the honor of returning for a 3rd year as a speaker! Get your tickets and make your plans to be there!

https://bsides312.org/

We are just a few short weeks out from #BSides312, my hometown BSides.
I have the honor of returning for a 3rd year as a speaker! Get your tickets and make your plans to be there!

https://bsides312.org/

What if C2 traffic could hide in plain sight — inside a perfectly valid TLS handshake?
At BSides312, John Mathot is showing how subliminal channels let you embed data inside TLS 1.3 signatures — completely indistinguishable from normal traffic.
You'll never look at TLS the same way.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #Cryptography #TLS #NetworkSecurity #CyberSecurity #BSides #Chicago

What if C2 traffic could hide in plain sight — inside a perfectly valid TLS handshake?
At BSides312, John Mathot is showing how subliminal channels let you embed data inside TLS 1.3 signatures — completely indistinguishable from normal traffic.
You'll never look at TLS the same way.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #Cryptography #TLS #NetworkSecurity #CyberSecurity #BSides #Chicago

🎉 BSides312 GIVEAWAY
What's your favorite hacker con memory? Drop a pic and tell us what made it special — and why you still think about it to this day.
Best story wins. Winner announced Friday.
May 16th. Chicago. We're just getting started building new memories.
🎟️ https://bsides312.org
#BSides312 #InfoSec #CyberSecurity #HackerCommunity #Giveaway #Chicago

Laser-based hardware attacks are only for nation-state actors with million-dollar labs. Right?
Wrong.
At BSides312, Larry Trowell and Sam Beaumont (PANTH13R) from NetSPI built affordable laser tools using an open-source microscope and consumer-grade lasers to detect hardware malware and supply chain chip swaps.
Hackers go pew pew.
May 16th. Chicago.
🎟️ https://bsides312.org
#BSides312 #InfoSec #HardwareHacking #SupplyChainSecurity #CyberSecurity #Chicago #BSides #THOTCON