Main Stage·57 min
Cliff Stoll
Cliff Stoll reflects on the 40th anniversary of tracking down an international KGB cyber espionage ring originating from a 75-cent accounting error.
hacker-historyincident-responseforensics+2
Conference talk archive
Cyber Talks
52,095 talks from DEF CON, Black Hat, RSAC, TROOPERS, BSides, · 18,720 speakers.
try
Filters+
1–24 of 24 talks
Main Stage·45 min
Bruce Schneier
Bruce Schneier examines how artificial intelligence systems hack human institutions, tax codes, financial markets, and legal frameworks.
artificial-intelligenceai-securitypolicy+2
Main Stage·44 min
Cybertiger · Colonel Panic · The Wrew
Cybertiger, Colonel Panic, and The Wrew introduce low-cost counter-surveillance hardware built around the ESP32 to detect tracking devices.
surveillanceesp32hardware-hacking+3
Main Stage·46 min
Bill Swearingen
Bill Swearingen explores whether adversarial patterns printed on everyday clothing can effectively fool commercial and municipal facial recognition algorithms.
facial-recognitioncomputer-visionprivacy+2
Main Stage·36 min
Aaron Schulman · Jerry Yu · Yibo Wei
Shows how an aftermarket dealer-installed car alarm shipped one shared key across its units, letting a smartphone unlock and immobilize vehicles.
vulnerability-researchreverse-engineeringdevice+2
IoT Village·40 min
Andrew Bellini
Shows how a beginner can use AI agents and a cheap bench rig to find and exploit bugs in consumer IoT firmware, using a router as the example.
iotaireverse-engineering+2
Bug Bounty Village·25 min
Pedro Paniago
Walks through a bug bounty hunter's experiment wiring AI into his manual methodology, with the results, limits and practical tips it produced.
aibug-bountyvulnerabilities+2
Main Stage·49 min
Jon Gaines
Walks through a self-funded teardown of Flock Safety gunshot detectors, license plate readers and edge compute boxes, from UART access to exposed camera feeds.
hardwareiotvulnerability-research+3
AppSec Village·30 min
Simcha Kosman
Shows how a ChatGPT code sandbox was chained into a command-and-control channel using spreadsheet parsing abuse, reasoning injection, and covert signaling over a shared package proxy.
aiattackexploiting+2
Bug Bounty Village·21 min
Glendon Chong
Walks through three TikTok bug bounty reports where web cache poisoning on an OAuth login endpoint led to account takeovers.
webappsecbug-bounty+2
Aerospace Village·26 min
Lily · Adam · Robert · Kevin
Presents SAOv3, a draft add-on standard for conference badges, plus open-source OLED animation tooling that removes screen tearing.
embeddedopen-sourcevillage+2
Main Stage·46 min
Vladimir Tokarev · Ofek Itach
Walks through three native-code memory bugs in llama.cpp and Ollama, from an Android JNI use-after-free to a Go/C out-of-bounds heap read.
vulnerability-researchexploitingmemory+3
Main Stage·47 min
Vitaly Simonovich
Shows how LLM-assisted research turned five open-source C2 frameworks into a source of flaws that defenders can use against attacker infrastructure.
vulnerability-researchdefensive-securityintelligence+3
Main Stage·1 hr 14 min
Jason Clinton · Bruce Schneier · Heather Adkins
Panelists debate how to evaluate and release dual-use AI models, weighing open-weights diffusion and defender advantage as capabilities climb.
aipaneldefensive-security+2
Main Stage·36 min
Matteo Giordano
Maps passkey attack surface across authenticators, cross-device transport, browsers, relying parties and cloud sync, with a Burp extension to test them.
identitypasskeysattack+2
Main Stage·45 min
Martin Vigo
Follows a researcher's multi-angle attempt to defeat Bluetooth-operated Amazon lockers, from BLE protocol reversing to firmware extraction and physical lock work.
iotreverse-engineeringhardware+2
ICS Village·22 min
Amir Zaltzman
Shows how refrigeration controllers from two major vendors were compromised through firmware extraction, emulation and chained flaws.
icsembeddedvulnerability-research+2
Bug Bounty Village·27 min
Bogdan Steele · Arnav Garg
Presents MPG, a framework that mutates confirmed indirect prompt injection payloads to measure how many variants still bypass an AI assistant's safeguards.
aimachine-learningbug-bounty+2
BioHacking Village·25 min
D Castillo-Cornejo · M Woslum · Z Zinck
Presents a low-cost, open-source eDNA air sampler for catching ancient and airborne DNA as part of climate-linked biosurveillance.
villageopen-sourcedevice+2
Main Stage·24 min
Guanxing Wen
Shows how a crypto phone's MediaTek boot chain can be patched in memory from bootrom onward, and how the lock-screen and wallet keys behind it can be recovered.
mobilereverse-engineeringdevice+2
IoT Village·42 min
Larry Pesce
Shows how an AI agent driven by an IoT pentest playbook found and chained flaws in a webcam, and what humans must still validate.
aiiotembedded+2
Physical Security Village·25 min
Andrew Lebedinsky
Shows how to turn physical red team findings into realistic threat evidence and dollar-based impact that persuades executives to fund fixes.
riskthreatattack+3
Physical Security Village·26 min
Bill Graydon · Bobby Graydon
Explains which physical marks lock picking, tool-based bypasses, and electronic tampering leave behind, and how to tell whether a door was entered.
incident-responsehardwaredefensive-security+1
Main Stage·48 min
Daniel Monzon · Eric Labrador
Presents five new Active Directory Certificate Services escalation techniques that take a domain user to krbtgt extraction on a fully patched Windows Server 2025 CA.
vulnerability-researchwindowsexploiting+1
Most Watched
Ranked by YouTube views · as of 18 Sept 2026
012.9M viewsI'll Let Myself In: Tactics of Physical Pen Testers
022.7M viewsHow the Best Hackers Learn Their Craft
031.7M viewsInside the FBI’s Secret Encrypted Phone Company ‘Anom’
041.7M viewsKeynote
051.7M viewsRadio Hacking: Cars, Hardware, and more! - Samy Kamkar
061.5M viewsPain in The Neck | 15-minute Yoga for tech neck
071M viewsKill List: Hacking an Assassination Site on the Dark Web
081M viewsThe 'Breaking' News: The OpenAI–Hugging Face Incident
09984K viewsHow to meet customers’ demands and maintain work-life balance
10867K viewsElevator Hacking: From the Pit to the Penthouse
11810K viewsReimagining Application Security for the AI Era
12759K viewsBenjamin Tamási