Common Ground·46 min
Candid Wuest
Assesses whether agentic AI malware is already a real threat, with a PowerShell proof of concept and defender takeaways.
aiattackdetection+2
Common Ground BSidesLV 2025
Las Vegas, USA · August 2025 · 17 talks
Common Ground talks from BSides Las Vegas 2025.
1–16 of 16 talks / 17
Common Ground·45 min
Blake Hudson · Caleb Sargent
Shows how built-in tools and misconfigurations let attackers disable Zscaler and Microsoft Defender protections.
attackdefensive-securitydetection+3
Common Ground·47 min
Klaus Agnoletti · Glen Sorensen
Shows how role-playing game mechanics can make incident response tabletop exercises more engaging and memorable.
incident-responselearningteam+2
Common Ground·21 min
Brian Baskin
Shows how to peel, clean, and reapply laptop stickers without ruining them or losing what they signal.
hackpracticalhardware+1
Common Ground·34 min
Mauro Eldritch
Shows how an educational ransomware locks NFC bioimplants, covering memory layout, password handling and a decryptor.
ransomwarereverse-engineeringembedded+1
Common Ground·26 min
Avinash Nutalapati
Explains how EPSS, CVSSv4, SSVC and VEX can be combined to cut vulnerability triage noise.
vulnerabilitiesriskmanagement+1
Common Ground·21 min
Shows how to rank security risks by business impact and threat context rather than by headlines or CVSS scores.
riskthreatvulnerabilities+2
Common Ground·30 min
Phil Young
Explains how to structure a conference call for papers, from titles and abstracts to outlines and bios.
guideintroductionlearning+1
Common Ground·47 min
Alex Thines
Walks through choosing boards, languages and parts for building your own small Wi-Fi and IoT gadgets.
buildinghardwareembedded+2
Common Ground·21 min
Jerry Gamblin
Examines gaps in CVE record quality, from missing weakness, product and patch data to a new CNA scorecard.
vulnerabilitiesintelligencerisk+2
Common Ground·24 min
Kat Traxler
Compares provider-managed non-human identities across AWS, Google Cloud and Microsoft, and where each one is vulnerable.
cloudidentityvulnerabilities+2
Common Ground·34 min
Keya Arestad
Weighs commercial security tools against open-source threat intelligence, with a walkthrough of the MISP sharing platform.
open-sourceintelligencethreat+2
Common Ground·18 min
Mehmet Sencan
Shows how physically destroying GPUs with detonators can deny attackers key extraction and chip reuse.
hardwaredevicetrust+2
Common Ground·46 min
Logan Arkema
Makes the case that information security workers can build collective power through unions, and outlines practical steps to organize.
teambuildingmanagement+1
Common Ground·45 min
Amit Serper · Travis Low
Shows how "what if" attacks on a Kubernetes cluster can disrupt DNS, exfiltrate secrets through webhooks, and enumerate services quietly.
kubernetescloudattack+2
Common Ground·45 min
Mea Clift
Breaks down what cyber insurance covers, how underwriting and claims work, and how businesses can partner with carriers.
riskmanagementincident-response+2