Ground Floor·34 min
Ochaun Marshall
Frames product security as a holistic program that shifts left, right, up and down across the whole stack.
applicationframeworkdevelopment+2
Ground Floor BSidesLV 2025
Las Vegas, USA · August 2025 · 16 talks
Ground Floor talks from BSides Las Vegas 2025.
1–16 of 16 talks
Ground Floor·42 min
Chitra Dharmarajan · Steve Jarvis
Shows how Kubernetes workloads and CI pipelines can authenticate across clouds without storing static secrets.
cloudidentitykubernetes+2
Ground Floor·41 min
Madison Rocha
Explains how tabletop exercises test incident response plans and how to build harder scenarios that expose gaps.
incident-responserisklessons-learned+2
Ground Floor·20 min
Chapin Bryce · Brittney Argirakis
Shows how responders can quickly scope exposed cloud resources using Luminaut, an open-source triage scanner.
cloudincident-responseopen-source+2
Ground Floor·43 min
Brent Harrell · Alex Bernier
Explains how LLM applications and agents create red team attack paths, from prompt injection through RAG poisoning to data exfiltration.
aimachine-learningattack+2
Ground Floor·49 min
Darryl G. Baker
Explains how misconfigured OAuth and OIDC implementations expose bearer tokens to replay, with a live token replay demo.
identitywebvulnerabilities+2
Ground Floor·25 min
Or Sahar · Yariv Tal
Shows how secure coding was taught to high school and university students, with free open workshops and videos.
appseclearningopen-source+2
Ground Floor·49 min
Ben Hirschberg
Shows how seccomp syscall filters can contain a live container exploit and how to generate profiles from observed behavior.
kubernetescontainerlinux+2
Ground Floor·20 min
You Nakatsuru · Fumiya Imai · Viet Luu
Compares physical intrusion defenses in Japan and the U.S., showing how social engineering exploits culture and staff habits.
socialengineeringdefensive-security+2
Ground Floor·37 min
Danny Adamitis
Traces how Turla moved through Pakistani-linked command servers to reach government networks across the region.
threatintelligencenetwork+2
Ground Floor·24 min
Aaron Shim
Shows how Google layers secure frameworks, build-time checks, CSP and Trusted Types to remove XSS classes at scale.
appsecwebvulnerabilities+2
Ground Floor·41 min
Alina Thai · Haily Beem
Shows how structured analytic techniques can reduce cognitive bias in SOC, CTI and incident response work.
intelligencethreatincident-response+2
Ground Floor·20 min
HD Moore
Rapid-fire pentest tips covering recon, pivoting through management tools, and finding and exfiltrating data quickly.
reconattacknetwork+2
Ground Floor·42 min
Mark Hoopes
Surveys cookie theft and browser defenses, then evaluates Google's Device Bound Session Credentials and its impact on session security.
webidentitytrust+2
Ground Floor·22 min
Javan Rasokat
Shows how browser-native features like CSP, Trusted Types and Sec-Fetch-Metadata can block whole classes of web flaws.
appsecwebdefensive-security+1