Ground Truth·25 min
David Shipley
Explains how cognitive biases and phishing simulation data shape employee click behavior, and how to reduce it.
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 34Las Vegas, USA · August 2025 · 14 talks
Ground Truth talks from BSides Las Vegas 2025.
1–14 of 14 talks
Ground Truth·25 min
David Shipley
Explains how cognitive biases and phishing simulation data shape employee click behavior, and how to reduce it.
Ground Truth·26 min
Wasabi
Explains how collegiate cyber competitions like WRCCDC and CIRCUS get designed, and how to grow them into events people return to.
Ground Truth·23 min
Jason Ford
Presents an ensemble machine learning approach to network intrusion detection that aims to hold up beyond lab datasets.
Ground Truth·50 min
Fred Heiding · Simon Lermen
Shows how AI agents can automate a phishing chain, from target profiling to domain purchase and site setup.
Ground Truth·37 min
Dvir Lazar · Taha Biyikli
Shows reinforcement learning agents navigating API graphs to find broken access control and other logic flaws.
Ground Truth·44 min
Josh Hargus · Chris Ward
Applies the STPA-Sec systems safety method to find hazards and unsafe control actions in AI coding and intelligence-analysis systems.
Ground Truth·38 min
Munish Walther-Puri
Walks through the TRIZ problem-solving method and shows how it applies to security problems like supply chains and ICS.
Ground Truth·58 min
Matthew Canham
Examines how AI agents could open new attack surfaces that target people, through digital twins and cognitive manipulation.
Ground Truth·48 min
Wendy Hou-Neely
Surveys cyber insurance claims data to trace ransomware, business interruption, and privacy litigation trends and their costs.
Ground Truth·27 min
Explains how personal data is pulled out of ransomware-leaked dumps and organized into a searchable index.
Ground Truth·54 min
Sounil Yu
Presents mental models for forecasting how AI reshapes security decisions, from agentic automation to organizational controls.
Ground Truth·38 min
Ariana Mirian
Walks through failed machine learning attempts to predict how long internet services stay online, and the classifier that worked.
Ground Truth·51 min
Brennan Lodge
Shows how retrieval-augmented generation and MCP can feed threat intel and logs into LLMs for SOC triage and compliance mapping.
Ground Truth·49 min
Fred Heiding · Andrew Kao
Connects past breaches in other critical sectors to AI labs and compares national cyber strategies from several countries.