Track 1·21 min
Chad Butler
Traces a real tech-support scam that drained a retired couple's savings and shows how a trusted-contact habit can stop it.
socialtrustrisk+2
February 2025 · Mesa, AZ, USA
CactusCon 13
3 sessions · 30 talks
Sessions at this event
All CC13 talks
1–24 of 30 talks
Track 1·40 min
Dylan Hudson
Explains how a penetration tester moves into full-scope red teaming, covering OPSEC, C2 choices, and reporting to blue teams.
attackteaminfrastructure+2
Track 1·48 min
Henry Danielson · Bruce DeBruhl
Introduces a scenario-generation framework for space cyberattacks and walks through examples beyond jamming and spoofing.
attackriskinfrastructure+2
Track 1·55 min
Alethe Denis
Shows how red teams build deep-fake voice and video pretexts and scope realistic social-engineering tests around them.
socialaiidentity+2
Track 1·23 min
Ben Webb
Explains why raw CVE scanner output misleads, then lays out a rescoring process and metrics that focus effort on real risk.
vulnerabilitiesriskmanagement+2
Track 1·44 min
Justin Bollinger
Walks through CVE-2024-49019, where AD CS application policies in a signing request override template EKU limits.
windowsidentityvulnerabilities+2
Track 1·49 min
Mike Manrod · Ezra Woods
Shows how AutoHotkey scripts slip past EDR tools and how defenders can detect and block them.
attackdetectionframework+2
Track 1·45 min
Jonathan Fischer · Matthew Richard
Presents an open-source USB keyboard implant that logs keystrokes and relays data over a covert RF mesh for command and control.
hardwaredeviceopen-source+2
Track 1·33 min
Shelby Grossman
Shows how generative AI is changing influence operations, harassment and child-safety abuse, using takedown and threat-report data.
aithreatintelligence+2
Track 1·54 min
Jacob Wellnitz · Kelsey O'Connell · Sam Mayers
Shows how an incident response team, MDR analysts and a threat intel lab share data to contain ransomware faster.
incident-responsesecurity-operationsransomware+2
Track 1·50 min
K Singh
Shows incident responders how to manage clients, teammates and scope using triage tactics borrowed from emergency medicine.
incident-responseteammanagement+2
Track 1·30 min
Yael Grauer · David Huerta
Two reporters fact-check the most misleading security headlines of the year and show how journalists and researchers can do better.
privacyvulnerabilitiestrust+2
Track 2·46 min
Amrita
Surveys detection methods for AI-generated text and inference-time steering techniques that reduce harmful LLM outputs.
aimachine-learningdetection+2
Track 2·52 min
Kat Reid · Lester Godsey
Shows how communications and security teams can track social media threats and respond to false narratives during a crisis.
incident-responsethreatrisk+3
Track 2·49 min
James McQuiggan
Explains how deepfakes are built, the fraud cases they power, and the human checks that help catch them.
aisocialdetection+2
Track 2·1 hr
Christian Taillon
Explains how self-hosted open-weight LLMs can support SOC triage, threat intel and document Q&A without sending data to third parties.
aimachine-learningsecurity-operations+2
Track 2·49 min
Thomas Wilhelm
Walks through real-world attacks on AI systems, from road stickers fooling cars to poisoned training data and model extraction.
machine-learningattackvulnerabilities+2
Track 2·56 min
Derek Melber
Shows how common Active Directory misconfigurations enable domain takeover and how to audit and fix them with PowerShell.
windowsidentitydefensive-security+2
Track 2·21 min
Monica Kay Royal
Shows how machine learning models can leak training data and which anonymization and privacy techniques reduce that risk.
machine-learningprivacyai+1
Track 2·44 min
Alex Trudeau
Shows how to bypass iOS certificate pinning by reversing a training app in Ghidra and hooking it with Objection.
reverse-engineeringmobileapplication+2
Track 2·46 min
Gopi Raam Morti · Aruneesh
Ranks ten surprising AI system attacks across organizations, consumers and critical infrastructure, paired with mitigations.
aiattackthreat+2
Track 2·25 min
Taaha Sayyed
Recounts how an accidental kiosk exploit at a university broadcast a Rick Astley video across campuses and what followed.
vulnerabilitiesincident-responselessons-learned+2
Track 3·44 min
Louis
Shows how JWT algorithm confusion lets attackers forge tokens, and how libraries can block it in code.
webappsecvulnerabilities+2
Track 3·47 min
Drew “Hoodoer” Gilbert
Demonstrates turning an XSS foothold into a JavaScript C2 platform that captures credentials and replays user actions.
webappsecattack+2