Track 1·21 min
Chad Butler
Traces a real tech-support scam that drained a retired couple's savings and shows how a trusted-contact habit can stop it.
socialtrustrisk+2
Track 1 CC13
Mesa, AZ, USA · February 2025 · 12 talks
Track 1 talks from CactusCon 13 2025.
1–12 of 12 talks
Track 1·40 min
Dylan Hudson
Explains how a penetration tester moves into full-scope red teaming, covering OPSEC, C2 choices, and reporting to blue teams.
attackteaminfrastructure+2
Track 1·48 min
Henry Danielson · Bruce DeBruhl
Introduces a scenario-generation framework for space cyberattacks and walks through examples beyond jamming and spoofing.
attackriskinfrastructure+2
Track 1·55 min
Alethe Denis
Shows how red teams build deep-fake voice and video pretexts and scope realistic social-engineering tests around them.
socialaiidentity+2
Track 1·23 min
Ben Webb
Explains why raw CVE scanner output misleads, then lays out a rescoring process and metrics that focus effort on real risk.
vulnerabilitiesriskmanagement+2
Track 1·44 min
Justin Bollinger
Walks through CVE-2024-49019, where AD CS application policies in a signing request override template EKU limits.
windowsidentityvulnerabilities+2
Track 1·49 min
Mike Manrod · Ezra Woods
Shows how AutoHotkey scripts slip past EDR tools and how defenders can detect and block them.
attackdetectionframework+2
Track 1·45 min
Jonathan Fischer · Matthew Richard
Presents an open-source USB keyboard implant that logs keystrokes and relays data over a covert RF mesh for command and control.
hardwaredeviceopen-source+2
Track 1·33 min
Shelby Grossman
Shows how generative AI is changing influence operations, harassment and child-safety abuse, using takedown and threat-report data.
aithreatintelligence+2
Track 1·54 min
Jacob Wellnitz · Kelsey O'Connell · Sam Mayers
Shows how an incident response team, MDR analysts and a threat intel lab share data to contain ransomware faster.
incident-responsesecurity-operationsransomware+2
Track 1·50 min
K Singh
Shows incident responders how to manage clients, teammates and scope using triage tactics borrowed from emergency medicine.
incident-responseteammanagement+2
Track 1·30 min
Yael Grauer · David Huerta
Two reporters fact-check the most misleading security headlines of the year and show how journalists and researchers can do better.
privacyvulnerabilitiestrust+2