Tracks

A track says what kind of work a talk is about. Every talk has exactly one, drawn from a fixed vocabulary — unlike topics, which are free-form and many per talk.

Recon

Recon453

Attack surface mapping, scanning, enumeration, infrastructure discovery.

OSINT211

Open-source intelligence, people and asset discovery, public data pivots.

Offense

Red Team3159

Offensive tradecraft, exploitation, initial access, post-exploitation.

Malware1918

Malware development, analysis, reversing, ransomware ecosystems.

Social Engineering330

Human-layer attacks, pretexting, phishing, physical intrusion by persuasion.

Adversary Emulation116

Emulating named threat actors, attack simulation frameworks, TTP replay.

Offense + defense

Purple Team37

Offense and defense working the same loop; detection validation, control testing.

Defense

Blue Team8927

Detection engineering, hunting, incident response, telemetry, forensics.

Threat Intel1159

Actor tracking, attribution, CTI tooling, geopolitics of cyber operations.

Domain

Community12003

Careers, culture, village operations, hacker history, contests.

Hardware5497

Embedded, firmware, silicon, physical device attacks.

AppSec3621

Application and API security, web exploitation, secure development.

Cloud2628

Cloud and container security, identity, SaaS, Kubernetes.

AI Security2327

Attacking and defending models and agents, prompt injection, AI-assisted tradecraft.

Supply Chain1526

Dependency and vendor risk, package ecosystems, build and release integrity.

Wireless1489

RF, cellular, Wi-Fi, satellite, protocol attacks over the air.

Policy1444

Law, regulation, disclosure, ethics, the business of security.

ICS / OT1379

Industrial control systems, operational technology, critical infrastructure.

Privacy1001

Surveillance, tracking, anonymity, data protection.

Mobile667

Android and iOS security, mobile forensics, app tampering.