Las Vegas Convention Center, Level 1, West Hall 2, Booth# 604
Village Hours
| Day 1 | Friday, August 7 | Village Hours - 10am-6pm PODs - 11am-5pm |
|---|---|---|
| Day 2 | Saturday, August 8 | Village Hours - 10am-6pm PODs - 11am-5pm |
| Day 3 | Sunday, August 9 | Village Hours - 10am-1pm PODs - 11am-1pm |
All times are in Pacific Time(GMT -7)
Day 1 - August 07, 2026
10:15
Pentesting made easy - Keeping sessions alive with session chains
Arsenal All Audiences 60 min 90 min 120 min
Kai Glauber
Matthias Göhring
10:30
Burp, But Yours: Hands-On Extension and Bambda Development
Workshop Intermediate 2 Hours 3 Hours
Hannah L
Keren Elazari
11:00
Samantha Pearlstein
Gwendal Mognier
Patrick Smyth
11:10
Iggy
11:30
Aegis of the Vulnerable: A Unified Pipeline for AI-Based SAST
Arsenal All Audiences 60 min 90 min 120 min
Can Oztas
11:50
Simcha K
12:30
Container Escapes Are Not Magic. Here Is How They Actually Work.
Talk All Audiences
Advait Patel
12:45
Drogonsec: SAST + SCA + Secrets + IaC in one open-source scanner
Arsenal All Audiences 60 min 90 min
Filipi Pires
13:00
Patrick Smyth
13:10
Agentic Chaos - What 86K+ Agent Codebases Reveal About 700K+ Exposed AI Systems
Talk All Audiences
Bar Kaduri
Lidan
13:50
from_pretrained() to from_pwned(): Breaking HuggingFace's Trust
Talk Intermediate
Yotam Perkal
14:00
Farsight: Turning OSINT into Actionable Attack Surface Intelligence
Arsenal Intro 60 min
Arif
Seedon D'Souza
Sai Vernekar
kvprashant
14:30
GeoHacking: from memory corruption RCE to cross tenant access
Talk Intermediate
Michal Kamensky
some-natalie
15:00
Mackenzie
Patrick Smyth
Dmitry Raidman
15:10
Zero Trust Kubernetes Security: Preventing Real World Container Attacks
Talk Intermediate
Janakiram Meka
15:15
IDEViewer - Securing Developer Workstations from IDE Supply Chain Threats
Arsenal Intermediate 60 min
securient
15:50
Man-in-the-Browser: Hijacking Javascript APIs for Browser Persistence and Credential Theft
Talk Intermediate
Aarav Juneja
16:30
Most threat modeling artifacts don't help coding agents fix business logic. Here's what does.
Talk All Audiences
Meitar Ronen
Rebuilding Code Security with Signal, Speed and AI
Arsenal All Audiences 60 min
Shasheen Bandodkar
Derek C.
17:10
Trust No History: Why Every "Remembered" Interaction is a Potential Backdoor
Talk Intermediate
Barno Kaharova
Rico Komenda
Day 2 - August 08, 2026
10:15
Prompt Injection: Attacking and Defending AI-Powered Applications
Workshop All Audiences 3 Hours
Mohammed Ilyas Ahmed
In Untrust We Can Trust: Enforcing Trust Boundaries for Humans and AI Alike
Arsenal Intermediate 60 min 90 min 120 min
Yariv Tal
10:30
Jason Haddix
11:00
Dmitry Raidman
Mackenzie
Patrick Smyth
Pentester vs AI: Race The Machine, In Real Life
POD All Audiences
Samantha Pearlstein
Gwendal Mognier
11:10
What Your Coding Agent Did Last Night: Runtime Security for AI Coding Agents
Talk Intermediate
Inga Cherny
11:30
Precogly: Open-Source Threat Modeling for the AI-Coding Era
Arsenal Intermediate 90 min 120 min
Vikramaditya Narayan
11:50
Pedro Fortuna
12:30
Adam Shostack
12:45
OWASP FinBot CTF: Hands-On Agentic AI Threats
Arsenal All Audiences 60 min
Helen Oakley
saikishu
13:00
Mackenzie
13:10
The API Made Me Do It - Do Bad APIs Lead AI to Generate Vulnerable Code?
Talk Intermediate
Yariv Tal
13:15
Supply Chain Isn’t Just Dependencies Anymore: Defending Developers, Tooling, and Builds
Workshop Intermediate 3 Hours
SheHacksPurple
13:50
Every ride you take - Hacking a City’s Public Transportation
Talk All Audiences
Ignacio Navarro
14:00
Helen Oakley
Dmitry Raidman
14:30
Pattern, Graph, Prompt: What Happens When You Layer Three Analysis Paradigms on the Same Codebase
Talk Advanced
Mudita Khurana
15:00
William Reyor
Andy Dennis
Dmitry Raidman
15:10
Jenn Gile
15:15
Proactive Malicious Package Defense
Arsenal Intermediate 60 min 90 min 120 min
Darren Meyer
15:50
How Shadow APIs Become an Attacker's Free Pass Into Your Cloud-Native App
Talk Intermediate
Emma Fang
Krity
16:15
Code to Cloud: Secure Modern Applications Using Open-Source Tools
Workshop Intermediate 2 Hours
Mackenzie
16:30
Your SaaS Is My Foothold: Weaponizing Shadow SaaS for Initial Access and Persistence
Arsenal All Audiences 60 min 90 min 120 min
Jordan Bonagura
No Jailbreak Required: Pwning AI Agents Through the Tools They Trust
Talk All Audiences
saikishu
Helen Oakley
17:10
From Prompts to Production: Discovering Exposed PII & IDORs in AI-Generated Apps
Talk Intermediate
Samantha Pearlstein
Day 3 - August 09, 2026
10:15
ROP for the Web: Smuggling XSS, SQLi, and Web Shells Past Every WAF Using Compression Dictionaries
Arsenal Advanced 60 min 90 min 120 min
alevsk
Introduction to AI-Enhanced Threat Modeling Workshop
Workshop Intermediate 3 Hours
Robert Hurlbut
10:30
Install Me Maybe: Turning Claimable VS Code Extension IDs into Supply-Chain Attacks
Talk Intermediate
Raphael Silva
11:00
Mackenzie
Clash of Prompts: The World's First Prompt Battle Royale
POD All AudiencesDarren McNelis
Jerome Roberts
Dmitry Raidman
11:10
Extending Shared Threat Models with the Application Attack Matrix
Talk All Audiences
J Fridley
11:30
search_vulns: Navigating the Fragmented Landscape of Vulnerability Data
Arsenal All Audiences 60 min 90 min 120 min
Dustin Born
Matthias Göhring
11:50
Finding Bugs Is Easy, Patching Isn't: Build Your Own Remediation Pipeline
Talk Intermediate
Naveen
Mohan Kumar
12:45
The Agent Asked. We Allowed. Now What?
Arsenal All Audiences 60 min 90 min 120 min
Liran Lavi
Sarit Yerushalmi
Our 2026 Sponsors
Platinum Sponsors
Gold Sponsors
Silver Sponsors
Bronze Sponsors
