2026 BSides Las Vegas Schedule Wednesday August 5th
Events Breaking Ground Common Ground Ground Truth Hire Ground I Am The Cavalry PasswordsCon Proving Ground Training Ground Skytalks

Find us on HackerTracker

MONDAY
August 3

TUESDAY
August 4

WEDNESDAY
August 5

Events

Breaking Ground

Common Ground

Ground Truth

Hire Ground

I Am The Cavalry

PasswordsCon

Proving Ground

Training Ground

Skytalks

09:00-09:30

Hallway

Skytalks token drop Tokens 14,15

09:00-11:00

Piazza

Training Ground Registration

14:00-15:00

Florentine A

Closing Ceremony

14:30-15:00

Florentine C/D

Middle Ground closes

19:30-22:00

G103

Recovery Hackers

21:00-03:00

Pool

Party!

Located in Florentine A

10:00-10:30

Rejected-Input Programming: Exploiting Parsers That Say No Too Late

10:30-11:15

Who Let the DAGs Out: When Your Orchestrator Plays the Wrong Tune

11:30-12:15

Rekt Teaming: What Attackers See When They Look at Your Bug Bounty PoC

12:30-13:00

Every ride you take - Hacking a City’s Public Transportation

13:00-13:45

Locknote : The End of the Beginning

Located in Florentine F

10:00-10:30

FHIRbug: Cross-Vendor OAuth Security Patterns in 14 Production Healthcare APIs

10:30-11:00

Agents of Chaos: A Systemic Approach to Finding GCP 0-Days

11:00-11:45

What Bounds Your Coding Agent? A Field Guide to Access, Inputs, Supply Chain, and Hooks

12:00-12:45

I am CVE, AMA!

Located in Florentine E

10:00-10:45

Your Training Data Is Too Boring: Surfacing the Long Tail With Anomaly Detection and LLMs

11:00-11:45

Agents Under Fire

12:00-13:00

Social Engineering the Machine

Located in Florentine B

10:00-10:45

Bridging the Gap - – Four Realities of Getting Hired in Cyber Security

11:00-11:55

Nobody Told Me I Could Grow: Building a SOC Career You Actually Want

12:00-12:25

Making the Leap: Advice for Career Field Changers or those new to IT

12:30-12:50

Music School Dropout to Cybersecurity Auditor - My Journey Into Cybersecurity

Located in Copa Lounge

10:00-10:30

Making Preparedness and Personal Resilience Approachable

10:30-11:15

Taiwan Conflict: Most Likely/Most Damaging

11:15-12:00

The Next 12 Months

Located in Siena

10:00-10:45

Authorization phishing: how attackers stopped targeting logins

11:00-11:30

Reheated Leftovers are Making Us Sick: How Old Data Breaches are Causing New Problems

11:30-12:00

The Laptop Is the Perimeter: How Attackers Target Developers to Breach the Software Supply Chain

12:00-12:45

Certificate Transparency logs as OSINT

Located in Firenze

10:00-10:30

From Forest to Bonsai: Pruning and Explaining Logs for Air-Gapped IoT Devices Using Local LLM

10:30-11:00

89 Seconds to Compromise: Inside npm Supply Chain Attacks and How to Fight Back

11:00-11:30

Minutes from Malice: Detect Cloud Exposures in Minutes

11:30-12:00

The 0-day Vending Machine: No Mythos Necessary

Located in Building H & Pub 365

Reservations via Humanitix are required.

10:00-12:00

Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel

10:00-12:00

Hacking My First Web App: A Hands-On Lab to Exploit & Fix Real Flaws

10:00-11:30

Vibe Coding a Backport: Deep Dive into Backported Patch Generation

10:00-12:00

OT Systems: how to secure them in practice!

10:00-11:30

Digital Detox: Cleanse Your Digital Footprint

Located in Tuscany

Tokens required for entry. Don't forget to pick up your Skytalks token in the hallway outside Breaking Ground. Click here for more info.

10:00-10:45

I Built a Fake Company and the Internet Believed Me - TOKEN: 14

11:15-12:45

Programming PLCs for Fun, Profit, and Disaster: Get Your Shit Off the Internet - TOKEN: 15

Code of Conduct & Photo Policy

Security BSides Las Vegas, Inc. is a federally recognized 501(c)(3) since 2012

©2026 Security BSides Las Vegas, Inc.