CactusCon

106 talks · 2021–2025 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• CC13: It is 2025… Is Microsoft Active Directory Still Risky to Your Enterprise? 2025
• CC14: Worst of Cybersecurity Reporting 2025 2025
• CC13: Worst of Cybersecurity Reporting 2024 2024
• CC9 - Worst of Cybersecurity Reporting 2021 2021
• CC10 - Active Defense Scenarios: A Quarterly Intelligence Driven Purple Team Exercise
• CC10 - Artificial Intelligence: Friend or Foe
• CC10 - atomic-operator: Atomic Red Team Python Execution Framework
• CC10 - Building a more inclusive future in Cybersecurity
• CC10 - Building a Ransomware Incident Response Plan
• CC10 - Dissecting the Ransomware Kill Chain: Why Companies Need It
• CC10 - How Nefilim Dropper uses Polymorphism
• CC10 - Human Intelligence Versus Artificial Intelligence: Ransomware
• CC10 - Hunting Phish Kits
• CC10 - JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s
• CC10 - Network Forensics Analysis
• CC10 - Nits Among Your Bits: A Dive into LockВit Ransomware Operations
• CC10 - Operationalized Purple Teaming
• CC10 - PacketSifter and Leveraging TShark for Network Traffic Analysis
• CC10 - Ready...Set...Secure all the COVID vaccines!
• CC10 - Tag Management System: the Agile Way to Add Vulnerabilities on your Website
• CC10 - Threat Hunting: Becoming the Predator and No Longer the Prey
• CC10 - Throwing the Elephant
• CC10 - What Are We Missing in Web Application?
• CC13 Keynote: Down the Rabbit Hole: Red Team Deep Fakes and the Evolution of Social Engineering
• CC13 Keynote: How Generative AI is Shaping Online Threats
• CC13: Alice & Bob Lose Their Life Savings
• CC13: Becoming a Red Team Operator
• CC13: Beyond the Horizon: Innovative Approaches to Space Cyberattack Scenarios
• CC13: Building Trust in AI: On Safe and Responsible Use of LLMs
• CC13: CISO Village - "Cybersecurity Leadership Accelerator: Your First 100 Days as CISO"
• CC13: CISO Village - "Fortifying The Future: Essential Cyber Insurance Strategies for CISOs"
• CC13: CISO Village - "How I Quit Worrying About an Incident and Learned to Become a CISO"
• CC13: CISO Village - "Identifying and Navigating the Risks of Executive Debt"
• CC13: CISO Village - "Making It Click - How To Build an Effective Security Strategy"
• CC13: CISO Village - "Vendor Reveal Party"
• CC13: CISO Village - Keynote with Ashley Devoto
• CC13: CISO Village - Panel Discussion
• CC13: Deep dive into JWT Algorithm Confusion
• CC13: Digital damage control: misinformation, disinformation & negative effects during a crisis
• CC13: Digital Doppelgängers: The Dual Faces of Deepfake Technology
• CC13: DIY AI: Build Your Own Digital InfoSec Team with BYOLLM
• CC13: Dr. CVE Love, or how I learned to stop worrying and love vuln management
• CC13: EKUwu - Not Just another AD CS ESC
• CC13: Evasion, Persistence, and Blinding EDR - Oh My
• CC13: Exploiting AI & Machine Learning Systems: Adversarial Attacks against Deep Learning Algorithms
• CC13: HIDe-&-SEEK: Who Owns Your Keyboard?
• CC13: Intelligent Response: Merging Threat Intel, MDR, and Incident Response for Maximum Impact
• CC13: JS-Tap Mark II: Attacking Web Apps With Even More Red Team Shenanigans
• CC13: LLMs: Your Wireless Hacking Friend
• CC13: Machine Learning Models Gone Rogue - How to Reel Them Back In
• CC13: Navigating Blind SSRF: Attacking and Defending Critical Systems
• CC13: NTLMv1 reversion to NTLM with hashcat and the NTLMv1-multi tool
• CC13: Presenting Like a Boss: Virtual & Physical Presenting Tips & Tricks
• CC13: Staunching Wounds and Staying Sane: A Survival Guide for Incident Responders
• CC13: That Shouldn't Have Worked - Payload Development 101
• CC13: The Pin Puller's Guide: A Hands-On Guide to Reverse Engineering iOS Applications
• CC13: Top 10 Unexpected AI Systems Hacks that we did not see coming!
• CC13: When AI Meets Cybersecurity: Challenges and Strategies for Professionals
• CC13: Whoops I Accidentally Hacked ASU
• CC14 Keynote: Death by Ransomware
• CC14 Keynote: The Importance of Being Human
• CC14: A History of AppSec through Neopets.com
• CC14: Agents Under Siege - Live Attacks from RAG to Tool Calls to Protocols
• CC14: AI Has Changed the Game - But Not All the Rules - Old Threats, New Risks, Real Consequences
• CC14: All Systems GO! Attention Satellite Space Nerds & Hackers, AMSAT build your own Cubesat!
• CC14: Bootstrapping Payloads One Game at a Time
• CC14: Breaking Model Context Protocol - Back to Security Basics
• CC14: Closing Ceremony
• CC14: Cloud ForeverDays - Cloud Vulnerabilities That Refuse To Die
• CC14: Cross-Site Scripting - Old Bug, New Tricks
• CC14: CTRL+ESC+HOST - A Look at Evasive Compromise Paths, Kicking Kiosks and Taking ADCs
• CC14: Cyber Defenders - Turning Skills Into Lifesaving Action
• CC14: Dungeons & Dragons - The security tool you didn’t know you needed
• CC14: Evading EDR with the Wasm Blindspot
• CC14: Exploiting Consumer Networking Hardware Start To Finish
• CC14: LLMs Gone Wild - AI-Crafted Malware Infecting Our Supply Chain
• CC14: Oops All Passwords - Malware Coming Soon Near You!
• CC14: OopsSec - The Day I Made the DMV Even Slower
• CC14: Opening Ceremony
• CC14: Pathways to Pentesting
• CC14: Sharpening Python Tools with Rust
• CC14: Sipping From the CVE Firehose - Prioritizing Emerging Threats for Real-World Impact
• CC14: Stealing From Thieves
• CC14: The Badge Talk!
• CC14: The Folly of Rewarding A While Hoping for B - Ethics and Metrics in Cybersecurity
• CC14: The Hardware Procurement Iceberg: A Framework To Keep Embedded Research Fun Cheap and Ethical
• CC14: The Serverless Mirage - Navigating Risks in an Invisible Infrastructure
• CC14: They Weaponised Your AI CLI - Unpacking the Nx ‘s1ngularity’ npm Compromise
• CC14: This Little Brite of Mine - Mobile Forensics for Fun and (Sometimes) Profit
• CC14: YubiWorm - Turning a Trusted YubiKey into a Propagating Worm
• CC9 - Analyzing Suspicious Artifacts (deep dive)
• CC9 - Can Artificial Intelligence (AI) Detect Advanced Persistent Threats?
• CC9 - Extracting a Bootloader's AES Key via a Power Analysis Side Channel Attack
• CC9 - Hacking with Skynet: How AI is Empowering Adversaries
• CC9 - Hands-on Purple Team Workshop
• CC9 - Keynote Address: Eva Galperin
• CC9 - Keynote: April C. Wright
• CC9 - Learning Offensive Security with Project V^3: VulnHub + VirtualBox + Vagrant
• CC9 - Linux IR: Windows of Opportunity
• CC9 - MQTT: Tiny Protocol, Big Vulnerabilities
• CC9 - Reverse Engineering Websites
• CC9 - Stealing a Password Through Interpretive Dance, and Other Wild Video Game Hacks
• CC9 - The Crimeware Arms Race: Modern Techniques in Malware Armoring & Evasion
• CC9 - The Full Purple Juice, Not the Watered-Down Stuff
• CC9 - When Your Memory Forensics Tools Only Tell Half the Story
• CC9- Introduction to Car Hacking Basics