#BSidesNYC

The official account for Security BSides New York City. October 18, 2025 @ John Jay College

[#BSidesNYC @BSidesNYC]

@BSidesNYC 0x06 will be on October 17, 2026. CFP is open now: https://t.co/LP28gd0Ete

[#BSidesNYC @BSidesNYC]

Leftover lunches → @CityHarvest

Extra t-shirts → @VVAmerica 🇺🇸

Nothing wasted after #BSidesNYC 💚

Huge thanks to our volunteers + partners for helping us give back to the community! 🙌

#BSidesNYC #Community #GiveBack #NoWaste

[#BSidesNYC @BSidesNYC]

The Allure of Go’s Cross-Platform Capability: A Gateway for Threat Actors to Mac and Linux

Anmol Maurya from Palo Alto Networks explains how attackers use Go to target Mac and Linux and what defenders need to know. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Contribute to Learn: Building DFIR Expertise Through Open Source

Christopher Eng, Independent Digital Forensic Researcher and CIO, shares how contributing to open-source DFIR tools like KAPE and Velociraptor can accelerate hands-on learning and community growth. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Inside Ransomware: Facts and Findings from the BlackBasta and LockBit Leaks

Cory Wolff, Director of Offensive Security at risk3sixty, breaks down leaked data from major ransomware groups to reveal how affiliates collaborate, develop payloads, and profit. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Interactive Networking Fingerprinting Walkthrough

Vlad Iliushin, Cybersecurity Expert at ELLIO and President of AMTSO, leads a hands-on workshop on modern passive fingerprinting techniques like JA3, JA4, p0f, and MuonFP. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Rebooting the Cyber Arsenal of Democracy

Eric Foster, CEO of https://t.co/C1mh3xSiMZ, shares hard-earned lessons from building and exiting multiple security companies and what it takes to launch and scale a cybersecurity startup in 2025. #BSidesNYC

[#BSidesNYC @BSidesNYC]

P0LR Espresso: Pulling Shots of Cloud Live Response & Advanced Analysis

Art Ukshini, Threat Researcher at Permiso Security, presents P0LR Espresso, a tool built to cut through noisy cloud logs, detect threats in real time, and speed up incident response. #BSidesNYC

[#BSidesNYC @BSidesNYC]

The Log Rings Don’t Lie: Historical Enumeration in Plain Sight

Bleon Proko, Security Engineer, shows how attackers can use logs to perform enumeration, run C2 channels, and exfiltrate data through cloud infrastructure. #BSidesNYC

[#BSidesNYC @BSidesNYC]

The History of Malware: From Floppies to Droppers

Eliad Kimhy, Senior Security Researcher at Acronis, traces the evolution of malware from its early floppy disk days to modern ransomware, showing what has changed and what has stayed the same. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Atomic Red Team 101

Gerard Johansen from Red Canary and Ryan Lanciali lead a hands-on workshop on using Atomic Red Team to emulate threats, validate defenses, and strengthen detection and response. #BSidesNYC

[#BSidesNYC @BSidesNYC]

When the Shadow Crosses Over

Ilya Yatsenko, Offensive Security Engineer and OSCE3, explores Remote Desktop shadowing in Windows and how the same techniques can now be used from Linux and macOS systems. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Trust at Scale: Lessons Learned from a Decade of Engineering for Identity

Frédéric Rivain, CTO at Dashlane, shares lessons from building secure-by-design systems and scaling trust across millions of users in the evolving world of identity security. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Living off the (land)cloud: Scattered Spider and the Cloud Control Plane

Shivakumar Buruganahalli, Senior Director of Customer Engineering at Acalvio, breaks down how Scattered Spider exploits cloud identities and IAM to move laterally and evade detection. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Using Volatility 3 to Detect Sophisticated Malware

Andrew Case, Director of Research at Volexity, shows how new features and plugins in Volatility 3 help detect modern ransomware and APT techniques that evade traditional defenses. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Mastering OWASP Amass v5.0
Jeff Foley, Project Leader at the OWASP Foundation, leads a hands-on workshop on the new graph-powered capabilities in Amass v5.0 for next-level asset discovery and reconnaissance. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Essential Marketing for Cyber Founders
Gianna Whitver, Co-Founder and CEO of the Cybersecurity Marketing Society, shares how founders can stretch their budgets and market smarter at every stage of their startup journey. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Understanding Python Bytecode
Rocky Bernstein, Chief Mad Scientist Emeritus, leads a hands-on workshop on disassembling, assembling, and decompiling Python bytecode using tools like xdis, xasm, and uncompyle6. #BSidesNYC

[#BSidesNYC @BSidesNYC]

The Human-AI Handshake: A Framework to Build Trust and Unlock Innovation in Modern Security Ops

Michael August Raggi, Principal Threat Response Specialist at Crowdstrike, shares how AI can build trust, boost efficiency, and spark innovation in security operations. #BSidesNYC

[#BSidesNYC @BSidesNYC]

Spycraft 2.0: Hunting Dead Drops in Web Applications
Jonathan Fuller, CISO and Academy Professor at West Point, explains how attackers hide command and control servers inside public web apps and how defenders can uncover these digital dead drops. #BSidesNYC