BSides Vancouver 2026 has ended

BSides Vancouver 2026

arrow_back View All Dates

10:40am PDT

Adapt Your IR for AI Track 4 - Room 1700 - Sponsored by Aikido SecurityRyan Clarke • Muhammad Muneer Advanced SaaS Threats: Case Studies from the Field Track 5 - Room 1800Damien Miller-McAndrews Hype to Innovation: Quantifying AI Value for the Board Track 2 - GRC Track - Room 1400/1410 - Sponsored by Iron Spear - Hosted by ISACAGreg Ahira • Kevin Sahota Sandworms and Other Nonsense: An Eventful Year for npm Supply‑Chain Attacks Track 3 - AppSec Track - Room 1420/1430 - Sponsored by Google Cloud Security - Hosted by OWASPMegg Sage The Coming AI Catastrophe Won't Be Superintelligence, It Will Look Like Malware Track 1 - AI Track - Room 1900 - Sponsored by Kobalt.ioGeoff McDonald

11:10am PDT

Losing Context: A Deep Dive into MCP Session Security Track 4 - Room 1700 - Sponsored by Aikido SecuritySrikanth Ramu

11:40am PDT

Behind the CAPTCHA: Exposing ClickFix and FakeCaptcha Threats Track 5 - Room 1800Greg Leah Pragmatic Security to enable safety in the era of AI Track 2 - GRC Track - Room 1400/1410 - Sponsored by Iron Spear - Hosted by ISACAMichael Argast Self-Infected Prompt Kiddies: From Script Kiddies to Prompt Kiddies — AI-Powered Cybercrime in the Wild Track 1 - AI Track - Room 1900 - Sponsored by Kobalt.ioAli Alame Server Side Template Injections For Everyone Track 3 - AppSec Track - Room 1420/1430 - Sponsored by Google Cloud Security - Hosted by OWASPWesley Wineberg When the Plan Meets the Incident at Machine Speed: Adapting Police Major Case Management to Cyber Crisis Response Track 4 - Room 1700 - Sponsored by Aikido SecurityBrad Edwards

12:10pm PDT

sudo vibes : How AI Agents Got Root and Nobody Noticed Track 5 - Room 1800Jake King

1:30pm PDT

Confessing how to build authentic trust in the age of artificial expertise Track 2 - GRC Track - Room 1400/1410 - Sponsored by Iron Spear - Hosted by ISACANoris Buriac Evil AI vs. Open Source Linux: Zero competition in the realm of DNS exfiltration Track 1 - AI Track - Room 1900 - Sponsored by Kobalt.ioAlan Ilicic Threat Modeling Developer Behaviour: The Psychology of Bad Code Track 3 - AppSec Track - Room 1420/1430 - Sponsored by Google Cloud Security - Hosted by OWASPTanya Janca Trust No Schema: Finding the Truth in Raw SQLite Binary. Track 5 - Room 1800Marcelo Caiado

2:00pm PDT

Canada's First Cyber Security Case Track 2 - GRC Track - Room 1400/1410 - Sponsored by Iron Spear - Hosted by ISACACariad Heather Keigher

2:30pm PDT

Faces in the Fog: Identifying Users through Unconventional Means Track 3 - AppSec Track - Room 1420/1430 - Sponsored by Google Cloud Security - Hosted by OWASPJustin Larson • Seth Law Finding Public Files… That Were Never Meant to Be Public Track 4 - Room 1700 - Sponsored by Aikido SecurityIonatan Waisgluss Rebooting Resilience: Fixing Burnout Before It Crashes Your System Track 5 - Room 1800Nicole Che • Leah Liu When Reality Becomes Optional: AI Threat Modeling That Actually Works Track 1 - AI Track - Room 1900 - Sponsored by Kobalt.ioSebastian Finch • Oliver Stutz

3:00pm PDT

Why NIST Maturity Score May Mislead You (Is it budget well-spent to repeat your NIST assessment annually in the age of AI?) Track 2 - GRC Track - Room 1400/1410 - Sponsored by Iron Spear - Hosted by ISACAGolnaz Elahi

3:30pm PDT

Finding the AI Systems No One Approved Track 1 - AI Track - Room 1900 - Sponsored by Kobalt.ioGiuseppe Trovato How to get decades-long security in a consumer device: breaking locks and using the courts Track 2 - GRC Track - Room 1400/1410 - Sponsored by Iron Spear - Hosted by ISACADenver Gingerich Jailbreak the Jailbreaker: Autonomous AI Red Teaming Track 5 - Room 1800Mrigakshi Goel The Velocity Paradox: Why More Scanners Lead to Worse Outcomes Track 3 - AppSec Track - Room 1420/1430 - Sponsored by Google Cloud Security - Hosted by OWASPFrancis Ofungwu A Guide to AI Red Teaming in 2026: Why Traditional Pentest Assumptions Fail Track 4 - Room 1700 - Sponsored by Aikido SecurityJugal Lad

4:00pm PDT

Beyond Regex: Using LLMs to Add Context to DLP Track 1 - AI Track - Room 1900 - Sponsored by Kobalt.ioAlex Vazquez Follow the Engineer: Delivering Security Intelligence Over MCP Track 5 - Room 1800Ankit Kumar SameSite... Or Not? Exploring novel bypasses for SameSite cookie protections Track 3 - AppSec Track - Room 1420/1430 - Sponsored by Google Cloud Security - Hosted by OWASPVincent Dragnea When Trust Is Outsourced: Security in the Age of Third-Party Everything Track 2 - GRC Track - Room 1400/1410 - Sponsored by Iron Spear - Hosted by ISACAAnkan Garg

4:30pm PDT

Why Your Best Detection Tool Is Critical Thinking Track 5 - Room 1800Klaus Wunder Can LLMs Really Find IDORs? Limits of AI Security Reasoning Track 1 - AI Track - Room 1900 - Sponsored by Kobalt.ioVasilii Ermilov Identity and security lessons learned from securing AI in the cloud; Ten new frameworks for problems we solved twenty years ago Track 2 - GRC Track - Room 1400/1410 - Sponsored by Iron Spear - Hosted by ISACABrodie McRae The Heartbeat is Lying: Proving Physical Truth in a Spoofed OT Network Track 4 - Room 1700 - Sponsored by Aikido SecurityParisa Saqib Turning the dial on SAST: Reducing False Positives with Call Graph–Driven LLM Reasoning Track 3 - AppSec Track - Room 1420/1430 - Sponsored by Google Cloud Security - Hosted by OWASPVrushal Nedungadi • Iman Sharafaldin

5:00pm PDT

More Legit than Legit: The Threat of Crafted Impersonations Track 5 - Room 1800Brian Baskin