Talks – Blue Team Con 2025

Every year, Blue Team Con works with industry Blue Team Cybersecurity leaders to bring attendees relevant, poignant, and educational talks. Designed to address the cybersecurity challenges of today and tomorrow, our talk tracks will help you expand your mind, improve your skills, and help protect the assets that you and your company care about the most. Check out our 2025 talks below, click to learn more about will be discussed, and see an overview of the presentation.

.e”X”es and “O”auths (They Haunt Me): An In-Depth Analysis of OAuth & OIDC Misconfigurations and Token Replay Attack
50-Minute Talk, Intermediate|
Presented by Darryl G. Baker
Read abstract
“SkyScalpel: Making & Breaking &#123“Policy”: “Obfu0075scA**Tion”&#125 in the Cloud” with Abian Morina
50-Minute Talk, Intermediate|
Presented by Abian Morina
Read abstract
A New Era of Brute Forcing in Active Directory
25-Minute Talk, Intermediate|
Presented by David Horak
Read abstract
Adaptive Risk-Tiered Framework for Responsible AI Governance
25-Minute Talk, Foundational|
Presented by Sky Bell
Read abstract
Advancing from Individual Contributor to Cybersecurity Leader
25-Minute Talk, Intermediate|
Presented by Kevin Bong
Read abstract
Adventures in the Underland: Uncommon Hacker’s Persistence Methods and Countermeasures
25-Minute Talk, Intermediate|
Presented by Paula Januszkiewicz
Read abstract
Agents of Change: Practical Adoption Framework for Agentic AI in Security Operations
25-Minute Talk, Intermediate|
Presented by Ryan Rowclifffe
Read abstract
AI as the SOC Sidekick: Streamlining Security Without Stepping Over Humans
25-Minute Talk, Intermediate|
Presented by Cliff Crosland
Read abstract
AI-Powered Cloud Security: Defending Cloud Workloads from Next-Gen Cyber Threats
25-Minute Talk, Intermediate|
Presented by Advait Patel
Read abstract
Analysis without Paralysis: Mastering the Art of Investigation
50-Minute Talk, Foundational|
Presented by Terryn Valikodath
Read abstract
Beyond the SLA: Measuring What Truly Matters
25-Minute Talk, Intermediate|
Presented by Swati Babbar and Kashif Memon
Read abstract
Breaking the CI/CD Chain: Security Risks in GitHub Actions
50-Minute Talk, Intermediate|
Presented by Alexey Shchukarev
Read abstract
Building a Threat Hunting Program from the Ground Up
25-Minute Talk, Foundational|
Presented by Ryan Fried and Estefania Michael
Read abstract
Business Logic Flaws: How to Prevent Them in Your Web Apps
25-Minute Talk, Intermediate|
Presented by Antoine Carossio
Read abstract
Can opposites attract? Domain Admins – meet Red Tenant
50-Minute Talk, Intermediate|
Presented by Eric Woodruff and Jake Hildreth
Read abstract
Crypto Agility Lifecycle: A backbone of a Resilient System
25-Minute Talk, Intermediate|
Presented by Sandip Dholakia
Read abstract
Cultural Due Diligence: Hard Won Lessons from My Job Hunt
50-Minute Talk, Foundational|
Presented by Munish Walther-Puri
Read abstract
Decoding Dyslexia: Thriving in Cybersecurity with a Different Brain
25-Minute Talk, Foundational|
Presented by Caleb Grossnickle
Read abstract
Detection Opportunities for Countering Remote Employment Fraud: A Phase-based Strategy
25-Minute Talk, Intermediate|
Presented by Alex Orleans and Jonathan Heckinger
Read abstract
DFIR-as-Code: Scaling Incident Response Beyond Human Limits
25-Minute Talk, Intermediate|
Presented by Justin Borland
Read abstract
Did I Do Thaaat? How not to “whoopsie” production away, a humanist risk-management-based approach.
25-Minute Talk, Foundational|
Presented by Daniel (Bogo) Bogomolny
Read abstract
Ensuring Data Integrity in Incident Response: Tools and Techniques for Forensically Sound Log Extraction
50-Minute Talk, Intermediate|
Presented by Colin Meek
Read abstract
Firewalls and Fire Alarms: What to Do When Your Best Defenses Go Up in Smoke
50-Minute Talk, Foundational|
Presented by Dr. Catherine J. Ullman
Read abstract
Flipping the Script: Threat Intelligence Mining of Ransomware Chat Leaks
25-Minute Talk, Intermediate|
Presented by Mark Reibel
Read abstract
Forged in Fire: Building Elite Cybersecurity Teams with a Warrior’s Mindset
25-Minute Talk, Intermediate|
Presented by Chris Reider
Read abstract
Foundations of Resilience: Mastering the Business Impact Analysis
25-Minute Talk, Foundational|
Presented by Jeremy Croghan
Read abstract
From Alerts to Action – LLMs for Explainability, Entity Analysis, and Escalation
25-Minute Talk, Advanced|
Presented by Scott Rodgers and Kevin Gonzalez
Read abstract
Going Beyond Box Checking with Annual Pentests
25-Minute Talk, Intermediate|
Presented by Sean "4dw@r3" Juroviesky
Read abstract
Hidden Dangers Of AI In Developer Workflows: Navigating Security Risks with Human Insight
25-Minute Talk, Foundational|
Presented by Dwayne McDaniel
Read abstract
How Attackers are using AI and how to defend against them, by an incident responder turned AI researcher.
25-Minute Talk, Intermediate|
Presented by Eyal Fisher
Read abstract
Hunting Path Traversal in Open Source
25-Minute Talk, Intermediate|
Presented by Nishant Jain
Read abstract
Inboxfuscation: 𝓞ut-of-the-Box Mailbox 𝓞bf{\u}scation – Turning BEC into Business Email Chaos
50-Minute Talk, Advanced|
Presented by Andi Ahmeti
Read abstract
Introducing a password manager and policy
25-Minute Talk, Foundational|
Presented by L
Read abstract
Introducing QELP: Parsing ESXi Logs for Incident Response
25-Minute Talk, Foundational|
Presented by Partha Alwar, and Mitchell Green
Read abstract
Leading Multi-Generational Cybersecurity Teams with Transparency, Candor, and Empathy
50-Minute Talk, Intermediate|
Presented by Mike Glatz
Read abstract
Lies, Lures, and LLMs; Augmenting Cyber Deception with AI
25-Minute Talk, Intermediate|
Presented by Dylan Shroll
Read abstract
LLM-Powered Vulnerability Management Operations: Use Cases and Success Stories
25-Minute Talk, Intermediate|
Presented by Cong Zheng and Darcy Meyer
Read abstract
Maturing your cyber deception program: What’s the plan?
25-Minute Talk, Foundational|
Presented by Suril Desai
Read abstract
My Cyber Sense Is Tingling! Detection Engineering With Free Tools
50-Minute Talk, Intermediate|
Presented by Matthew Gracie
Read abstract
Prescription for Security: Hardening Healthcare Email Against Advanced Threats
25-Minute Talk, Foundational|
Presented by Akash Parasumanna Sridhar
Read abstract
Ransomware Rampage: Gamifying Your Incident Response Playbook
50-Minute Talk, Foundational|
Presented by Anushree Vaidya
Read abstract
Securing Sideways: Thwarting Lateral Movement, with no extra software!
25-Minute Talk, Intermediate|
Presented by R. Tyler Schroder
Read abstract
Solving Secrets Sprawl Takes More Than Security: Why Machine Identity Is Everyone’s Problem
25-Minute Talk, Intermediate|
Presented by Dwayne McDaniel
Read abstract
Technical Writers: Your Cybersecurity Secret Weapon
25-Minute Talk, Foundational|
Presented by Jennifer Miller
Read abstract
The Cost of an Incident
25-Minute Talk, Intermediate|
Presented by Amanda Draeger
Read abstract
The Death and Rebirth of Vulnerability Management
25-Minute Talk, Intermediate|
Presented by HD Moore
Read abstract
The False Sense of Security: Defense Becoming a Vulnerability
25-Minute Talk, Intermediate|
Presented by Nathan Eades
Read abstract
Things didn’t go as planned… because you didn’t have a plan
25-Minute Talk, Foundational|
Presented by 0DDJ0BB
Read abstract
Threat hunting in the browser
50-Minute Talk, Intermediate|
Presented by Luke Jennings
Read abstract
Transforming Cyber Risk Assessments Through Continuous Validation
50-Minute Talk, Intermediate|
Presented by Irina Loktionova and Chris Oshaben
Read abstract
UNFAIR after all; Critical considerations for risk management frameworks
50-Minute Talk, Intermediate|
Presented by Jack Burgess
Read abstract
Unseen but Not Unheard: Exposing the Cases of CSS Abuse in Email Threats and Fortifying Defenses
50-Minute Talk, Advanced|
Presented by Omid Mirzaei
Read abstract
What Now? Navigating the Transition from Engineer to Manager
25-Minute Talk, Foundational|
Presented by Cory Roop
Read abstract
Which Witch is Which – Navigating the Complicated World of Threat Actor Taxonomy
25-Minute Talk, Intermediate|
Presented by Jeffrey Bell
Read abstract
Why Your Email Matters
25-Minute Talk, Foundational|
Presented by BitsDanceForMe
Read abstract
You Need a Jay-z and a Beyoncé: How Sponsors and Mentors Can Supercharge Your Career in Cybersecurity
50-Minute Talk, Foundational|
Presented by Anthony Hendricks
Read abstract