BSides312

@bsides312.org

Chicago, May 16, 2026 https://bsides312.org/

Friendly reminder: BSides312 physical patch badges are back. If you were there last year, you know how fast these went. Limited. Will not last. Arrive early or live with regret. Doors open 9:00 AM. May 16th. Chicago. bsides312.org

BSides312 2026 — Chicago's Security BSides Hacking Conference | May 16

BSides312 is Chicago's Security BSides event — a non-profit hacker & cybersecurity conference in Chicago, IL. May 16, 2026 at the Irish American Heritage Center.

bsides312.org

Your phishing program has great metrics but your employees are still clicking. Mr. Sprawl is sharing a blueprint that took a startup from a 40% click rate to under 10% in a year. May 16th Chicago → bsides312.org

Bild

How many people in infosec are doing senior-level work with a mid-level title and mid-level pay? Admford would like to have a word. You did the work. Now come get the title. May 16th. Chicago. → bsides312.org

Bild

"Just use Signal" is not a threat model. HelpMeRob is breaking down the security assumptions, risk trade-offs, and blind spots that put orgs at risk even when they're using the "right" tools. The encryption isn't the weak link. The assumptions are. May 16th. Chicago. → bsides312.org

Bild

Your last pen test was outdated before the report was even delivered. At BSides312, Paul Petefish is calling it like it is with "Penetration Testing Is Busted" and introducing the Continuous Penetration Testing Methodology (CPTM). May 16th. Chicago. bsides312.org

Bild

The scariest thing in your AD isn't what you can see, it's the permissions you thought you removed. Kyprianos & Nikos are uncovering how misconfigs, recycled accounts, and residual ownership create hidden escalation paths. Find and remediate them before attackers do. 5/16/26 Chicago bsides312.org

BildBild

A single malicious link can turn your AI agent into your biggest insider threat. At BSides312, Martin Voelk is live-demoing how AI agents get weaponized through prompt injection and link unfurling to silently exfiltrate data. No user interaction required. May 16th. Chicago. bsides312.org

Bild

We stopped naming our servers, then started naming our AI agents. See the problem? At BSides312 mcdwayne is digging into how AI agents are breaking the way we think about identity, authentication, and delegation. If your org is deploying agents, you need to be here. May 16th. Chicago bsides312.org

Bild

🎉 BSides312 GIVEAWAY #2 We're less than three weeks & somewhere out there, your friend still doesn't have a ticket. Tag someone who should be at BSides312 and tell us why they need to be there. Best answer wins them a free ticket. Winner announced next week. bsides312.org

Bild

🎉 BSides312 GIVEAWAY #1 WINNER Congrats to Uljana who shared their hacker con journey across BSides Tirana, BSides Athens, CypherCon, and BSides Puerto Rico. Lowkey MVP material. She already has a ticket. So she's giving hers away, follow Uljana on LinkedIn for details on how to win. bsides312.org

Bild