Feed
-
Excited to announce our latest Gold Sponsor for BSides Buffalo 2026, first-time sponsors Sekoia.io! Sekoia helps to elevate your security operations with the industry-leading AI SOC platform that provides an unparalleled understanding of your environment and exclusive threat intelligence, to co-pilot your team’s journey from detection to response. We couldn’t run this event without the support of our sponsors, so thanks so much for making it possible and helping us to build up the local technol...
-
Closing out the 2pm slot in Track Three, we've got Ian Litschko presenting "Four Years at War: Trends in Russian State Nexus Cyber Operations". "After four years of war, Russia's cyber-enabled operations have adapted, representing one of a few countries that now have directly applied cyber capabilities in a state vs state conflict. This talk will explore notable trends across Russia's cyber-enabled capabilities, including introducing a novel ad...
-
At 3pm in Track One, we've got Kelsey O'Connell presenting "It Wasn’t Spoofed: Investigating Authenticated Email Abuse in Real Environments". "A suspicious email spreading internally was initially attributed to spoofing after a user reported a message sent from their account that they had not sent. However, analysis revealed the message originated from within the organization. Authentication had succeeded, the message was treated as internal, and no a...
-
Closing out our Introsec track at 3pm is Jerrad Bartczak, MBA, CISSP, CISA, CCSFP, CHQP, presenting "What Is IT Audit: What IT Auditors Do and Why It Matters". "The function of an IT auditor is often misunderstood in the greater cybersecurity and GRC landscape. This session cuts through the confusion and provides a clear, accessible overview of what IT auditors actually do, why the discipline exists, and how it fits into the broader governance, risk, and compliance la...
-
Closing out Track Three is Hemanth Gorijala, presenting "Secrets That Survive Everything: Finding Runtime Credentials in Production Web Applications". "A bug bounty researcher found Azure credentials in a JavaScript file and called it done. I kept going — four Azure AD credentials sitting in a public JS file, enough to authenticate as the application itself. The frontend had documented its own backend. Full account takeover. The application's token had been gr...
-
Kicking off the 4pm hour in the atrium, we have a panel session with Catherine Ullman and Qasim Ijaz discussing "Hacker Mindset, Defender Mission". "Whether you're building a SOC, developing detection capabilities, hiring a pentest firm, or training analysts, understanding how attackers think changes everything from the questions you ask to the gaps you find. In this panel we discuss how offensive awareness strengthens defensive operations from the inside ou...
-
Our first Lightning Talk of the day will be in Track One at 4pm, Christopher Bruns presenting "Mapping Internal Networks - The Art of Finding Things". "As a Pentester, the discovery process is one of the most important steps to get right. With timed engagements, quick and efficient discovery processes are a must to produce meaningful results for customers. This session will talk about the art of internal network enumeration. How to find networks. How to find assets wi...
-
Our second 4pm Lightning Talk is Billy Gibson and Ryan Conry presenting "Bad Apples: Orchestrating Movement and Execution via Native macOS Protocols". "As macOS adoption accelerates—with over 45% of enterprises now utilizing the platform—Mac endpoints have become high-value targets for attackers seeking cloud credentials, source code, and privileged access. Despite this trend, macOS lateral movement remains a significant blind spot; the MITRE ATT&CK framework...
-
Our final talk of the day in Track One will be the Lightning Talk "Still Cracking: WPA2 Prevalence and Password Weakness in 2026" by Dimitri Weaver. "In 2021, a CyberArk researcher collected 5,000 network hashes across Tel Aviv using $50 in equipment and cracked over 70% of them via the clientless PMKID attack technique. Five years later, this talk revisits that methodology — this time closer to home. This session presents the results of a real-world WPA2 survey cond...
-
Our final Lightning Talk of the day will be Sai Jagadeesh presenting "Deep Link Vulnerabilities: When One Click Leads to Account Takeover". "Deep links are widely used in mobile applications to provide seamless navigation to specific screens inside an app. However, when deep links are improperly validated, they can become powerful attack vectors that allow external inputs to directly influence internal application behavior. This lightning talk explores how seemingly...
-
After closing remarks tomorrow, join the local hacker community at Bit Haven in the Tri Main Building (2495 Main Street) for the official BSides Buffalo after party! Music, food, drinks, and a chance to hang out and meet your peers and talk about all the cool stuff you learned. Hope to see you there!
-
PARKING INFORMATION FOR TOMORROW The conference will be held in Science Hall, at the corner of Main Street and Jefferson Avenue (N on the map below). There is parking available at either end of the building, in the lots labelled 14 and 15, or street parking on Main Street in front of the building. If those are full, there's also spots in the athletic lots on the other side of Delavan (16 and 18 on the map).
-
Things to bring to BSides Buffalo tomorrow: * Coming to the Career Village? Bring a copy of your resume. * Playing the CTF? Bring your laptop. * Stickers to trade or share? Bring them for the table. * Lockpicking or soldering challenges? Bring them for help. See you all in the morning!
-
Tomorrow.
-
Our fifth annual event: 332 tickets sold, 23 talks across three tracks, a CTF, and lockpick/soldering/career villages that were bustling all day. Thank you so much to the sponsors, the speakers, the volunteers, and the attendees for making this the biggest and best BSides Buffalo yet. We couldn't have done it without each and every one of you, and we're coming back even bigger and better in 2027. See you next June!
-
Feeling those post-conference blues after such an awesome day yesterday? We get it. You know what might help? Make plans to join the Buffalo hacker community for tacos in Delaware Park next month! Hope to see you there! https://www.meetup.com/infosec-716/events/314249812/
-
Yeah we are! https://www.youtube.com/watch?v=lvdc4iE8OHU
-
This reboot of 8 Mile looks terrible. 😄
-
Happy Monday, all! The videos from this year's BSides Buffalo have been posted to our YouTube channel, along with all the videos from past events. Check them out and share! And thanks once again to our fantastic speakers, thanks so much for sharing your knowledge with the community. https://www.youtube.com/@bsidesbuffalo
-
#nsfw #nude #nudity #naked #nudes #boobs #tits #titties #natural #naturalboobs #thighs #thickthighs #beautiful #beauty #sexy #pretty #hot #artmet #spicy #cute More at MetArt Check this @porncollector@xscape.zclan.cc for more 18+ adult content
-
#nsfw #nude #nudity #naked #nudes #boobs #tits #titties #natural #naturalboobs #thighs #thickthighs #beautiful #beauty #sexy #pretty #hot #sphynxmv #spicy #cute #slimthick #amateur #amateurporn Check this @porncollector@xscape.zclan.cc for more 18+ adult content
-
Heading home after a long day. My feet are tired, but my heart is full knowing I can provide for my family tonight. Resting up to do it again tomorrow with a smile. Good morning to the world! 🌙✨ #streetvendor #familyfirst #gratitude #keepgoing
-
Serving my first customers! 🍢 Yesterday was tiring, but seeing people enjoy my "Cilok" makes it all worth it for my family. If you'd like to support my daily hustle, there’s a link in my bio. Just a $1 tip helps secure tomorrow's ingredients. 🙏✨ #streetvendor #streetfood #familyfirst #gratitude
-
Alhamdulillah, almost done! 🍢 Around $7 left in my pot. Each piece is only $0.03. If anyone wants to buy the rest via the link in my bio, I will give them all away for FREE to people in need on the street tonight. Let’s share the love! Thank you❤️🙏 #streetvendor #payitforward #kindness #gratitude
-
Steam is up, cart is ready! 🍢 Don't forget to grab some breakfast today, everyone! Running this small business alone is tough, but I keep pushing. Please follow my daily journey, your kind support means the world to me. Thank you! ✨🙏 #streetfood #morningvibes #hustle #keepgoing