← Feed

Posts

• View post

  Excited to announce our latest Gold Sponsor for BSides Buffalo 2026, first-time sponsors Sekoia.io! Sekoia helps to elevate your security operations with the industry-leading AI SOC platform that provides an unparalleled understanding of your environment and exclusive threat intelligence, to co-pilot your team’s journey from detection to response. We couldn’t run this event without the support of our sponsors, so thanks so much for making it possible and helping us to build up the local technol...

• View post

  Closing out the 2pm slot in Track Three, we've got Ian Litschko presenting "Four Years at War: Trends in Russian State Nexus Cyber Operations". "After four years of war, Russia's cyber-enabled operations have adapted, representing one of a few countries that now have directly applied cyber capabilities in a state vs state conflict. This talk will explore notable trends across Russia's cyber-enabled capabilities, including introducing a novel ad...

• View post

  At 3pm in Track One, we've got Kelsey O'Connell presenting "It Wasn’t Spoofed: Investigating Authenticated Email Abuse in Real Environments". "A suspicious email spreading internally was initially attributed to spoofing after a user reported a message sent from their account that they had not sent. However, analysis revealed the message originated from within the organization. Authentication had succeeded, the message was treated as internal, and no a...

• View post

  Closing out our Introsec track at 3pm is Jerrad Bartczak, MBA, CISSP, CISA, CCSFP, CHQP, presenting "What Is IT Audit: What IT Auditors Do and Why It Matters". "The function of an IT auditor is often misunderstood in the greater cybersecurity and GRC landscape. This session cuts through the confusion and provides a clear, accessible overview of what IT auditors actually do, why the discipline exists, and how it fits into the broader governance, risk, and compliance la...

• View post

  Closing out Track Three is Hemanth Gorijala, presenting "Secrets That Survive Everything: Finding Runtime Credentials in Production Web Applications". "A bug bounty researcher found Azure credentials in a JavaScript file and called it done. I kept going — four Azure AD credentials sitting in a public JS file, enough to authenticate as the application itself. The frontend had documented its own backend. Full account takeover. The application's token had been gr...

• View post

  Kicking off the 4pm hour in the atrium, we have a panel session with Catherine Ullman and Qasim Ijaz discussing "Hacker Mindset, Defender Mission". "Whether you're building a SOC, developing detection capabilities, hiring a pentest firm, or training analysts, understanding how attackers think changes everything from the questions you ask to the gaps you find. In this panel we discuss how offensive awareness strengthens defensive operations from the inside ou...

• View post

  Our first Lightning Talk of the day will be in Track One at 4pm, Christopher Bruns presenting "Mapping Internal Networks - The Art of Finding Things". "As a Pentester, the discovery process is one of the most important steps to get right. With timed engagements, quick and efficient discovery processes are a must to produce meaningful results for customers. This session will talk about the art of internal network enumeration. How to find networks. How to find assets wi...

• View post

  Our second 4pm Lightning Talk is Billy Gibson and Ryan Conry presenting "Bad Apples: Orchestrating Movement and Execution via Native macOS Protocols". "As macOS adoption accelerates—with over 45% of enterprises now utilizing the platform—Mac endpoints have become high-value targets for attackers seeking cloud credentials, source code, and privileged access. Despite this trend, macOS lateral movement remains a significant blind spot; the MITRE ATT&CK framework...

• View post

  Our final talk of the day in Track One will be the Lightning Talk "Still Cracking: WPA2 Prevalence and Password Weakness in 2026" by Dimitri Weaver. "In 2021, a CyberArk researcher collected 5,000 network hashes across Tel Aviv using $50 in equipment and cracked over 70% of them via the clientless PMKID attack technique. Five years later, this talk revisits that methodology — this time closer to home. This session presents the results of a real-world WPA2 survey cond...

• View post

  Our final Lightning Talk of the day will be Sai Jagadeesh presenting "Deep Link Vulnerabilities: When One Click Leads to Account Takeover". "Deep links are widely used in mobile applications to provide seamless navigation to specific screens inside an app. However, when deep links are improperly validated, they can become powerful attack vectors that allow external inputs to directly influence internal application behavior. This lightning talk explores how seemingly...

• View post

  After closing remarks tomorrow, join the local hacker community at Bit Haven in the Tri Main Building (2495 Main Street) for the official BSides Buffalo after party! Music, food, drinks, and a chance to hang out and meet your peers and talk about all the cool stuff you learned. Hope to see you there!

• View post

  PARKING INFORMATION FOR TOMORROW The conference will be held in Science Hall, at the corner of Main Street and Jefferson Avenue (N on the map below). There is parking available at either end of the building, in the lots labelled 14 and 15, or street parking on Main Street in front of the building. If those are full, there's also spots in the athletic lots on the other side of Delavan (16 and 18 on the map).

• View post

  Things to bring to BSides Buffalo tomorrow: * Coming to the Career Village? Bring a copy of your resume. * Playing the CTF? Bring your laptop. * Stickers to trade or share? Bring them for the table. * Lockpicking or soldering challenges? Bring them for help. See you all in the morning!

• View post

  Tomorrow.

• View post

  Our fifth annual event: 332 tickets sold, 23 talks across three tracks, a CTF, and lockpick/soldering/career villages that were bustling all day. Thank you so much to the sponsors, the speakers, the volunteers, and the attendees for making this the biggest and best BSides Buffalo yet. We couldn't have done it without each and every one of you, and we're coming back even bigger and better in 2027. See you next June!

• View post

  Feeling those post-conference blues after such an awesome day yesterday? We get it. You know what might help? Make plans to join the Buffalo hacker community for tacos in Delaware Park next month! Hope to see you there! https://www.meetup.com/infosec-716/events/314249812/

• View post

  Yeah we are! https://www.youtube.com/watch?v=lvdc4iE8OHU

• View post

  This reboot of 8 Mile looks terrible. 😄

• View post

  Happy Monday, all! The videos from this year's BSides Buffalo have been posted to our YouTube channel, along with all the videos from past events. Check them out and share! And thanks once again to our fantastic speakers, thanks so much for sharing your knowledge with the community. https://www.youtube.com/@bsidesbuffalo

• View post

  Welcome to July, all! As is tradition, this month's Infosec 716 meetup will be a taco picnic in Delaware Park. All are welcome, but please RSVP so we've got a good headcount and know how many tacos to bring. Feel free to share, and see you there! https://www.meetup.com/infosec-716/events/314249812/