Kang Ali's Black Hat Arsenal tool "DursGo" is published.

DursGo - is Web App scanner written in Go and has embedded LLM inside it.

Go watch the talk!

https://www.youtube.com/watch?v=p5aAzK9WnG0

#cybersecurity #blackhat #blackhatarsenal #dursGo #indonesia

@[email protected] @[email protected]

Howdy folks! We are excited to announce the Call For Presentations(CFP) for @bsidestc 2026!
This year’s conference theme is “Building Resilience“.

We would love to hear your submissions of how you or people in your community have been “building resilience”.

Submissions will be open until July 19th 2026 23:59 CDT (UTC -5)

Key Dates:
• CFP Opens: April 20th
• CFP Closes: July 19th
• Acceptances: Week of August 3rd (rolling basis)

https://bsidestc.org/call-for-proposals/

#bsides #twincities #infosec #cybersecurity #hacking #Minneapolis #stpaul #security #securityconference #defcon #blackhat

THREAT MODEL: CYBERSECURITY 🧑‍💻
for Apr. 28th, 2026
by independent journalist @violetblue

- #SANS trains #ICE now

- How the US government evades data laws

- #SamAltman apologizes for more #AI deaths

- @lawfare argues that AI companies should have a duty to inform/protect (like therapists)

- Claude AI deleted a whole company and said it knew what it did was wrong

- More revenge #Microsoft 0-days are in the wild now

- KitKat releases a Faraday cage

- Violet's debrief after #BlackHat Asia 2026

...and much more.

✨THREAT MODEL is free to read -- please help keep it accessible to all by becoming a patron, even $1 a month makes a difference!✨

https://www.patreon.com/posts/cybersecurity-28-156746057

#ThreatModel #ThreatModelCybersecurity #ThreatModelNewsletters #VioletBlue #infosec #cybersec #CovidIsNotOver

#BlackHat #LLMs 🔥

https://www.youtube.com/watch?v=1sd26pWhfmg

So many Vegas visits, still so few for fun

Landing at Dulles Wednesday evening closed out my 45th work trip to Las Vegas. That number alone is not something to take pride in and probably constitutes evidence of some character defect, but what’s even more disturbing is that since my first trip to Vegas in 1998–for CES, of course–I have still only been there three times for fun.

This lifestyle long ago rendered me incapable of dealing with that city however normal people do. Instead, having the event formerly known as the Consumer Electronics Show dominate my experience of Vegas–I’m now at 28 trips there just for the Consumer Technology Association’s convention, still one of the most important events on my work calendar–keeps subjecting me to the place at its most expensive and least efficient.

Even smaller-scale conferences like Black Hat (with six trips so far, it’s become about as essential as CES but easier to monetize) and the NAB Show (where I moderated a panel this week, with the National Association of Broadcasters covering airfare and lodging) leave me happier to take off from LAS than to land there.

It’s not that I can’t enjoy a little time in the glitziest corner of Nevada. You can eat exceedingly well there, and Vegas service-industry folks are some of the best in the world. Blackjack can be fun, as long as you remember that you should at least try to lose slowly.

If you drive far enough off the Strip, you can see some striking natural scenery. It took CES to remind me of that last bit, in the form of an outing in 2025 to Lake Mead to experience an electric sport boat.

And there is some exceptional lodging in Vegas, although I’ve also stayed at some of the crummier ones. I started trying to inventory the hotels I’ve stayed at from the Strip up to the convention center (thus excluding off-strip properties like the Palms and a few places in downtown Las Vegas as well as two Airbnbs) and quickly realized they exceed the number of ballparks I’ve visited.

From south to north: Mandalay Bay, Luxor, Excalibur, New York New York, MGM Grand, Monte Carlo (today Park MGM), Cosmopolitan, Hilton Grand Vacations, Bally’s (now the Horseshoe), Aladdin (now Planet Hollywood), Palms, Flamingo, Westin, Imperial Palace (the worst among the lot, fortunately now the Linq), Harrah’s, Mirage (demolished, being replaced by a Hard Rock Hotel in the shape of a guitar), Treasure Island, Wynn, Renaissance, Westgate, Fontainebleau (I’d rank that the best). 

But however nice the hotel may have been, there’s no getting around how much I dislike the auto-centric, pedestrian-hostile nature of the streets outside. Unless you can start and end a conference commute on the monorail–this week’s trip, unlike most, allowed that–you will sit in traffic.

The only improvements to Vegas transportation since 1998 have been on the margins: the monorail, Uber and Lyft liberating visitors from taxis that charge $3 extra for credit-card payment, the Vegas Loop’s tunnels, and the advent of autonomous vehicles from Zoox and, soon, Waymo.

Even walking up and down the Strip is less efficient than it should be once you enter a building, since casino floors are where readable layouts and clear signage go to die.

I grew up someplace where you had to drive everywhere; I never want to live like that again and don’t enjoy visiting places that seem intent on making that a perpetual default. I am much happier to have my travel destination be a more human-scaled city where it’s normal and enjoyable to get around by walking and transit; the contrast between CES in Vegas and MWC in Barcelona is glaring and entirely in Spain’s favor.

I think of that every time one industry-analyst friend who moved from the Bay Area to a Vegas suburb tries to sell me on the same move. My response is always some version of “there is nothing you could say to make me ever want to do that.”

And yet work keeps pulling me to Vegas anyway. This week’s trip was my third this year, with one more planned, and I already know next year will feature at least three. I should probably seek treatment for this condition at some point.

I am here today.

#infosec #blackhat