Putting on an annual conference takes a village and it definitely takes the backing of vendors who genuinely care about the infosec community. We would like to extend our deepest gratitude to our Tier 1 sponsors for stepping up to power #BSidesBoulder26:

🔹 Rule4 – A phenomenal team of cybersecurity and emerging technology consultants who step up to support our local community year after year.

🔹 Sythe Labs – Providing a privacy-preserving, multi-agent security platform that brings unified automation and context to modern teams.

🔹 Scanner – Delivering a radically different way to index and search petabytes of log data directly in S3 for real-time detections.

We are immensely grateful for your support in bringing the Colorado security community together! Stop by on June 13th to chat with their teams and grab your tickets before they're gone:

📅 View the Agenda: https://bsidesboulder.org/sessions/

🎟️ Grab Your Tickets: https://www.eventbrite.com/e/bsides-boulder-2026-tickets-1985483738309

#BSidesBoulder #BSides #Cybersecurity #CommunityFirst #Infosec

The #BSidesBoulder26 schedule is now live! Check out what Sudo has cooked up for this year at https://bsidesboulder.org/schedule/

Tickets are available for purchase at https://www.eventbrite.com/e/bsides-boulder-2026-tickets-1985483738309

#13June #AnnualEvent #Cybersecurity #BSides #BSidesBoulder

Got a great cybersecurity talk you want to present? #BSidesBoulder26 Call For Papers (CFP) is open!

This year, we are changing things a bit...accepting full track talks (50min) and half-track talks (25min), so bring us your war stories, insights, and novel ideas!

We're looking forward to your submissions in our Sessionize instance. The submission link is available in the comments.

#BSides #BSidesBoulder #Cyber #CyberSecurity #Boulder #InfoSec

https://sessionize.com/bsides-boulder-2026/

💙 Can you believe it’s already been a week since #BSidesBoulder25? We had an absolute blast and hope you did too! From experimenting with NFC badges, lock picking, and sticker swaps, to welcoming #MentalHealthHackers and @Cyversity Denver into the fold — we tried a few new things this year and you helped us raise the bar. With 200 tickets sold (up 50 from last year!), this was our biggest #BSidesBoulder yet. Huge thanks to everyone who came out, especially our friends from BSides Colorado Springs and BSides Denver for showing up and showing love. 💙

We're also proud to share that through our partnership with Boulder Food Rescue, we were able to provide ~50 meals to those in need. 🙌

Help us make next year even better by filling out the feedback form before 30 June: https://forms.gle/n1RgEN8G6NU9nSceA. Two folks will be randomly selected for a small thank-you prize. Don’t miss your chance to help shape the future of BSidesBoulder!🎁

A huge shout out again for our most excellent speakers and workshop hosts. You guys rock! Wendy Nather Andrew Brandt Anthony Galiette Ariel R.. Eric Harashevsky Gil Garcia Jibby Saetang
Nathan M. Natalie Somersall Ryan Thompson @yash Thapliyal John Doyle

Two days until #BSidesBoulder25 and only 15 tickets remain! Today we highlight, two #BSidesBoulder25 talks: Andrew Brandt's "Smashing Smishing by Quashing Quishing" and Eric Harashevsky's "Firmware Readout Bypass in STM92 (Don't put this in an alarm control panel).

Andrew's talk will examine QR-based phishing attacks, how attackers are exploiting QR codes and SMS to steal credentials and MFA tokens, and how a cross-industry collaboration between mobile vendors, telcos, and the infosec community could finally slam the door on mobile phishing. Think SafeBrowsing, but for QR scans! And we promise that our BSidesBoulder event QR codes will not redirect you to an Andrew-controlled C2 server.

Eric's talk will explore his adventure tinkering with an old STM92's firmware - the talk will explore his findings, reverse engineering the legacy microcontroller, bypassing firmware protections, and what that means for devices still hanging on your wall! Expect a live demo that is sure to excite your future hardware hacking journey.

#BSides #BSidesBoulder #CyberSecurity #Quishing #Smishing #MobileSecurity #PhishingDefense #HardwareHacking #FirmwareSecurity

Check out our full schedule at https://bsidesboulder.org/schedule/

Tickets are available for purchase for our 13 June event here: https://www.eventbrite.com/e/bsides-boulder-2025-registration-1290129274389

We are just days away from our annual #BSidesBoulder event on 13 June and just about 40 tickets are left. Today, we're highlighting an application of AI talk.

⚔️💥 AI is building websites faster than ever — but who's checking the locks? Unlock your potential with Yash Thapliyal's #BSidesBoulder25 talk "Taking Down Websites as Fast as They're Made: Common Vulnerabilities in AI-Generated Sites" that will provide a live, fast-paced walkthrough of how platforms like Wix, Durable, and Cursor Agent are unintentionally publishing XSS, SQLi, and other vulnerabilities by default. Yash will generate a site live with the audience, then hack it! Learn how to spot the cracks, secure your builds, and stay ahead of the script kiddies. 💥⚔️

#BSides #BSidesBoulder #RedTeam #AI #WebSec #AppSec

Check out our full schedule at https://bsidesboulder.org/schedule/

Tickets are available for purchase for our 13 June event here: https://www.eventbrite.com/e/bsides-boulder-2025-registration-1290129274389