2025
Como romper el Content-Security-Policy
Ruben Piña
appseccspxssweb security
Archive
Resources
The BSides CDMX talk archive. Search by title, speaker, topic or edition.
Edition
Topics
34 resources
2025
A Data-Driven Approach to Cyber Risk Reduction
Lenin AlevskiEN
risk managementdatametricssecurity program
2025
Deepfake It 'Til You Make It: Social Engineering With AI
Brett GustafsonEN
deepfakesocial engineeringaivishing
2025
Del CVE al CEO: Cómo hacer que la Alta Dirección escuche a los Hackers
Rafael Murillo
leadershipcommunicationrisk managementcareer
2025
Dependencias y seguridad: ¿Dónde está el riesgo?
Eryx
supply chaindependenciesappsecopen source
2025
Revisando las campañas de Fake Captcha actuales que despliegan malware
Hugo Francisco González Robledo
malwaresocial engineeringfake captchathreat intelligence
2025
The end is near!: Defeating the adversary/company with GenAI
Jozic Manuel Espinoza RiveraEN
genaiaired teamautomation
2025
Inside Google's Discovery & Remediation of a Critical CPU Vulnerability
Yousif HussinEN
hardwarecpuvulnerability researchgoogle
2025
Hacking the Final Frontier: Offensive Security in Aerospace and Satellite Systems
Romel MarinEN
aerospacesatellitehardwareoffensive security
2025
Jackpotting Reloaded: Escaping the Kiosk Like Neo from the Matrix
Jesus DominguezEN
atmkioskphysical securityescape
2025
Keynote: Apuntes de Google sobre Threat Detection
Pedro Gonzalez
threat detectiongooglekeynotedetection engineering
2025
Looking Back, Containing Chaos: Lessons from Real-World Intrusions
Abdel BolivarEN
incident responseintrusionslessons learneddfir
2025
La Alianza de la IA: Defendiendo la Galaxia Digital con MITRE Atlas
Gustavo Gomez
ai securitymitre atlasllmmachine learning
2025
No CVE, No Problem: Uncovering Hidden Attack Paths in Active Directory
Gerardo MejiaEN
active directoryred teamprivilege escalationwindows
2025
There and Back Again: Discovering OT devices across protocol gateways
Rob KingEN
oticsprotocol gatewayasset discovery
2025
Thermostats Gone Wild: Gaining Domain Admin from an Unsecured HVAC System
David "Davalo" CarmonaEN
iothvacactive directoryphysical security
2025
Threat Hunting and the Surfacing of Mexican Threat Actor Greedy Sponge
Jacob FairesEN
threat huntingthreat intelligencelatamthreat actor
2024
Make ATM Jackpotting great again, ¡a la mexicana!
Jesus Dominguez, Bryan Gonzalez
atmphysical securitymalwarefinancial
2024
Bridging the gap among Cloud Engineers and Incident Responders with Open Source
Santiago AbastanteEN
cloudincident responseopen sourceaws
2024
Leaving Doors Unlocked With Cognito
David Bravo, Samanta ArandaEN
awscognitoiamcloud security
2024
Data Analytics: Herramientas clave para la caza de amenazas
Luis Escamilla
threat huntingdata analyticssiemdetection
2024
Encrypting Your Infrastructure Without Getting Fired
Matt MoenEN
encryptioninfrastructurepkitls
2024
En Tus 5 Minutos: Abordando el Impacto Emocional de los Hackeos
Fernando Valdes, Marco Palacios
mental healthincident responseburnoutcommunity
2024
Industrial Cybersecurity: experiences from the Cyber-Physical Systems trenches
Alexandro FernandezEN
icsscadaotcyber-physical
2024
Descifrando los Infostealers en Latinoamérica: Una mirada a su evolución
Julio Aviña, Jozic Espinoza, Daniel Soriano
malwareinfostealerslatamthreat intelligence
2024
Ciberseguridad en IoT: Analizando ZigBee y Thread
Kevin Leon
iotzigbeethreadwireless
2024
No todo es hacking
Carolina Chavez
careercommunitydiversity
2024
"Dime con quién hablas y te diré quién eres"... Detección de estafas telefónicas con OSINT
Rodrigo Apablaza, Carlos Baeza
osintsocial engineeringfraudphone
2024
Pesadillas de DevSecOps
Carlos Lozano
devsecopscicdappsecpipelines
2024
Técnicas de post-explotación usadas por threat actors en la nube
Jorge Gibbs, Ivan Sanchez
cloudpost-exploitationawsthreat intelligence
2024
Guardians of the Urban Lifeline: Safeguarding North America's Largest Public Transit Network
Cesar Vargas, Phelix OluochEN
incident responseotcritical infrastructuretransit
2024
Red Team Phishing - Tools, Tips & Tricks
Paulo Sarrin, Ernesto RamírezEN
red teamphishingsocial engineeringevasion
2024
Enemigo en las Puertas: Operaciones de Red Team Informadas por Amenazas
Nikolas Behar
red teamthreat intelligenceadversary simulation
2024
Breve historia del spyware en México, una mirada desde sociedad civil
Paul Aguilar
spywaresurveillancecivil societymexico