InfoSec World 2025
InfoSec World has long been recognized as a leading cybersecurity conference combining business strategy and technical innovation. The 2025 program features over 150 expert speakers discussing core topics.
Ai4 2025
Ai4 2025 will be held August 11–13, 2025, at the MGM Grand in Las Vegas, Nevada.
National Cyber Summit 2025
The National Cyber Summit (NCS) 2025 will take place September 23–25, 2025, in Huntsville, Alabama. As one of the premier cybersecurity conferences in the U.S., NCS unites government, industry, and academic communities to foster innovation and collaboration in cybersecurity research and practice.
The event features keynote speakers, technical tracks, hands-on workshops, and networking opportunities covering a wide array of topics such as secure software engineering, threat intelligence, network defense, and emerging cyber technologies.
Are Betting Markets Better than Polling in Predicting Political Elections?
Authors: Laurie E. Cutting1, Sarah S. Hughes-Berheim2, Paul M. Johnson3, Hiba Baroud4, Brett Goldstein5
Blue Team Con 2025
Blue Team Con 2025 takes place at the Fairmont Chicago, IL, with training sessions on September 4–5 and the main conference on September 6–7, 2025.
What It’s About
As the only in-person conference focused entirely on cybersecurity defenders, Blue Team Con gathers over 850 professionals—including SOC analysts, threat hunters, incident responders, and defensive developers—to share knowledge through hands-on training, villages, and talks.
Key Highlights
NSA, CISA, and FBI Warn of Potential Foreign Cyber Campaigns Targeting U.S. Infrastructure
NSA, CISA, and FBI Warn of Potential Foreign Cyber Campaigns Targeting U.S. Infrastructure
The NSA, CISA, FBI, and DoD’s DC3 released a joint Cybersecurity Information Sheet titled "Iranian Cyber Actors May Target Vulnerable U.S. Networks and Entities of Interest." The agencies caution that, despite an ongoing ceasefire, Iranian-affiliated threat actors—including state-sponsored groups and hacktivists—could soon launch disruptive campaigns against U.S. networks, particularly those with out-of-date systems or weak credentials.
Key Risks Highlighted:
Submitted by Regan Williams
on
DEF CON 33 Hacking Conference 2025
Mark your calendars for DEF CON 33!
Taking place in Las Vegas from August 7–10, 2025, this is one of the world’s largest and most respected hacker conventions.
This year’s event includes dedicated sessions, workshops, and CTFs centered around memory corruption, exploit mitigations, and secure systems engineering:
Kawaiicon 2025
Join the next Kawaiicon, New Zealand’s premier hacker conference, happening November 6–8, 2025 in Wellington. This year’s edition dives deep into modern exploit techniques, particularly automated memory corruption attacks and emerging mitigation strategies in native languages and runtimes.
Why it matters for SoS‑VO:
OpenSSF Launches “Memory Safety Continuum” to Guide Incremental Security Improvements
OpenSSF Launches “Memory Safety Continuum” to Guide Incremental Security Improvements
The Open Source Security Foundation (OpenSSF) has released The Memory Safety Continuum, a practical framework that helps developers, organizations, and security teams assess and improve their memory safety posture. Unveiled on April 28, 2025, the document positions memory safety not as a binary goal but as an evolving journey—enabling teams to advance their practices in phases through language adoption, mitigation, and testing.
The Continuum guides readers through four core states:
Submitted by Regan Williams
on
NSA & CISA Urge Adoption of Memory‑Safe Languages to Prevent Critical Vulnerabilities
NSA & CISA Urge Adoption of Memory‑Safe Languages to Prevent Critical Vulnerabilities
The NSA and CISA have jointly issued a Cybersecurity Information Sheet (CSI), titled Memory Safe Languages: Reducing Vulnerabilities in Modern Software Development, published on June 24, 2025. The guidance emphasizes that memory safety is "critical to a holistic approach to software security", and that using memory-safe languages (MSLs) can significantly lower the risk of memory-based exploits such as buffer overflows, use-after-free, and data races.
Submitted by Regan Williams
on