Menu

2026 Schedule

GrrCON 2026

Schedule

Two days. Four tracks. No egos. No divas. Just a good time and good content.

Thursday

TimeInversionThe ResistanceOverLordsDrift
8:30 AMWelcome to GrrCONEggDropX & P1nkN1ghtmare
9:00 AMKeynote: GrrCON Awakening: How Humans WinGeorge Kamide, Dr. Louis DeWeaver, Dr. Chase Cunningham
10:00 AMThis Talk Was Written by AIDave KennedyIn 30 Min, Access the Building and Takeover the DomainPaul BrownridgeDefending in the Age of AI Agents. A SOC Playbook for the Agentic EraBrandon McGirr
Strategic SummitInvite Only10:00 AM – 5:00 PM
11:00 AMYour Security Isn’t Failing, It’s RegressingTimothy ScheidYour Incident Response Plan Is Lying to YouShaun BertrandYou Are Not Behind. The Timeline Was a LieJohn ‘g333kspeed’ Stauffacher & Matthew ‘mattrix’ Hoy
11:30 AMHacking Facial Recognition with Real-Time DeepfakesSergio MahiaBadge, Bluff & Backdoors: Hacking the Human PerimeterReid BroskoYour AI is Social Engineering YouJ Wolfgang Goerlich
12:30 PMKeynote: The Alert Still Fires: Defending against Frontier Model Coordinated AttacksAoibh Wood
1:30 PMI Suck at Coding. Claude Senpai, Make Me Malware.Kyle MeyerDetection Essentials for Autonomous Security IntelligenceShane HarschYour Next Breach May Be Planned by AI. Your Defense Should Be TooEric Inch
2:00 PMInside Scattered Spider: Evolving TechniquesIlkin JavadovEvery Risk Acceptance Memo I’ve Signed Was a BetRobert FormerEvolving Risks and Strategies to Safely Deploy AIGreg Stevens
2:30 PMVibeShell: How Trusting Your AI IDE Costs You Your MachineEtizaz MohsinPod-tential for Disaster: Hacking Kubernetes Pod to ClusterScott MillerYour AI Agent Could Be a Threat ActorLarry Suto
3:30 PMAll Keys Lost: A Car Hacking Adventuref8alMy Bed Tried to Freeze Me at 3AM. I Rooted It.Adam SchaalThree ways to build a composable AI-ready SOCBill Emmett
4:00 PMBypassing Protection Mechanisms in Automotive ECUsGavin OrcuttWhat Happens to Cybersecurity When the Internet Fails?Dick HaightSecurity Context for AI Builders: Accuracy, Performance, and Cost ConsiderationsIvan Dwyer
4:30 PMVIPs and Fake IDs: Investigating PDF RevisionsKyle EatonIn and Around the Sandbox: Monitoring the World the Agent Can TouchSai MoligeAI SOC Analyst: 24/7, No Complaints, Occasionally RightJason Young
5:00 PMKeynote: I Sent AI Agents to Call the Scammers BackMohammad Eshan
5:30 PMGoodByeEggDropX & P1nkN1ghtmare   

Friday

TimeInversionThe ResistanceOverLordsDrift
9:00 AMKeynote: 17 Governments Audited, Zero Exploits, Bloomberg Called Me CriminalRingmast4r (Patrick Quirk)
10:00 AMStill Stealing, Killing & RuiningJayson E StreetScamOps: Defending Public Trust from Industrialized CybercrimeAamir LakhaniWeaponizing LLMs: Real-World Abuse Patterns and Defensive CountermeasuresGeorge AntoniouBoldly Going: Cybersecurity Lessons from Space ExplorationNathan Theule
11:00 AMGiving Swords to our Future AI OverlordsMatt Lee & Tom Lawrence“**Clever girl.**” — Muldoon’s last words, right before the raptor that had been *learning* his patterns outflanked him.Atlas of D00mFor Prompt Injection, Press 1: Hacking AI Voice AgentsWillie ZhangCtrl + Alt + Lead: Rebooting Cyber Culture with Human SkillsAmanda Kollmorgan
11:30 AMThe Agent You Forgot: How Non-Human Identities Are Bypassing Your IGA and PAM ControlsRichard Lack
NoonCompounding Interest: Compromising the ATM Supply ChainMatt BurchAmbitious Persistent Teens (APT) – True Threat to Your BusinessAnthony KraudeltBuilding an Agentic SOC: Best practices when engaging AI AgentsSam McLaneFireside Chat with GrrCON’s EggDropXRachel Giacobozzi
1:00 PMDealing with Shadows: Life of a Threat Actor NegotiatorMatt BarnettGo Hack Yourself: More War Stories from 250k+ PentestsRamzi HarbThe Insider Threat Nobody Trained, and the AI Agent Nobody HiredChris TyrrellLast Night a DJ Erased My DriveMathew Caplan
1:30 PMPreemptive Security in a Reactive WorldBart Lenaerts-Bergmans
2:00 PMGoing back to our roots, *with added AIChris Roberts and Jason BrownThe Amber Prison: Proxying Ghosts into the ShellThomas RichardsBreaking MCP – Attack Paths in Agentic AIDarren Meyer
GrrCON GamesHosted by @Gnow1 2:00 PM – 5:00 PM
3:00 PMHow to Win GrrCON and the Secretive ShitterCONThe Infamous M&MHow Adopting a Risk Based Mindset Can Improve ResilienceTim ConnollyAttackers Don’t Need Shells, They Need PromptsRaz Tel-Vered
3:30 PMCatch Me If You Can: Hooking into Encrypted IoT TrafficMansoor AhmadSchrödinger’s Session: Compromised Until Proven OtherwiseMarc GorelickMy Other Inbox Is Your Inbox: M365 Copilot Email TheftAdam Logue
4:00 PMLiving Between the Walls of Death & Loving Itrand0hSo You Want to Be a ForensicatorCatherine UllmanTrust But Verify: The Messy Reality of Exploitation EvidencePatrick Garrity
5:00 PMKeynote: The History of Malware: 40 Years of Viruses & WormsEliad Kimhy
6:00 PMDay 2 Wrap Up & PrizesEggDropX & P1nkN1ghtmare   

Sponsors 2026

Back To Top