SHOWCASE / TECHNICAL TRACK
THREATCON1
2026 AGENDA
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
DAY 1 — OCTOBER 5TH
2:00 pm
-
6:00 pm
Registration & Badge Pickup
3:00 pm
-
6:00 pm
Capture the Flag
Day 1 of 3
3:30 pm
-
5:00 pm
Mike Glyer (VulnCheck Workshop)
Get free from the 503: leaving NVD for a more trustworthy partner
5:00 pm
-
8:00 pm
Exhibit Hall Opens
6:00 pm
-
8:00 pm
Welcome Cocktail Reception w/ Live DJ
DAY 2— OCTOBER 6TH
8:30 am
-
3:00 pm
Registration & Badge Pickup
8:30 am
-
9:15 am
Breakfast
9:10 am
-
9:30 am
Welcome Remarks + Keynote Intro
9:30 am
-
10:00 am
Keynote: Gen. Paul Nakasone (Ret.)
Charting the Course of National Security in a Digital World
10:00 am
-
6:00 pm
Exhibit Hours + CTF
10:00 am
-
10:30 am
Networking + Snack Break (Exhibit Hall)
Session 1
10:30 am
-
11:00 am
Aayush Vishnoi (Founding Security Engineer & Researcher)
The Documentation is the Attack Surface: Turning Exposed OpenAPI Schemas into Attack Paths
Technical Track
Session 1
10:30 am
-
11:00 am
Benjamin Harris (watchTowr)
From Weeks to Hours: AI and the Death of the Patching Window
Technical Track
Session 1
10:30 am
-
11:00 am
Doc McConnell (Finite State)
Show Your Work: The Engineering Behind Credible Regulatory Documentation
Showcase Track
Session 2
11:10 am
-
11:40 am
Jacob Baines (VulnCheck)
ENDLESSDOORS Is Phoning Home
Technical Track
Session 2
11:10 am
-
11:40 am
Eric Forte (Elastic)
The Accepted Bypass, Using STUN/TURN Patterns for C2
Technical Track
Session 2
11:10 am
-
11:40 am
John Rodriguez (CyberDagger LLC)
Found ≠ Fixed: The Gap Between Vulnerability Discovery and Actionability
Showcase Track
11:50 am
-
1:05 pm
Lunch (Exhibit Hall)
Session 3
1:10 pm
-
1:40 pm
Chris Holt (Intigriti)
The OASIS Project: A Movement for Crowd-Sourced Fix Automation
Technical Track
Session 3
1:10 pm
-
1:40 pm
Jonathan Peterson (VulnCheck)
GitHub Exploits: The Good, the Bad, the AI, and the Bitcoin Scams
Technical Track
Session 3
1:10 pm
-
1:40 pm
Reuven Aviad (CYE)
The Exponential Exploitability Gap: Cybersecurity in the Age of AI
Showcase Track
Session 4
1:50 pm
-
2:20 pm
Gal Zaban (Zafran)
DifyTap: Silently Wiretapping Multi-Tenant AI
Technical Track
Session 4
1:50 pm
-
2:20 pm
Will Dormann (Tharros)
Compositional Risks: Exploiting MIDI Playback on Windows to Achieve SYSTEM Privileges
Technical Track
Session 4
1:50 pm
-
2:35 pm
AWS (Premier Sponsor - 45 mins)
Showcase Track
Session 5
2:30 pm
-
3:00 pm
Kazuki Omo (SIOS Technology)
When Is a CVE Actually Usable? Measuring NVD Vulnerability Intelligence Maturation Through Daily Snapshots
Technical Track
Session 5
2:30 pm
-
3:00 pm
Landon Rice (VulnCheck)
How UAT-8616 Pwned Cisco SD-WAN: A Post-Mortem of CVE-2026-20127
Technical Track
Session 5
2:30 pm
-
3:00 pm
Mehul Revankar (Quantro Security)
Exploiting Vulnerabilities at scale with AI
Showcase Track
3:05 pm
-
3:30 pm
Networking + Snack Break (Exhibit Hall)
Session 6
3:40 pm
-
4:10 pm
TBD
Technical Track
Session 6
3:40 pm
-
4:10 pm
Johnny Shaieb (IBM)
Axiomatic Events that Evolved Vulnerability Databases
Showcase Track
Session 6
3:40 pm
-
4:10 pm
TBD (Asimily)
Enforced Once, Drifted Forever: Why Segmentation Policies Stop Matching the Network
Showcase Track
Session 7
4:20 pm
-
4:50 pm
Yotam Perkal (Pluto Security)
Breaking the Control Plane: Exploiting MCP Servers in AI Workflows
Technical Track
Session 7
4:20 pm
-
4:50 pm
Mike Reed (Realis Solutions)
The Four Ways Companies Buy Security Now, and Why Your Vendor Doesn't Fit Any of Them
Showcase Track
Session 7
4:20 pm
-
4:50 pm
Patrick Garrity (VulnCheck), with panelists Tod Beardsley (runZero), Shelby Cunningham (GitHub), Caitlin Condon (VulnCheck)
The Chaos of Coordinated Disclosure: Researchers Tell All
Showcase Track
Session 8
5:00 pm
-
5:30 pm
John Fitzpatrick (Lab539)
Every Attack Has a Backstory: Understanding the Infrastructure Behind Modern Campaigns
Technical Track
Session 8
5:00 pm
-
5:30 pm
Joseph Szczerba (Delphos Labs)
The Binary Does Not (Usually?) Lie: A Reverse Engineering Field Report
Technical Track
Session 8
5:00 pm
-
5:45 pm
Zafran (Premier Sponsor - 45 mins)
Showcase Track
6:00 pm
-
8:00 pm
Cocktail Reception w/ Live DJ (Exhibit Hall)
DAY 3— OCTOBER 7TH
8:45 am
-
10:00 am
Registration & Badge Pickup
8:45 am
-
9:30 am
Breakfast
Session 9
9:40 am
-
10:10 am
Raj Badhwar (SPA)
Showcase Track
Session 9
9:40 am
-
10:10 am
Adam Powis (VulnCheck)
Technical Track
10:00 am
-
12:00 pm
Exhibit Hours + CTF
Session 10
10:20 am
-
10:50 am
Ethan Muntz (Health-ISAC)
Showcase Track
Session 10
10:20 am
-
10:50 am
Tim Roberts (VulnCheck)
Technical Track
12:00 pm
-
1:30 pm
Closing Remarks + Lunch & Go
Exact times subject to change. F&B included. Dedicated exhibit hours all three days.