Track 4 (2nd Floor)
We have several workshops in Track 4 this year. Those that require pre-registration will be available as add ons in Whova. You will pay for workshops that require it by adding the workshop from the registration page. Do not repurchase a ticket if you already have one. Scroll down on the registrtion page to see the add-on workshops with a price.
FRIDAY
1. Critical Infrastructure: The Fundamentals of OT Security (Click here to add this from the registration page, $25)
9:00 AM-12 PM Friday, October 2, 2026
Description: This hands-on course examines the cyber threats facing critical infrastructure and operational technology (OT), using two decades of real attacks as its through-line, from Maroochy Shire to modern supply-chain compromises like Colonial Pipeline. Working in the cloud-based Cympire cyber range, you’ll investigate internet-exposed OT devices on Shodan, then attack and contain a live control system in a hands-on exercise. You’ll leave understanding how attackers get into OT environments and the practical steps to keep them out.
Target audience: IT and security professionals interested in OT security.
Sponsor: CyberPro-AI
Trainers: Ken Smith
2. Of MICE and Men: What Cold War Spy Craft Teaches Us About Modern Insider Threats (No Cost)
1:00 PM-3 PM Friday, October 2, 2026
Description: I just returned from Orlando with my family, home of the world’s most famous mouse. But the MICE we’re talking about today is a Cold War counterintelligence framework that explains why trusted insiders betray their organizations, and it turns out the CIA figured this out decades before your DLP vendor did.
MICE stands for Money, Ideology, Compromise, and Ego, four motivations that turned CIA officer Aldrich Ames into the most damaging spy in American history, convinced FBI agent Robert Hanssen to sell secrets to the Soviets for 22 years, and led Edward Snowden to leak the NSA’s entire playbook. Each one is a textbook case study in a different flavor of betrayal.
The punchline? The same four motivators show up every week in corporate security incidents. The underpaid admin who starts selling credentials. The ideologically radicalized contractor. The executive assistant compromised through a blackmail scheme. The senior engineer who didn’t get the promotion and decides to take the source code with him on his way out.
In this session we’ll work through the real spy cases with appropriate irreverence and map each one directly to a modern corporate analog, behavioral indicators, and detection strategies. By the end you’ll have a mental model that predates UEBA by 50 years and still outperforms it.
Trainers: James Bierly
SATURDAY
1. Linux Installation Workshop (No Cost)
1:00 – 3 PM Saturday, October 2, 2026
Description: The one thing stopping many of us from running Linux as our regular OS is that we’ve never installed an OS on our own computers, we buy them with the OS already installed.
This workshop is your opportunity to overcome that hurdle! We will actually take the time to work through installing Linux Mint on computers that were running Microsoft Windows 8, 10, or 11. (Sorry, installing Linux on a Mac or Chromebook is a whole other process, and we only have so much we can do in this workshop)
In the workshop we will:
- Prepare our computers for installation by changing existing Windows and BIOS settings
- Install Linux Mint from USB media – which you get to keep as our gift to you
- Connecting to WiFi from your Linux computer
- Configure Linux Mint to be secure and keep updated automatically
- Learn how to safely install applications in Linux Mint to make sure you have all the apps you need
Feel free to bring your own computer*, or borrow one of ours to do the hands-on work with. When you register we will limit the workshop to 20 computers, but we’re happy to have up to two people per computer, so if you’re a student attending with your adult, or an adult attending with your student, you can participate together with us.
* If you choose to bring your own computer make sure you have saved any data off of it that you might want to keep – this process will replace the data on your computer and render the old information unretrievable.
Target audience: Anyone who wants to learn how to install Linux on a Microsoft computer, or who wants to refresh their skills.
Trainer: Bill Bernard
2. Certified Vibe Hacker (No Cost)
3 PM – 4:30 PM, Saturday, October 3, 2026
Description: Claude Mythos is finding zero-days in production software. Project Glasswing is letting a handful of tech giants use it to pre-patch critical vulnerabilities. The rest of us are stuck with AI tools that won’t even analyze a suspicious PowerShell command. This workshop changes that.
Attendees learn vibe hacking: steering AI toward useful security outcomes. We cover how LLMs work, why commercial AI refuses legitimate security tasks, and how to use a purpose-built alternative. No vendor demos – you do the work yourself, on real security tasks, and leave with a firsthand answer to the question everyone is asking: what can AI actually do right now?
Exercises use Hacker Sidekick, a purpose-built security AI platform:
- Log analysis – finding the signal in the noise
- Vulnerability prioritization – threat-intel-aware, not just CVSS scores
- Static code analysis – including adversarial framing commercial AI won’t touch
- Web app penetration testing – planning, finding interpretation, and report writing
- Exploit development – CVE and research-based proof of concept exploits for lab testing
- Threat actor profiling (supplemental)
- SOC alert investigation – bring your own data (supplemental)
The emphasis is on amplification, not automation, using AI to augment human capability while keeping judgment firmly in human hands. No coding required. Attendees leave with working prompts, continued Hacker Sidekick access, and a clear-eyed view of what AI can and cannot do for security work today.
Target audience: Anyone who wants to learn vibe hacking, how LLMs work, and how to use Hacker Sidekick in your day to day security role.
Trainers: Jaime Urteaga, Robert Wagner