Conference Highlights

Optiv Booth

Get ready to unlock your full cybersecurity potential with Optiv, a Platinum sponsor at Black Hat 2025! Swing by booth #4546 at the Mandalay Bay Convention Center and experience the action:

Live demos that showcase cutting-edge solutions
Epic Giveaways you won’t want to miss
One-on-one time with Optiv experts
Afterparty wristband pickup - Skip the line and get the party started early!

Business Hall Hours
Wednesday, August 6 | 10am – 6pm PT
Thursday, August 7 | 10am – 4pm PT

Optiv Chips In

Think you’ve got what it takes to be a cyber trivia champ? Step into the spotlight at the Optiv booth and:

Test your knowledge in 3 live trivia game show sessions
Explore interactive demos with Optiv experts
Support a nonprofit empowering future cybersecurity leaders
Chance to win prizes!

Every correct answer helps raise funds for a great cause, so bring your A-game and make a difference!

After Party

Cap off your day with an unforgettable night under the stars at DAYLIGHT Beach Club outside Mandalay Bay.

We’re talking:

Music that moves you
Dancing under the desert sky
High-energy Vegas-style entertainment
Poolside vibes - yes, the pool is OPEN!

Wednesday, August 6 | 8 – 11pm PT

Skip the line! Pick up your wristband at the Optiv booth on August 6 from 10am – 5pm PT

Optiv Booth (#2140)

Live Presentation & Demo Schedule | Wednesday, Aug. 7

10:30 a.m. - 11:00 a.m. PT

AI for Red Teamers

Tim Elrod, Principal Consultant, Threat Management, Optiv

In this talk we will take a deep dive into current AI technology and how it can be practically applied to red team simulations. From chatGPT created phishing campaigns to Voice.ai phone pretexting calls we will talk about how red teamers can use services built of Open AI GPT4 technology to implement convincing and creative attack scenarios that truly test the attack resiliency of an organization. Additionally armed with the knowledge that AI technology will never be as bad as it is today, we will speculate on where we see the AI technology space going in the future and how it will impact red team operations for years to come. Weather you are a fan of this emerging technology, first step down a road that ends with Skynet, Or somewhere in the middle this talk will be informative on where the current state of AI technology is, how it can be used, and where it is likely to go in the future.
11:00 a.m. - 12:00 p.m. PT

(DEMO) IoT Device Teardown

Adam Eaton, Sr. Consultant, Application Security, Optiv

Optiv disassembles IoT devices, leveraging security deficiencies to compromise appliances and demonstrate the impact of common attack surfaces. See how adversaries are using physical access to compromise devices or employ them in supply chain attacks.
12:00 p.m. - 12:30 p.m. PT

Filter Evasion

Tanner Scott, Sr. Consultant, Application Security, Optiv

What happens when you're on an engagement and you run into a vulnerability that seems to not be giving any results? Is the endpoint being attacked really nothing, or is there something that can be done to yield fruitful results?
12:30 p.m. - 1:30 p.m. PT

(DEMO) Lockpicking

Doug Rogahn, Sr. Consultant, Application Security, Optiv

Have you ever wondered how a lock works? Have you tried picking a lock? This hands-on demonstration will give you an opportunity to see a live view of the inside of a lock while you pick it to help you understand what is going on inside the lock. You will also have the opportunity to pick locks ranging in difficulty from TSA-approved luggage locks to 6-pin commercial locks.
1:30 p.m. - 2:00 p.m. PT

Don't [You] Forget About [Me]... (or Forgotten Components of a Vulnerability Management Program)

Vince Pascale, Consultant, Vulnerability Management & Remediation, Optiv

Often when standing up a vulnerability management program, people think that it is fairly simple and purely technological in nature. “You just buy and deploy a solution from one of the big three VM vendors, add some IP address ranges or asset lists, run some scans, look over the results, and cut remediation tickets. Maybe some follow-ups. Piece of cake.” Sounds simple, right? Well, that’s certainly part of it, it’s not all of it. Many times, equally important components, such as Governance, Reporting, and Prioritization get overlooked or forgotten entirely. In this talk, we will discuss some often overlooked, but still critical, components of an effective vulnerability management program.”
2:00 p.m. - 3:00 p.m. PT

(DEMO) Badge Cloning

Travis Weathers, Practice Director, Threat, Optiv

Details to come
3:00 p.m. - 3:30 p.m. PT

Is Your SBOM a Dud or Da Bomb

Doug Rogahn, Sr. Consultant, Application Security, Optiv

Dan Sharp, Sr. Consultant, ACT, Optiv

Do you have a compliance requirement to create a Software Bill of Materials (SBOM)? Is that SBOM anything more than a shelf-ware artifact? This talk will review the factors driving the adoption of SBOM in the industry and how those compliance drivers are in turn affecting the industry including what makes a sufficient SBOM, what are the limitations, and how can they be addressed to ensure an accurate picture of the threat landscape? Finally, we'll discuss how to integrate SBOM into a mature SDLC to improve the overall security of your products. Through an understanding of what SBOM is and where the limitations are, SBOM can be an effective way to not only track and identify potential vulnerabilities but also improve a Secure SDLC.

Live Presentation & Demo Schedule | Thursday, Aug. 8

10:30 a.m. - 11:00 a.m. PT

Badge Cloning with Doppelganger

Travis Weathers, Practice Director, Threat, Optiv

Details to come
11:00 a.m. - 12:00 p.m. PT

(DEMO) Badge Cloning

Travis Weathers, Consultant, Vulnerability Management & Remediation, Optiv

Details to come
12:00 p.m. - 12:30 p.m. PT

Do You Know What Your API is Doing?

Bryce Harty, Consultant, Threat Management, Optiv

Over the last year, API attacks have become more prevalent in the news and recent breaches. This talk will cover the most common attacks and vulnerabilities I have identified in 2022 on various types of Security Assessments. The talk cover basic API usages and traffic security following with three API talking points with each covering the problem, the technical attack, and the impact/mitigation. The talk is aimed to bring awareness to the insecurity of widely used APIs and attack vectors observed in recent year.
12:30 p.m. - 1:30 p.m. PT

(DEMO) IoT Device Teardown

Adam Eaton, Sr. Consultant, Application Security, Optiv

Optiv disassembles IoT devices, leveraging security deficiencies to compromise appliances and demonstrate the impact of common attack surfaces. See how adversaries are using physical access to compromise devices or employ them in supply chain attacks.
1:30 p.m. - 2:00 p.m. PT

Cyber Insurance: Why It's an Asset NOT a Liability in a Cyber Event

Dara Gibson, Senior Cyber Insurance Manager, Optiv

The words “cyber insurance” can trigger positive reactions in some critical stakeholders but may cause PTSD in others. This presentation will shed light on the cyber insurance industry and determine why obtaining cyber insurance is an asset NOT a liability in a cyber event. The cyber insurance market and policies are not typical and have varied greatly throughout the years and throughout the carriers and brokers. Having a baseline comprehension of the policy components and exclusions will be beneficial when the necessity to utilize it becomes glaringly apparent.

During this session attendees will learn a brief history about cyber insurance, gain an understanding of a Business Email Compromise, and learn about the importance of insurance in this situation. People will have the opportunity to ask questions and comprehend the interactions of the technical, legal, and financial impacts of cyber insurance during a cyber event.
2:00 p.m. - 3:00 p.m. PT

(DEMO) Lockpicking

Doug Rogahn, Sr. Consultant, Application Security, Optiv

Vince Pascale, Consultant, ACT, Optiv

Have you ever wondered how a lock works? Have you tried picking a lock? This hands-on demonstration will give you an opportunity to see a live view of the inside of a lock while you pick it to help you understand what is going on inside the lock. You will also have the opportunity to pick locks ranging in difficulty from TSA-approved luggage locks to 6-pin commercial locks.
3:00 p.m. - 3:30 p.m. PT

Security Risks with Low-Code and No-Code Application Development Platforms

Doug Rogahn, Sr. Consultant, Application Security, Optiv

Dan Sharp, Sr. Consultant, ACT, Optiv

Low-Code and No-Code (LCNC) application development is on the rise and putting application development in the hands of business users rather than trained developers. Many of these citizen developers are focused on solving a business problem or streamlining an existing workflow using out-of-the-box apps and data connectors with little thought to security. In this session, we will highlight the security risks associated with standard configurations in LCNC environments and provide suggestions on what companies can do to recognize and reduce those risks.

Visit Optiv at Black Hat USA 2025

August 2-7, 2025

Mandalay Bay Convention Center | Booth #4546

This box would be hidden by default but can be used to update attendees on date changes,cancellations and other important bulletins.

Event Details

Conference Highlights

Optiv Booth

Optiv Chips In

After Party

Keynote Speaker

Name Here

Name Here

Name Here

Optiv Booth (#2140)

Live Presentation & Demo Schedule | Wednesday, Aug. 7

AI for Red Teamers

(DEMO) IoT Device Teardown

Filter Evasion

(DEMO) Lockpicking

Don't [You] Forget About [Me]... (or Forgotten Components of a Vulnerability Management Program)

(DEMO) Badge Cloning

Is Your SBOM a Dud or Da Bomb

Live Presentation & Demo Schedule | Thursday, Aug. 8

Badge Cloning with Doppelganger

(DEMO) Badge Cloning

Do You Know What Your API is Doing?

(DEMO) IoT Device Teardown

Cyber Insurance: Why It's an Asset NOT a Liability in a Cyber Event

(DEMO) Lockpicking

Security Risks with Low-Code and No-Code Application Development Platforms

Day 3 Agenda

Keynote: Session Title Here

Panel: Session Title Here

Live Presenters

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Name Here

Frequently Asked Questions

Is there a fee to participate?

How do I earn CPEs for attending?

What time does the event start?

Do I have to attend the entire event?

What can I expect from the event?

Optiv Event Standards (OES)

After Party | DAYLIGHT Beach Club

Thank You To Our After Party Sponsors

Thank You To Our After Party Sponsors

Register for the Black Hat After Party here!

This box would be hidden by default but can be used to update attendees on date changes,
cancellations and other important bulletins.