Arcanum At Camp

Defcon & Blackhat

Come Find Us at Hacker Summer Camp

Hey everyone!

Vegas is next week.

The Arcanum team will be all over Black Hat and DEF CON: two panels, six talks, a workshop, DEFCON KIDS, an impromptu meetup, and a table up all weekend. Full schedule is below.

The TL;DR

  • The Arcanum Meetup. Friday, Aug 7, 1:30 to 3:30 pm, Promenade Food Hall in the Fontainebleau. Walk up, no RSVP.

  • Our table is outside n00b Village for all four days of DEF CON. Somebody from the team is almost always sitting there.

  • At Black Hat: the AI Zone talk on Thursday, plus two panels that need pre-registration ahead of time.

  • At DEF CON: Building Hackbots runs three times in three villages, plus a hands-on AI for Noobs workshop at n00b Village.

  • Badge drops and free class giveaways are going out on social all week. Watch @jhaddix and Arcanum on X.

/ The Meetup

Friday, August 7. 1:30 to 3:30 pm. Promenade Food Hall, Fontainebleau Las Vegas.

The Fontainebleau is the big blue glass tower, and it is under a five-minute walk from LVCC West Hall. You can step out of DEF CON, find us, and be back on the floor before you miss anything you care about.

There is no agenda, no talk, no slides, and nobody is going to scan your badge. It is two hours in a food hall with the Arcanum crew and whoever shows up.

Come chat with us; recon, hackbots, war stories… It’s all a good time. Heck maybe XSSDoctor will whip out his laptop again and show a few bugs!

And if you are new to all this and the whole week feels like it was built for people who already know everybody, come to this. That is genuinely who we want in the room.

/ Our Table

We have a table set up just outside n00b Village for the run of DEF CON.

I want to be blunt about this, because I think people are too polite to walk up to a table without a reason. The table exists so you can talk to us. Somebody from the team will be sitting there most of the con, and they are there to talk.

Ask us about an engagement. Ask how we got into this. Ask what we would do differently if we were starting today. Or do not ask anything and just grab some swag, that is fine too.

If the table is empty when you swing by, we are off at a village talk. Come back, we will be there.

/ What We're Presenting

Seven sessions across the week. The through line is AI: attacking it, building offensive tooling on top of it, and figuring out where the guardrails actually hold.

At Black Hat

  • Panel: Beyond "Just Ask the AI" — Wednesday Aug 5, 3:00pm, Libertine Social

  • Talk: Attacking AI — Thursday Aug 6, 2:40pm, Black Hat AI Zone

  • Panel: AI Guardrails — Thursday Aug 6, 5:30pm, The Renaissance Hotel

Both panels require pre-registration, so do not just turn up at the door. Registration links are going out on our socials as they open.

At DEF CON

  • Talk: Building Hackbots — Friday Aug 7, 11:30 am, Bug Bounty Village

  • Talk: Privilege Escalation: A Career Story - Friday Aug 7, 11:00 am, n00b Village

  • Talk: Building Hackbots — Saturday Aug 8, 10:30 am, AppSec Village

  • Workshop: AI for n00bs — Saturday Aug 8, 2:00pm, n00b Village

  • Talk: Skill Issue: A Recon Story - Sunday Aug 9, 10:00 am, Bug Bounty Village

  • Talk: Building Hackbots — Sunday Aug 9, 10:00 am, Red Team Village

Building Hackbots runs three times in three different villages. Village rooms fill up fast, so if you get shut out of one, you have two more shots at it. The Q&A tends to go somewhere different in each room anyway.

The n00b Village workshop is hands on with no prerequisites. If you have been watching the AI security wave from the shore and feeling like you missed the boat, that is the on ramp.


(Sponsor)

Your AI Agent Might Be Leaking Company Data

That's the theory Varonis put to the test in a live AI Attack Lab. Watch three examples where a poisoned instruction turned a helpful AI agent against the company it served by pulling customer records from a database, quietly emailing files to an outside address, and acting on hidden commands buried in a routine document. None of it took advanced skills, just the right nudge in the wrong place. 

Varonis breaks down exactly how these attacks work, and shows how to spot the same weaknesses in your own AI setup before someone else finds them first.

Watch the AI Attack Lab on demand

/ Badge Drops and Giveaways

We are doing Arcanum badge drops during the week, plus free class giveaways and last minute updates when rooms and times move around. Vegas being Vegas, something always moves.

All of that goes out on social first. Follow @jhaddix and Arcanum on X and keep an eye on our LinkedIn.

/ The Whole Week at a Glance

When

What

Where

Wed Aug 5, 3:00 pm

Panel: Beyond "Just Ask the AI"

Libertine Social (pre-reg)

Thu Aug 6, 2:40 pm

Talk: Attacking AI

Black Hat AI Zone

Thu Aug 6, 5:30 pm

Panel: AI Guardrails

The Renaissance Hotel (pre-reg)

Fri Aug 7, 11:00 am

Talk: Privilege Escalation: A Career Story

n00b Village

Fri Aug 7, 11:30 am

Talk: Building Hackbots

Bug Bounty Village

Fri Aug 7, 1:30 to 3:30 pm

Arcanum Meetup

Promenade Food Hall, Fontainebleau

Sat Aug 8, 10:30 am

Talk: Building Hackbots

AppSec Village

Sat Aug 8, 2:00 pm

Workshop: AI for n00bs

n00b Village

Sun Aug 9, 10:00 am

Talk: Skill Issue: A Recon Story

Bug Bounty Village

Sun Aug 9, 10:00 am

Talk: Building Hackbots

Red Team Village

All con

Arcanum table

Just inside n00b Village

/ Outro

Every year the same thing turns out to be true. The talks get recorded. The hallway does not.

So use the schedule above as an excuse to be in the same place as people, and then go have the conversation. That goes double if you have been reading this newsletter for a while and we have never actually met. Come say hi!

See you in the desert.

Happy hacking 😎

-Jason Haddix