Lightnews — Scholar-powered news

DEATHCon

@deathcon.io

98 followers 80 following 37 posts

A Detection Engineering and Threat Hunting workshop-first conference for cybersecurity pros, students, and enthusiasts. Held online and in many small venues around the world.

Posts Media Videos Starter Packs

Pinned

DEATHCon @deathcon.io · Sep 6

The final round of #DEATHCon2025 online tickets will drop on 9/9 at 0900 UTC deathcon.io/tickets.html
In-person tickets still available at some sites (1/4)

1 2 1

DEATHCon @deathcon.io · 1d

Oh sorry to hear that if you can't travel! Yes of course you can still do all the workshops online and you'll have full access. Which site were you going to?

DEATHCon @deathcon.io · 1d

Thank you so much! We have enough volunteers already and are hard at work getting the lab built

1 1

Reposted by DEATHCon

Brad @malware-traffic-analysis.net · 2d

2025-10-10 (Friday): Was looking for Koi Loader/Koi Stealer, and I found this #WebDAV server that hosted malicious Windows shortcut (#LNK) files.

Not sure what type of #malware this is, but it's not Koi Stealer.

Details at github.com/malware-traf...

Malicious Windows shortcut (LNK) files on the WebDAV server. Both are the same file with different names.

Traffic from the initial infection filtered in Wireshark.

Malware that was persistent on the infected Windows host.

Post-infection traffic generated by the peristent malware.

1 2 3

DEATHCon @deathcon.io · 5d

Time is running out to get a ticket for DEATHCon 2025 in person locations! If you want a t-shirt, order by October 11. Last day to buy a ticket is October 31
deathcon.io/tickets.html

a black and white photo of a skeleton against a dark background

ALT: a black and white photo of a skeleton against a dark background

media.tenor.com

2 1 2

DEATHCon @deathcon.io · Sep 10

We're very sorry to hear that and wish that your team could have joined us remotely this year. We doubled the number of available tickets since last year and next year will double it again, but this year all the remote tickets are sold. There are still in person tickets for several sites

DEATHCon @deathcon.io · Sep 9

Tickets will be available in just over 4 1/2 hours from now!

DEATHCon @deathcon.io · Sep 6

The final round of #DEATHCon2025 online tickets will drop on 9/9 at 0900 UTC deathcon.io/tickets.html
In-person tickets still available at some sites (1/4)

DEATHCon @deathcon.io · Sep 6

and using Microsoft Sentinel, Elastic, and maybe Splunk to query the logs while doing purple team experiments with C2 servers we set up! Learn about the workshops scheduled at deathcon.io

DEATHCon @deathcon.io · Sep 6

DEATHCon has an unusual format of 100% hands-on workshops for Detection Engineering and Threat Hunting skills, all of them available online by connecting your local VMs to our global detection engineering lab via Tailscale...

DEATHCon @deathcon.io · Sep 6

Kuala Lumpur: 17 seats remaining
San Diego: Sold Out ☠️
Tacoma: 25 seats remaining
Austin, Texas: 5 seats remaining 🔥
Montreal: 22 seats remaining
Orlando: 25 seats remaining
Córdoba: 10 seats remaining
Edinburgh: 6 seats remaining 🔥
Amsterdam: Sold out ☠️
Oslo, Norway: ??
Bonn, Germany: Sold out ☠️

DEATHCon @deathcon.io · Sep 6

The final round of #DEATHCon2025 online tickets will drop on 9/9 at 0900 UTC deathcon.io/tickets.html
In-person tickets still available at some sites (1/4)

1 2 1

Reposted by DEATHCon

Scoubi @scoubi.bsky.social · Jul 10

Tickets for #DEATHcon in Montreal are on sale now!

Book now to secure your place. FYI, Virtual Tickets for round 1 are already Sold Out!

eventbrite.ca/e/deathcon-m...

Additional info (like workshops) for the con can be found here : deathcon.io

Please like & repost for reach

DEATHcon Montreal - On Site

2 days of hands-on Detection Engineering and Threat Hunting workshops! Join us Live in Montreal.

eventbrite.ca

2 3

DEATHCon @deathcon.io · Jul 8

We're down to just a few online tickets left (about 5)

Reposted by DEATHCon

Edna (they/them) 🅅 @ednas.bsky.social · Jul 7

Ticket sales for @deathcon.io 2025 have started! I'm hosting the Orlando location. I know you want to come hang out with us in the 3 dimensional world. Orlando site ticket includes lunch on both days and a dinner on Saturday. See you in DEATH! 💀
deathcon.io/tickets.html

1 1

DEATHCon @deathcon.io · Jul 7

#DEATHCon2025 tickets for Tacoma, Washington on-site are now available: www.eventbrite.com/e/deathcon-t...

Thanks to @infoblox.bsky.social for hosting the workshop meeting space during both days. We'll party on Saturday night at the Tacoma Art Museum with catered dinner and drinks (NA drinks too)

DEATHCon: Tacoma

Learn Detection Engineering and Threat Hunting in hands-on workshops, meet new friends and enjoy a party at the Tacoma Art Museum!

www.eventbrite.com

DEATHCon @deathcon.io · Jul 7

#DEATHCon2025 merch is now available! DEATHCon.io/merch.html
This year, 100% of the proceeds go directly to KC7 Cyber Foundation to provide cybersecurity education free to everyone! We 💜 u, KC7!

Merch - DEATHCon 2025 - Detection Engineering and Threat Hunting

DEATHCon - Detection Engineering and Threat Hunting Workshops

DEATHCon.io

1 1

DEATHCon @deathcon.io · Jul 5

This year, we're making online tickets affordable no matter what your geography, economy, or work situation with pay-what-you-can pricing. We want everyone to have access to great workshops and hands-on threat hunting training!

a woman in a red shirt is holding a microphone and says you get a ticket

ALT: a woman in a red shirt is holding a microphone and says you get a ticket

media.tenor.com

DEATHCon @deathcon.io · Jul 5

DEATHCon online/remote ticket sale round 1 will start Monday 7th of July at 00:01 UTC! www.worldtimebuddy.com?pl=1&lid=100... Last year they sold out in 24h 😳

On-site tickets will be available on 7/7 at around 10am local time for each site.

All details here: deathcon.io/tickets.html

a neon sign that says tickets is lit up in red

ALT: a neon sign that says tickets is lit up in red

media.tenor.com

3 2 1

DEATHCon @deathcon.io · Jun 22

Tickets will go on sale July 7, and the conference will be held November 8-9. Last year the online tickets sold out on the first day, so we doubled the number available this year and split it into two rounds to give people a better chance

DEATHCon @deathcon.io · Jun 22

Hey #threathunting friends, we've got a great lineup of workshops coming up for #DEATHCon2025, including "CLI Got 99 Problems, but Obfuscation Aint't One" by @wietzebeukema.nl - learn to turn attackers tricks against them! 😈💀💥
Check them out at DEATHCon.io/workshops.html

1 1 4

DEATHCon @deathcon.io · May 31

We've received so many excellent workshop CFP responses for DEATHCon 2025, and we'll be sending acceptance messages by tomorrow, June 1st! After workshop leaders confirm acceptance, we'll be listing the workshops on deathcon.io/workshops.html over the next few weeks. Thanks all!

a drawing of a skeleton hand reaching out towards another hand .

ALT: a drawing of a skeleton hand reaching out towards another hand .

media.tenor.com

2 2

Reposted by DEATHCon

sydney @letswastetime.bsky.social · Mar 20

🔥 New Dispatch 🔥
In our latest guest post, Alex Hurtado talks the 2025 State of Detection Engineering Report.
tl;dr: Off-the-shelf detections won't save you. Your environment deserves better.
dispatch.thorcollective.com/p/detection-...
#detectionengineering #threathunting #thrunting #THORcollective

Detection Engineering: DIY or Die Trying

There’s a rising practice becoming the critical backbone of SecOps—and surprise, it’s not CNAPP. Sorry, unicorn Wiz.

dispatch.thorcollective.com

2 3

DEATHCon @deathcon.io · Mar 29

The DEATHCon 2025 Call for Workshops is now open!
If you have a great idea for teaching people how to do #detectionengineering or #threathunting or an adjacent skill through hands-on experience in our lab, we'd love to hear it! deathcon.io/cfp.html Submit before June 1

a skeleton is standing in front of a window and giving the middle finger .

Alt: Decoration only: a skeleton is standing in front of a window and playing an air guitar.

media.tenor.com

4 4

Reposted by DEATHCon

ESET Research @esetresearch.bsky.social · Mar 11

#ESETresearch has discovered a zero day exploit abusing #CVE-2025-24983 vulnerability in Windows Kernel to elevate privileges (#LPE). First seen in the wild in March 2023, the exploit was deployed through #PipeMagic backdoor on the compromised machines. 1/4

1 12 18

DEATHCon @deathcon.io · Mar 10

Locations:
Kuala Lumpur, Tacoma, San Diego, Austin, Orlando, Montreal, Córdoba Argentina, Edinburgh, Amsterdam, Oslo, and Bonn

Where will you go to find friends in DEATH?

1 3

DEATHCon @deathcon.io · Mar 10

This year, 100% of the proceeds from merch sales will go to support KC7 Foundation to help them bring more free training through games to people who want to learn cyber security skills!

1 1