A recap of BSides312 2026, Chicago's community cybersecurity conference, covering key talks on open source supply chain poisoning, DNS vulnerabilities, Active Directory DACL escalation, and digital forensics. Recurring themes include the danger of neglecting security fundamentals in an AI-accelerated development era, the importance of pinning dependencies, managing non-human identities, understanding legacy infrastructure, and preserving evidence chains. The event also emphasized that security communities — not just tools — are critical infrastructure for defenders.
Table of contents
Open Source Poison and the Basics We Keep SkippingForensics Starts Where the Logs Get QuietDNS Is the Old Infrastructure Everyone Still TrustsActive Directory Remembers What Teams ForgetOld Foundations, New PressureThe Work Starts Where We AreSort: