Skip to main content

BSidesVI

This year's incidents treated as the syllabus.

BSidesVI promotional image

Vancouver Island's community-driven security conference, and by the organiser's own count its fifth edition since 2019. The published programme runs two tracks at the Victoria Conference Centre: twelve talks plus a vendor session, closing remarks, and an afterparty at Milestones on the harbour level. Subjects range from threat hunting in Google's DMCA data and attackers taking over network edge control planes, to the Shai-Hulud supply chain worm, agentic AI on both the attacking and the defending side, tracking evasive VPN clients, and the residential proxy economy running through home televisions. BSides itself began in 2009 as a home for speakers a larger conference had no room for, and the events stay volunteer-organised and corporate-funded. Open to security professionals, enthusiasts, and the security-curious at every level, with a 40 percent Helijet partner rate for anyone flying in from the mainland.

Anu's Take

The agenda landed, and five of the twelve talks are about AI or agentic systems, mostly as the attacker rather than the tool. One is a deep dive on Shai-Hulud, the first self-replicating worm npm has actually had, which hit hundreds of packages and, in its later form, wipes the home directory if it cannot find anywhere left to spread. That is the advantage of a volunteer programme over a vendor one: it tracks what happened this year instead of what sells.

Want my next pick in your inbox? Email me new events.

Share:

Published Saturday, July 11, 2026 by Anu Jolliffe on LinkedIn

Frequently asked questions

When is BSidesVI?
Friday, September 25, 2026, 8:00 a.m. to 7:00 p.m.
Where is BSidesVI?
Victoria Conference Centre, 720 Douglas Street, Victoria, BC.
How much does BSidesVI cost?
Tickets are $27.96–$86.53.
Is BSidesVI worth attending?
The agenda landed, and five of the twelve talks are about AI or agentic systems, mostly as the attacker rather than the tool. One is a deep dive on Shai-Hulud, the first self-replicating worm npm has actually had, which hit hundreds of packages and, in its later form, wipes the home directory if it cannot find anywhere left to spread. That is the advantage of a volunteer programme over a vendor one: it tracks what happened this year instead of what sells.

Where's Anu

One short email from me when I add an event I'm going to or recommend.
No filler, unsubscribe anytime.

One quick step: after you sign up we'll email you a confirmation link. You're on the list the moment you click it.

We respect your privacy. Unsubscribe at any time.