HackerSummerCamp USA 2025 | Blog of Anant Shrivastava

It’s that time again : HackerSummerCamp @ Vegas 2025.
This one’s special for me: it’s my 10th BlackHat USA. What started back in 2015 as a support trainer gig has snowballed into… well, let’s just say the badge can no longer fit all the hats I wear.

Here’s how the madness unfolds this year:

---

📆 2nd–5th Aug 2025: BlackHat Trainings

I’m running my multicloud hacking class:

0wning the Cloud: AWS, Azure, GCP, DigitalOcean, and Aliyun

Five clouds. Two days. One shell at a time.

---

📆 6th Aug 2025: BlackHat Conference Day 1

My current obsession is Software Supply Chain Security, and that shows in the calendar.

🕚 11:00am–12:00pm

Birds of a Feather: A Candid Conversation on Software Supply Chain Security
Lagoon G, Level 2

Later in the day, I’ll be at the Open Source AMA – an open mic for questions around FOSS. Open source made me what I am. This is my small way of paying it forward.

🕒 3:00pm–4:00pm

Open Source AMA: Ask Me Anything in the FOSS Universe
Lagoon G, Level 2

---

📆 7th Aug 2025: BlackHat Conference Day 2

Did I mention I’m neck-deep in Software Supply Chain these days?

The Supply Chain Micro Summit is where you’ll find me all morning.

Supply Chain Micro Summit

🕙 10:00am–12:30pm

I’m also delivering a talk titled:

📌 Beyond Dependencies: The Real Picture of Software Supply Chain Security

This is my attempt to reason with the world that software supply chain security is not just about third-party libraries and SBOMs. There’s much more to the attack surface – people, pipelines, processes.

💡 And just to be clear – I don’t hate SBOMs. I actually think they’re one of the best things to happen in infosec recently. To make them more usable / accessible, I built SBOMPlay, a free, privacy-first explorer with license and vulnerability insights. It’s there for the curious.

Later that day, I switch contexts once again and i am back at the community sessions:

Everyday Disinformation Defense: A Guide for the Tech-Savvy Among Us

🕓 1:30pm – 2:10 pm

And that wraps my BlackHat sessions for the year.

---

📆 8–10 Aug 2025: DEFCON

Villages are the best bang for the buck – raw, unpredictable, and always worth it. I’ll be hopping between:

If you’re heading to DEFCON and haven’t browsed the village schedules, now’s the time.

---

📆 11–12 Aug 2025: DEFCON Trainings

Back to where it all began – teaching.

🛠️ Attack and Defend: Software Supply Chain

We tear through dev boxes to cloud runtimes. Then rebuild with eyes wide open.
Two days of offensive and defensive chaos, just the way I like it.

---

🦃 Bonus Round

If you’re listed on Hacking Archives of India – find me. I’ve made a small batch of custom stickers just for folks featured on the site. A little offline tribute to online legends.

Think we missed someone? Or found something worth preserving? Head over to
👉 and help us fix that.