RSAC 2025 is more than just a conference—it’s where the future of cybersecurity is shaped. It’s a global gathering of professionals from across the security spectrum, all converging to tackle the most urgent challenges of our time. From nation-state cyberattacks and insider threats to cutting-edge vulnerability research, this year’s agenda is a gold mine of knowledge.

But with so many high-impact sessions on the table, we’ve done the work for you. Here are the must-attend sessions you simply can’t afford to miss at RSAC 2025.

1.Unmasking USDoD: Harnessing OSINT to Expose a Notorious Hacker

When: Sunday, May 11 | 2:20 PM – 3:10 PM PDT

Baptiste Robert, a prominent figure in the OSINT (Open Source Intelligence) community and CEO of PredictaLab—a French OSINT firm specializing in threat intelligence. In this session, Robert will explain the process of identifying hackers, focusing on the high-profile case of USDoD.

He’ll present a live demo on constructing relationship graphs that link public data to trace and unmask cybercriminals. Attendees will walk away with practical OSINT techniques and a deeper understanding of the ethical considerations involved in cyber investigations.

🔗 Add to your RSAC 2025 schedule

2.Blowing Up Gas Stations for Fun and Profit

When: Tuesday, April 29 | 9:40 AM – 10:30 AM PDT

As modern warfare increasingly expands into the digital front used by civilians —as seen in conflicts like Ukraine–Russia and Israel–Hezbollah—securing Internet of Things (IoT) systems has become crucial in preventing catastrophic consequences beyond the battlefield.

In this session, Pedro Umbellino from Acme—known for previously uncovering vulnerabilities from GPS trackers to protocol-level denial-of-service attacks—dives deep into the world of Automated Tank Gauging (ATG) systems. He will expose multiple zero-day vulnerabilities that put these systems at risk of devastating outcomes, including environmental disasters and physical destruction.

🔗 Add to your RSAC 2025 schedule

3.DPRK Remote IT Workers – Have You Hired One and Are You at Risk?

When: Monday, April 28 | 2:20 PM – 3:10 PM PDT

After the pandemic the rise of remote work has brought with it troubling trends:Cyber criminals and IT workers from DPRK are infiltrating global companies under false identities. In some cases, these workers have evolved into insider threats, compromising systems and causing devastating damage.

This panel discussion brings together a powerhouse lineup: Bryan Vorndran, Assistant Director of the FBI’s Cyber Division; Special Agent Elizabeth Pelker from the Cybercrime Task Force; Chris Horne from Upwork; and top threat intelligence analysts from Microsoft and CrowdStrike.

🔗 Add to your RSAC 2025 schedule

4.Countering China’s “Typhoon” Threats Targeting U.S. Critical Infrastructure

When: Monday, April 28 | 1:10 PM – 2:00 PM PDT

Over the past two years, Chinese state-backed threat actors have launched a series of aggressive cyber campaigns—Salt Typhoon, Flax Typhoon, Silk Typhoon, and others—disrupting critical infrastructure across the U.S. In a bold move just last month, senior Beijing officials even acknowledged these attacks, citing them as retaliation for growing U.S.–Taiwan relations.

This session features a powerhouse panel discussion led by Brett Leatherman, Deputy Assistant Director for Cyber Operations and Director of the National Cyber Investigative Joint Task Force. He’ll be joined by a range of top cybersecurity experts to discuss how these campaigns unfolded and how the U.S. can fortify its defenses moving forward.

🔗 Add to your RSAC 2025 schedule

5. Under Siege: How APTs and Nation-States Are Coming for Everyone

When: Tuesday, April 29 | 2:25 PM – 3:15 PM PDT

Advanced Persistent Threats (APTs) are no longer just targeting governments or high-profile corporations—they’re going after anyone and everyone with valuable data, money, or the potential to create chaos. In this session, Eric Chien and Jason Rolleston from Broadcom will break down how these threats are rapidly evolving and the critical defenses organizations must adopt to stay ahead of APTs.

Eric Chien, best known for co-authoring Symantec’s groundbreaking research on Stuxnet, brings a deep, firsthand perspective on how cyber warfare has evolved—and what’s coming next. This is a must-attend for anyone serious about defending against nation-state actors and modern APTs.

🔗 Add to your RSAC 2025 schedule

Mark your calendar, plan your RSAC 2025 schedule, and be ready to level up your security game.

See you at RSAC 2025!

Follow cybersecurity88 on X and Linkedin for the latest cybersecurity news