DEF CON is the world's most influential hacker conference. Held every year since 1993 in Las Vegas, Nevada, DEF CON is the hub of a global community of hackers, security geeks and curious technophiles.
Open remote profile ↗#defconmovienight continues our spooky season series tonight with some underappreciated Peter Jackson magic. Join us at 8pm Pacific for ‘The Frighteners’. We’ll be in the movie-night-text channel of the discord (discord.gg/defcon) keeping an eye out for Jake Busey.
RIP Margaret Hamilton, software engineer extraordinaire.
"We had to find a way and we did. Looking back, we were the luckiest people in the world; there was no choice but to be pioneers." - Hamilton on the Apollo 11 mission
https://news.mit.edu/2026/margaret-hamilton-computing-pioneer-dies-1007
MIT News | Massachusetts Institute of TechnologyMargaret Hamilton, computing pioneer who led software development for the Apollo program, dies at 90Margaret H. Hamilton, a profoundly influential computer scientist best known for leading the software engineering team at MIT’s Instrumentation Lab during NASA’s Apollo program, died at age 90.
📢 DEF CON Training is now accepting course submissions for 2027!
Whether you’re an experienced instructor or bringing a new course to the community, we’re looking for high-quality, hands-on training that helps security professionals build real-world skills.
Submit your training material today for the opportunity to teach alongside the DEF CON community in locations around the world including Las Vegas, the Middle East, and Singapore!
For more details, see the application. The deadline to apply is November 13, 2026.
Apply here today 🔗: https://forms.cloud.microsoft/r/z2f4igJPuu
Already submitted your course for Singapore March 2027? As long as you selected your other sessions of interest at the end of the application form, you don’t need to reapply! We have your application on file.
Questions? Email us at [email protected]
#DEFCON #DEFCON35 #DEFCONSG #DEFCONME #DEFCONTraining #training #cybersecurity #handsonlearning #infosec #AI #incidentresponse #threathunting #cloud #IoT #hacking
forms.cloud.microsoftMicrosoft Forms
#defconmovienight Spooky season entry #2 is 'Them' from 1954. It's quite possibly the best ant-based monster movie in cinema history.
Join us Saturday 8pm PDT in the movie-night-text channel of the discord (discord.gg/defcon). We'll be nervously guarding our picnic goodies.
#defconmovienight kicks off the Spooky season this Saturday 8pm PDT with ‘The Innocents’ from 1961. It’s based on ‘The Turn of the Screw’ and stars Deborah Kerr. Join us in the movie-night-text channel of the discord (discord.gg/defcon) for an eerie good time.
DEF CON Training is headed back to Bahrain on November 9-11, at the Wyndham Grand Manama. The course line up has a bit of everything - AI, threat hunting, cryptocurrency, cloud infrastructure, and more!
Now's a great time to make plans to add to your skill toolkit before the end of the year. Browse the course catalogue and secure your seat today:
Our #Tor relay and .onion services have been upgraded to the latest security critical version. Please update your browsers and server:
https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.13/ChangeLog
Changes in version 0.4.9.13 - 2026-09-23 This security release includes several high severity fixes, once again originating from the LLM report firehose. The fixes affect all Tor components: relays, clients, and onion services. We strongly recommend upgrading as soon as possible.
o Major bugfixes (security):
- Avoid a set of possible memory corruption, double-free, and null pointer dereference bugs that could occur with some reverse DNS virtual address configurations. Fixes bug 41381; bugfix on 0.1.0.1-rc. Tracked as TROVE-2026-051.
- Avoid cacheing DNS PTR responses when DNS caching is disabled.
Previous code to prevent this caching parsed the response addresses incorrectly, and defaulted to caching when the address could not be parsed. Fixes bug 41380; bugfix on 0.2.4.7-alpha. Tracked as TROVE-2026-050.
o Major bugfixes (client stream handling):
- Stop trying to reattach BEGIN_DIR directory streams. Previously we would look at the reason field in the END cell and consider retrying it like a normal BEGIN exit request, which led to bizarre behavior. TROVE-2026-052. Fixes bug 41369; bugfix on 0.1.2.5-alpha.
o Major bugfixes (client, guard):
- Stop blaming guards for circuit, stream, directory-request, and generic channel-close failures, and instead only record guard failure once per unsuccessful outgoing connection establishment.
This also covers directory guards, synchronous failures, and proxy or pluggable transport paths. This fixes TROVE-2026-030, TROVE-2026-038, TROVE-2026-041. Fixes bug 41360; bugfix on 0.3.0.1-alpha, bug 41365; bugfix on 0.3.0.1-alpha, and bug 41366; bugfix on 0.3.0.1-alpha.
o Major bugfixes (connection handling):
- Fix a use-after-free when a TCP connection succeeds immediately but starting its TLS handshake fails. Fixed by detaching the OR connection from its channel before freeing the channel, so deferred connection cleanup cannot access freed memory. This fixes TROVE-2026-056. Fixes bug 41398; bugfix on 0.2.4.4-alpha.
o Major bugfixes (onion service):
- A service-side rendezvous circuit that failed before reaching the rendezvous point was relaunched twice (once when marked for close and once more when freed), producing two concurrent circuits that carried the same rendezvous cookie and key material and, with repeated failures, 2^(N+1)-1 circuit builds per INTRODUCE2 instead of N+1. It is now relaunched exactly once. TROVE-2026-058. Fixes bug 41408; bugfix on 0.4.7.11.
- Rotate intro point at the service if the INTRODUCE2 replay cache is at capacity. TROVE-2026-012. Fixes bug 41256; bugfix on 0.3.2.1-alpha.
o Major bugfixes (onion service, TROVE):
- Reject INTRODUCE2 cells containing a zeroed rendezvous point ntor onion key. Previously, we would record a first-hop failure against a guard that was never contacted. This is trove TROVE-2026-030 Fixes bug 41360; bugfix on 0.4.9.1-alpha.
o Major bugfixes (relay, ):
- Remove circuits waiting for a channel from the pending channel list as soon as they are marked for close instead of waiting until they are freed. Fixes bug 41393; bugfix on 0.2.8.1-alpha.
o Major bugfixes (stream isolation):
- When a client establishes a circuit to an onion service, but the original stream had already closed, we were mistakenly clearing the isolation parameters on that circuit, allowing it to be reused by a future stream from a different isolation context. A malicious onion service or HSDir relay could use this technique to break first-party isolation (FPI) in Tor Browser. TROVE-2026-053. Fixes bug 41368; bugfix on 0.2.3.3-alpha.
🚨 Dates Updated and Location Confirmed! 🚨
DEF CON Training is headed back to Bahrain on November 9-11, this time at the Wyndham Grand Manama. The course line up has a bit of everything - AI, threat hunting, cryptocurrency, cloud infrastructure, and more!
Now's a great time to make plans to add to your skill toolkit before the end of the year. Browse the course catalogue and secure your seat today:
https://me.shop.defcon.org/collections/trainings
📆 November 9-11, 2026
📍 Wyndham Grand Manama
DEF CON Middle East
#DEFCON #DEFCONMiddleEast #DEFCONTraining #CyberTraining #HandsOnTraining #EthicalHacking #AI #InfoSec #threathunting #cloud #Cryptocurrency #Bahrain #MiddleEast
All systems are go for DEF CON Singapore 2!
We’re excited to announce our return to Singapore 4-6 March, 2027.
Even better, DCSG2 follows directly after Black Hat Singapore. For BH attendees it’s a perfect opportunity to make a week of it.
We’ll be opening online registration soon.
We’re back at the lovely and capacious Marina Bay Sands, and we’re bringing the whole DEF CON experience with us. World class talks, immersive Villages, contests and entertainment.
Of course, if you want to do more than just attend, watch this space. Now that the dates are set we’ll be posting Calls for Papers, Contests, Villages, Communities, and Entertainment. The opportunities to participate are legion.
DEF CON Singapore 1 was amazing. We’re looking forward to rejoining our new friends and making new memories. We hope we’ll see you there.
Please save the date and follow us at defcon.social for all the latest news.
See you soon.
