Black Hat 2025: What we’re still thinking about

Black Hat 2025 recap emphasizing practical lessons: treat detection engineering like software development to bring versioning and unified knowledge to SOCs; carefully assess AI impacts and risks across organizational layers before deployment; and use a set of red-flag checks (Git presence, inconsistent language, exaggerated titles, repeated global employers) when vetting suspicious North Korean IT job candidates. Overall, this is a conference summary offering operational guidance rather than a technical incident report.