Monthly DEF CON-style meetups in San Antonio: talks, workshops, lockpicking, hacking, and community. Beginners Welcome!!

RSVP
When: 4th Thursday · 6:30 PM NE Lakeview · Paluxy Hall · Bluebonnet Room (3rd floor) Cost: Free / Open to Public
This Week · September Meeting

Anatomy of a Modern Supply Chain Attack: Github Actions FTW!

Speaker: JR Hernandez

In the eternal words of Bob Dylan 'the times they are a-changin'.

Modern supply chain attacks hit like a gut punch for security folks because they exploit something we hold sacred, our ability to share code (open-source software). In this talk I will cover an attack that targeted coinbase but ended up impacting over 23000 repositories.

The attack targets the DevOps mindset of automating everything. The attackers exploited weaknesses in the CI / CD pipeline and utilized Github Actions to steal infrastructure secrets. Stealing secrets is game over for many companies and these attacks are going to keep happening because they are successful and difficult to stop. There is no easy fix for supply chain attacks but I will discuss utilizing tools like the zero trust model that can reduce the blast radius of these attacks.

Join me as we explore this new wild frontier because one thing is certain 'the times they are a-changin'.

September 24, 2026 6:30 PM NE Lakeview · Paluxy Hall · Bluebonnet Room (3rd floor)
Next Month · October Meeting

It's Kinda Like Dune: A Look Into the Shai-Hulud Malware

Speaker: Draggr

Shai-Hulud is a term given by the Fremen of Arrakis to the gargantuan sandworms that inhabits the dunes of Arrakis in Frank Hebert's Dune. Shai-Hulud is also a self-propogating npm worm that has infected tens of thousands of GitHub repositories and affected hundreds of users, with the latest iteration of the malware spotted as of April 2026.

In this presentation, we will look at the findings posted by established malware researchers and highlight their observations in an entertaining way.

October 22, 2026 6:30 PM NE Lakeview · Paluxy Hall · Bluebonnet Room (3rd floor)
2026 Coming Soon

Upcoming Talks

  • September: Git Lab Actions
  • October: It's Kinda Like Dune: A Look Into the Shai-Hulud Malware
  • November: The 12 Talks of Christmas (November 19th)
  • December: Hacker Family Movie Night (War Games)
Want to speak? Join Discord
Archive

Past Meetings

2026
  • January: Speaker REDACTED — DEF CON SATX first After Dark Talk (18+ Only)
  • February: Rex — "Pentesting AI-Integrated Systems"
  • March: PaPPY - “Who’s the Boss Now? Owning the BossNet C2”
  • April: Git for Dummies — 2WheelHacker
  • May: Hunting Down Sex Predators — Shamel (aka Nathan)
  • June: 2 year Anniversary Party - Hacker Horror Stories
  • July: Extracting Secrets from Neuromorphic Hardware Via Power side-channel
  • August: NLC Lakeview Heist
2025
  • January: Jayson E. Street — "Just Security Things with Jayson"
  • February: SciaticNerd — "Your Data, Different Cloud"
  • March: 2025 After Dark Talk
  • April: Jonathan Gonzalez — Adversarial Use of AI
  • May: 1 Year Anniversary Party
  • June: Nathan Reyes — "The Cell Tower Talk"
  • July: Jonathan Gonzalez — "Investigation Analysis 101"
  • August: PaPPY — "Clickfix: When CAPTCHA Solves You"
  • September: Draggr — Mirai Variant Analysis
  • October: b00ey — "Assembly 101"
  • November: 12 Talks Before Christmas
  • December: Hackers Movie Night + NightHax Awards
New Here?

Frequently Asked Questions

What is DCG-SATX?

DEF CON Group San Antonio (DCG-SATX) is a local community of security enthusiasts, hackers, students, and professionals who meet monthly to learn, share, and connect.

Who can attend?

Everyone. Meetings are free and open to the public — beginners, students, and professionals alike.

Do I need hacking skills?

No. All skill levels are welcome, and no prior experience is required.

When and where do you meet?

We meet on the 4th Thursday of every month at 6:30 PM at Northeast Lakeview College — Paluxy Hall, Room 101. View map →

What should I bring?

Just yourself. A laptop is optional.