Expel at Black Hat and DEF CON 2026

Hacker Summer Camp 2026 is upon us. Here’s where to find Expel.

01

Before you leave the airport…

Tuesday, August 4 – Thursday, August 6
LAS Airport Terminal 1 & 3

Your Uber or Lyft can wait a minute, but your Expel Vegas Survival Kit can’t. Swing by Liquor Library, next to baggage claim at Terminals 1 and 3, and grab your VIP kit—while supplies last. It’s a small taste of how we operate: always looking out, even when you don’t ask. We’re not just at the airport. Look for us again on your ride down the Strip on the way to your hotel.

02

Black Hat Speaking Session:
AI Security Risk, Decoded

Wednesday, August 5 at 3:50pm

James Shank, Expel’s Director of Threat Operations, breaks down a practical framework for tackling AI risk—built for security leaders, not vendors.

Add to agenda

03

DEF CON Booth #1410

Friday, August 7 – Sunday, August 9

Find us at Booth 1410 on the DEF CON floor. Swap war stories with our analysts, see what we’re building, and grab swag you won’t find anywhere else—DEF CON exclusive, while supplies last—plus our revamped Oh Noes, leveled up and ready to test your skills.

James Shank, Director of Threat Operations at Expel

Black Hat Speaking Session

AI Security Risk, Decoded: A Framework Built for Security Leaders

James Shank, Director of Threat Operations, Expel
Wednesday, August 5 at 3:50pm

AI risk conversations tend to spiral into abstraction fast. In this session, James Shank gives a practical framework for categorizing distinct AI risk domains. CISOs and security teams get a shared language to identify where AI changes their security concerns, who owns what, and what to do next.

What you’ll walk away with:

  • A framework for splitting AI risk into domains you can actually act on
  • A clear path for assigning ownership across your organization
  • The words to move your board from anxiety to order

Add to your agenda

AI is the new attack surface.
Are you watching it?

AI has changed how you work, and opened a door nobody built a lock for. Most security programs can’t see what’s coming through it, let alone hunt or defend against it. Expel’s been quietly building the coverage that can. Stay tuned.