Hacker Summer Camp trends, npm kills 2FA-bypass tokens, DPRK tradecraft

So let's start with Hacker Summer Camp.

Takeaway number one, well, first off, let's rewind.

Maybe not everybody listening knows what Hacker Summer Camp is, but it's the nickname for a week in Las Vegas in the middle of the summer, hence Summer Camp, where a lot of the cybersecurity industry goes for conferences.

And it used to be, I think, just three conferences.

And now, like, there's no way you could go to all of them.

There's B-Sides Las Vegas and Black Hat and DEF CON.

Those are the three big ones.

There was an unprompted thing.

There was an AI summit.

The list goes on.

There was a ton of stuff.

We went to, besides Black Hat and DEF CON, they all have different flavors.

You see different things.

You talk to different people.

I think that's part of what makes the week a little bit interesting for us is it's an opportunity to see a lot of what's going on.

let's start with AI first.

So here's my observation.

And I kind of think of things sometimes in terms of conferences because when you go to a conference, you start to hear what a lot of people are thinking at once.

So last year, 2025 at RSA, the AI... industry for security was very new and a lot of the narrative was about, this is going to be terrible.

Basically, we're all headed toward doom.

We don't know what's going to happen, but engineering is going bananas and we have no idea.

That's how I would describe the very early conferences when AI-driven stuff first started coming out.

And then starting like last fall when I was at LastCon and then into the spring, what I started seeing more of was how security teams can operationalize AI to do their jobs more efficiently, to keep up.

Like it was a lot more practical.

We're starting to see another... uh evolution you know in terms of it being practical but also finding the edges so you know paul you mentioned as we were prepping an observation that um the last mile is the issue at this point uh so say more about what you feel like is missing because obviously it's not perfect