Inside Black Hat & DEF CON: Hacker Summer Camp Decoded

Black Hat and DEF CON run back-to-back in Las Vegas each summer, and to an outsider they can look like one continuous event. They are not. They were founded by the same person — Jeff Moss started DEF CON in 1993 and Black Hat in 1997 — but they have grown into two institutions with almost opposite personalities. Black Hat is a polished, corporate, business-oriented conference; DEF CON is a sprawling, hands-on, community-run gathering. The practitioners who get the most out of the week treat them as two halves of a whole, not as interchangeable tickets.

Black Hat: the corporate briefing

Black Hat is where security meets the boardroom. Held in a convention centre with the production values of any major industry event, its centrepiece is the Briefings — peer-reviewed talks presenting original research, often the first public disclosure of a significant vulnerability or technique. The bar for acceptance is high, and the audience skews toward professionals, vendors, and decision-makers. This is where a researcher's year of work gets its formal debut, and where the industry takes the temperature of emerging threats.

Arsenal, Trainings, and the Business Hall

Arsenal is Black Hat's open-source tool demonstration area, where authors show off the tooling they have built — a genuinely useful place to discover projects you will actually use. Trainings are multi-day, paid, hands-on courses that many organisations budget for as serious professional development. The Business Hall is the vendor floor: hundreds of booths, product demos, and — for better or worse — the marketing engine of the security industry in full swing.

DEF CON: the community gathering

DEF CON could hardly feel more different. It is larger, louder, cheaper to attend, and run substantially by volunteers ("goons"). Historically it has embraced a cash-at-the-door, no-badge-name ethos. Where Black Hat is about presenting to the industry, DEF CON is about doing — and its defining feature is the villages.

Black Hat tells you what was discovered this year. DEF CON hands you the lockpick, the radio, and the vulnerable target, and lets you discover it yourself.

Villages, CTF, and hands-on learning

A village is a themed space dedicated to a discipline — Car Hacking, Lock Picking, Aerospace, ICS/SCADA, Social Engineering, Voting, AI, and many more — each with its own talks, workshops, and equipment you can put your hands on. The Capture the Flag competition is legendary; DEF CON CTF is among the most prestigious in the world, and qualifying teams treat it as a year-round pursuit. Alongside the main talk tracks, this hands-on culture is what makes DEF CON a place to build skills rather than just absorb them.

How the two fit together

The reason they coexist so well is that they serve different needs at different altitudes. Black Hat is optimised for the professional who needs authoritative research, structured training, and vendor evaluation in a single trip — the kind of value an employer readily funds. DEF CON is optimised for the practitioner who wants to sharpen hands-on tradecraft, meet the people behind the tools, and immerse in the culture. Many people attend both, using Black Hat's briefings to learn what changed this year and DEF CON's villages to actually practise against it.

Beyond the big two

Hacker Summer Camp is bigger than its two anchors. Running alongside them is a constellation of smaller events — BSides Las Vegas with its community-driven talks and mentorship, The Diana Initiative focused on people underrepresented in security, and Squadcon and various invite-only gatherings — plus countless vendor parties and meetups. For many attendees these fringe events are where the deepest conversations happen, precisely because they are smaller and less frantic than the main halls. Budgeting a little time for them, rather than spending every waking hour inside the two headline conferences, is one of the more reliable ways to make the trip pay off.

Extracting value as a practitioner

The single most common mistake is trying to see everything. You cannot, and the attempt guarantees exhaustion. Plan deliberately: pick two or three Briefings that align with your work, choose one village to go deep on rather than sampling ten, and protect time for the hallway conversations that are often the most valuable part of the week. Talks are recorded and published afterward — the archives are free — so prioritise in-person time for the things you cannot get later: hands-on labs, live demos, and people. Hydrate, pace yourself, and practise good operational hygiene on a network famously described as the most hostile on earth: assume anything you connect could be probed, keep sensitive devices off the conference Wi-Fi, and patch before you travel.