Wes Wright
Senior Security Consultant
Bishop Fox
About
Wes Wright is a Senior Security Consultant at Bishop Fox and the founder of Hill Country Hacking. With over 10 years of experience in the cybersecurity industry, Wes has conducted offensive engagements against web and mobile applications, cloud infrastructure, and enterprise networks. He is also experienced in on-site and remote social engineering. He holds a B.S. in Computer Engineering from Texas A&M University and a Master of Science in Information Security Engineering from the SANS Institute of Technology. Wes also maintains 11 GIAC certifications, along with his CISSP and CompTIA A+.
Sessions
Getting the Most Out of Security Testing: A Hacker's Perspective
What you will learn:
Offensive security assessments are where defenders get a front-row seat to how real operators hunt, pivot, chain weaknesses, and break assumptions. This isn’t about checking boxes or dumping CVEs into a report; it’s seeing how attackers actually move through an environment once they get a foothold. Which detections fail. Which trust relationships collapse. Which “low-risk” issue quietly turns into domain admin at 2 a.m. And now AI is pouring fuel on both sides of the fight. Recon is faster. Phishing is sharper. Social engineering scales. Exploit development and research cycles are compressing. Attackers are iterating faster than most organizations can triage. Defenders don't just need more visibility; they need to understand attacker tradecraft well enough to anticipate how modern intrusions unfold before the alarms start firing. In this session, I’ll share lessons learned from over a decade of penetration tests and adversary simulations, breaking down the symmetry between offense and defense through the lens of real attack paths, privilege escalation chains, operational blind spots, AI-enabled abuse cases, and the kinds of mistakes attackers love finding in mature environments. Whether you’re running a SOC, leading a security program, or trying to get more than another PDF out of your next pen test, this talk is about understanding how attackers actually think and how defenders can weaponize that perspective to become harder targets.
Unfair Advantage: How AI Supercharges Hackers, Defenders, and Founders
What you will learn:
In 2026, anyone with code and cyber skills walks into the game with an unfair advantage. A generation ago, you needed a Fortune‑500‑sized R&D budget to build serious security technology; today, small, focused teams can ship AI‑powered security products that rival legacy vendors and realistically chase unicorn outcomes. In this session, Marcus J. Carey, Principal Research Scientist at ReliaQuest and creator of the Tribe of Hackers series, breaks down how AI shifts the balance of power for red teams, blue teams, and founders. We’ll walk through concrete AI workflows that amplify recon, exploit research, detection engineering, purple teaming, and incident response—and how turning those workflows into product is the new unfair advantage. This talk is built for people who ship, patch, and respond, not people pitching slideware.