Black Hat sells, DEF CON dares, both leave your contacts cold.
Two conferences, one Vegas week, opposite cultures. Here is what Black Hat USA and DEF CON 34 showed about the year's security landscape, and what happens to every contact you made there.
The come-down after the last village closes
The last shuttle back from the Las Vegas Convention Center empties out near midnight on the final Sunday of DEF CON. Somewhere in a hotel a few blocks off the Strip, a stack of badges and lanyards sits on the desk next to a phone with a dead battery. Six days earlier that same operator worked the Black Hat business hall in a collared shirt, trading cards with vendors. Then the shirt came off, the DEF CON badge went on, and the villages swallowed the rest of the week. Now it is over. The names are on the badges. The reasons those names mattered are already fading.
Two conferences, one week: the Vegas split
Call it the Vegas amnesia. Two of the largest security gatherings in the world run back to back in the same city, and they could not be further apart in temperament. Black Hat is a business conference: keynotes, paid briefings, a floor built to sell. DEF CON is a community: villages, contests, badge-hacking, research shared for its own sake. An attendee moves between both inside a single week. What survives the flight home is identical at both ends, which is to say almost nothing. The recall failure does not care which culture you were standing in when you made the contact.
One week, two crowds
Black Hat is where security gets sold: paid briefings, a keynote stage, a vendor floor. DEF CON is where it gets taken apart: villages, contests, research shared for its own sake. Most serious attendees do both, which is why the follow-up load doubles in the same week.
Why 'just scan the badge' is the wrong takeaway
The reflexive fix everyone reaches for is the badge scan. Scan the badge, capture the lead, move on. That solves the least valuable part of the problem. A scan records a name, a company, an email. It records nothing about why you stopped to talk, what the person was actually building, or the specific thing you promised to send them on Tuesday. The security crowd knows this better than most, because half the value of the week happens in the hallway track and the after-parties, exactly where no scanner reaches.
The badge scan captured a name. The conversation worth following up on lived only in your head.
What actually landed on the floor and in the villages
Three threads ran through this year's Vegas week. The first was vendor consolidation: it was the dominant subtext of the business hall, shaping which booths drew crowds and which briefings ran long. The second was the maturation of AI red-teaming as its own research area: Dreadnode's Ads Dawson appeared across three villages at DEF CON 34, including a keynote panel at the Red Team Village, August 7–9. ([source](https://dreadnode.io/company/newsroom/black-hat-2026-def-con-ai-security-forum/)). The third was posture: with CISA was led by Acting Director Dr. Madhu Gottumukkala at Black Hat, speaking on readiness, response, and resilience. ([source](https://www.facebook.com/CISA/videos/were-heading-to-vegas-for-this-years-blackhat-hackerand-were-bringing-the-heat-o/1971901010296245/)), the defensive community spent the week reading the tea leaves on federal support. Each thread produced its own set of hallway conversations, and each of those conversations is a follow-up someone now has to remember.
The pattern in practice: sixty scans and a blank week
Picture the founder who came to sell. She works the Black Hat floor for two days and leaves with sixty badge scans, a dozen of them worth real money. Then DEF CON starts. She spends three days in the villages, has four conversations that could turn into hires, and one with a researcher who wants to pilot her product. By the time she is through airport security on Sunday she has a phone full of names and a head full of fog. Monday she is back in her inbox. The sixty scans are a spreadsheet of strangers. The five conversations that mattered never got written down, because writing them down in the moment would have meant leaving the moment.
What changes if the room was worth capturing
If the week is worth the flight, the badge, and the four figures it costs to attend, the room is the asset. Not the swag, not the session recordings that get posted online anyway. The room. The value of Black Hat and DEF CON is the density of people worth knowing per square foot, and that value drains on a timeline measured in days. Capture the context while you are standing in it and the week compounds into deals and hires. Lose it and you paid to attend a very expensive party.
Where the follow-up actually breaks
This is the specific gap Met's Event Mode was built for. Event Mode keeps the room captured while you keep talking: scan a card or add a face, drop a line about what they were working on and what you owe them, then move to the next conversation without breaking stride. The context rides with the contact instead of living in your memory until it does not. Storage is iCloud only, which the security crowd tends to ask about first. Your contacts stay yours. Nothing sits on a vendor's server waiting to become part of next year's Black Hat talk.
What the Met Desk is tracking next
The Met Desk is watching two things after this year's Vegas week. Whether the AI red-teaming research that landed on stage turns into shipping product by RSA in the spring, and whether the vendor consolidation thread changes who is even exhibiting at Black Hat 2027. Both shape who is in the room next year. Who is in the room shapes who is worth remembering.
Set up Event Mode before your next conference and fly home with the room, not a spreadsheet of strangers.
Met is built for the person who works both halls and the villages, then flies home to a pile of names that mean nothing by Monday. Event Mode captures the context in the moment, and iCloud-only storage keeps every contact yours.
