2026 Speaker

Josh Brody ran HeheStreams, a sports piracy streaming service that maintained unauthorized access to MLB, NBA, NFL, NHL, and more than a dozen other streaming platforms from 2016 to 2021 by defeating authentication and session controls on each, sustained against five years of active countermeasures. Separately, he identified critical vulnerabilities in Major League Baseball systems. Both activities were criminally charged and collapsed in widespread public reporting into "hacking Major League Baseball."

He was subsequently sentenced to federal prison and ordered to pay $3M in restitution. He now researches how cybercriminal reputations get constructed and inflated through the threat-intelligence-to-prosecution pipeline, with his own case as a primary source. He continues to do offensive security research and has disclosed several critical-severity CVEs.