Cyber Brews presents Cyber Hiring Event and Career Expo
2025-11-04 07:30 - 18:00 (America/Chicago)
Cyber Brews invites you to the Cyber Hiring Event & Career Expo, on Tuesday, November 4, 2025, at the brand-new Trilogy Hotel in downtown Huntsville. This one-day experience brings together top cybersecurity employers, job seekers, and industry leaders for hiring, networking, and learning—all in one place.

Why attend

Meet hiring companies actively recruiting cyber talent

Hear 4 expert talks on resumes, certifications, strategy, and 2025 hiring trends

Network with professionals across government, defense, and industry

Resume Drop & Hiring Digest keeps the conversation going after the event

Quick agenda (Central Time)

7:30–8:30 AM – Welcome & Registration (coffee + light breakfast)

8:30 AM – Exhibit Hall Opens

10:00–3:45 PM – Speaker Sessions (4 talks, half-ballroom theater setup)

4:30–6:00 PM – Networking Social (light appetizers)

NOTE: This is not a NAC-ISSA sponsored event

AFCEA Autumn Gala: Harvesting Innovation
2025-11-06 17:30 - 20:00 | The Roundhouse, Huntsville, AL, 320 Church Street, Huntsville, 35801, United States
Celebrate fall with an evening of food, music, community, and giving back. This annual fundraiser brings together professionals and community members to support local STEM scholarships and educational programs. Enjoy a silent auction, DJ entertainment, a dynamic speaker (to be announced) and the presentation of scholarship awards.

**SPEAKER: COL Joseph Heyman, CIO (G6) Deputy Director**

NAC-ISSA members can use the AFCEA membership rate!

Cloudflare sponsors NAC-ISSA November 2025 lunch
2025-11-18 11:30 - 12:30 | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
Join NAC-ISSA as Cloudflare sponsors our November 2025 Chapter lunch. The event takes place at the Auburn Research and Innovation Center on Voyager Way in Research Park.

Adam Shattuck will present “Identifying and preventing bad actors in the current cybersecurity landscape”.

At Cloudflare, we have our eyes set on an ambitious goal — to help build a better Internet. We believe that with our talented team, smart technology and engaged users we can solve some of the biggest problems on the Internet. Just how big?

DC256 presents Bluetooth Low Energy (BLE) Hacking Workshop with Matthew McDougal
2025-11-21 18:00 - 20:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
DC256 is proud to host Matthew McDougal AKA Doogie presenting BLUETOOTH LOW ENERGY HACKING WORKSHOP. The event is being sponsored by the North Alabama Chapter of ISSA (NAC-ISSA).

Ever wonder how your fitness tracker, smart bulb, or IoT device talks to your phone? Ever want to see if you could hack into it? Join us for a fun, beginner-friendly workshop on Bluetooth Low Energy (BLE). We’ll break down how BLE devices connect & communicate. You’ll learn to use free tools to interact with devices, spot common security flaws, and explore how hackers might exploit them. No experience needed, just curiosity!

After the presentation, test your skills in a CTF-style challenge where you’ll hack simulated BLE devices. Bring an Android or iOS device with the LightBlue app installed, and we’ll provide the targets. By the end, you’ll have a new perspective on how BLE works—and maybe even hack your first device! We will be providing hardware to hack on so just bring your phone and laptop!

Be sure to join us at Gigaparts on Hwy72/University Drive. This is a free cyber community event with food provided. For more information, find DC256 on Discord or visit dc256.org.

NAC-ISSA Christmas Party
2025-12-09 18:00 - 20:30 | Stovehouse 3414 Governors Drive, AL, 3414 Governors Drive, Huntsville, 35805, United States
Members and a guest are invited to attend the annual NAC-ISSA Christmas Party. Join us for an evening of networking, good food and great door prizes! This year, we will be at the Electic Belle in the Stovehouse event center.

CyberSecurity Day at UAH with Palo Alto Networks
2025-12-11 09:00 - 17:00 | UAH Invention to Innovation Center (I2C), 850 Ben Graves Drive Northwest, Huntsville, 35816, United States
Due to goverment shutdown impacts, this event has been rescheduled from November 13 to a new date of December 11.

Palo Alto Networks is establishing an office on the campus of UAH in the I2C building. As a kickoff, they are inviting all interested in cybersecurity to a cybersecurity day event on Nov 13.

Register to attend for an exclusive, full-day event combining high-level thought leadership discussions with intensive, practical hands-on workshops, designed to equip your team with the skills and strategies needed to defend against modern threats in an evolving digital landscape.In today’s cybersecurity landscape, organizations face accelerating digital transformation and growing risks from sophisticated cyberattacks. This meeting provides the critical guidance and practical experience needed to proactively secure your networks and applications, moving beyond legacy models to embrace a machine-led, human-empowered defense platform.

For maximum, role-specific value across your entire team, the day is split into three areas of engagement opportunities:

Strategic Thought Leadership | These are high level briefs to drive thought leadership discussions among C-Level executives and security leaders, focusing on proactive measures and emerging security requirements.

Hands-On Workshops for Technical Mastery | Gain firsthand, interactive experience with solutions in a live, instructor-led lab environment. These concurrent Ultimate Test Drives (UTDs) are ideal for security analysts, incident responders, and SecOps staff.

Spend the Day with Experts | Engage directly with experts in an open format environment to discuss your specific security challenges and explore new ideas.

Ultimate Test Drive Course Descriptions:

Cortex Security Operations | In this section, we’ll showcase how our endpoint solutions and automation frameworks allow you to start your zero trust journey with knowledge of the device status and do so with fewer analysts.

Cloud-Delivered Security Services | A deep dive into our firewalls to show the subscriptions needed for STIG requirements. We’ll also bring in an identity service like Active Directory to enrich all of your data with the User-ID.

Next-Generation Firewall | This will cover how we enable Post Quantum Resistant cyphers today for all of your IPSEC tunnels on the firewall.

Cybersecurity Portfolio | Browsers are where 99% of our work is done today and we will show our browser with built in security equal to having a VPN and completely isolated browsing.

Be sure to register now to secure a spot.

NOTE: This event is not sponsored by NAC-ISSA. Registration is via the sponsor’s registration link below.

Tech Thursday Inside the Shark Tank
2026-01-15 18:00 - 20:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
DC256 and NAC-ISSA kick off our first “Tech Thursday” hands on workshop with “Inside the Shark Tank”. See inside of network traffic with the Wireshark network protocol analyzer. Pick apart packets piece by piece as we analyze networking traffic to tell a story of how different network devices talk between one another. Covering tips and tricks to quickly identify and troubleshoot networking issues, Attendees will learn how to capture and perform basic analysis on network traffic.

Attendees will learn how to capture and perform basic analysis on network traffic. Attendees should already understand networking basics, such as the OSI model, IP addresses, MAC addresses, the client and server relationship,the differences between TCP and UDP, and the concept of port numbers. DC256 posted a link for the event, which includes the download for Wireshark and PCAPs that we’ll be covering: https://dc256.org/tt/wireshark. The event supports anything on Windows, Mac, and Linux, although Windows is preferred.

DC256 requests attendees download the files in advance so that we can get everything rolling quickly.

Our instructor goes by the name Oyster. Oyster has been working as a cybersecurity professional for over a decade. His first love of computers started with networking fifteen years ago, and hasn’t slowed down since. Over the years, Oyster has held three Cisco Certified Networking Associate (CCNA)-level certifications. Oyster enjoys hacking on various objects in his spare time. His favorite shark is a hammerhead.

Ignition Under Fire: Exploring Cybersecurity Attack Vectors in Rocket Propulsion
2026-01-16 18:00 - 20:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
The increasing reliance on digital systems in modern rocketry, from design and manufacturing to launch operations and in-flight control, introduces significant cybersecurity vulnerabilities. Presentation, “Ignition Under Fire,” by Paul Coggin, explores the diverse attack vectors targeting rocket propulsion systems, examining potential consequences ranging from mission delays and data breaches to catastrophic failures. We will analyze the complex interplay of software, hardware, and network components within propulsion systems, identifying key weaknesses susceptible to exploitation. The presentation will delve into specific attack scenarios, software manipulation, sensor spoofing, and network intrusion, highlighting the potential impact on critical rocket equation parameters like delta V, thrust, fuel flow, and combustion stability. Furthermore, we will discuss the unique challenges in securing these complex systems. We will explore how a Zero Trust architecture can be implemented to enhance security by enforcing strict access control, micro-segmentation, and continuous authentication and authorization throughout the propulsion system.

Note: This is a DC256 event and registration or details handled through their website and on discord.

Insight Assurance sponsors NAC-ISSA Jan 2026 chapter lunch
2026-01-27 11:30 - 12:30 | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
Join us for the first NAC-ISSA chapter lunch as Insight Assurance comes to discuss some of the common pitfalls and issues that they have observed in dealing with clients on their CMMC journey. The “view from the trenches” is to be an engaging discussion that isn’t just a rehash of generic CMMC information. Attendees will walk away with some lessons learned that they can put into practice as they achieve certification for themselves.

Insight Assurance helps take the Complexity Out of Compliance. Regulatory requirements are evolving. Cyber threats are increasing. Insight Assurance helps you stay compliant, secure, and audit-ready — without the headaches.

Note the lunch is not on our usual third Tuesday due to holidays but will be held Tuesday, January 27. The venue is the Auburn Research and Innovation Center in Research Park and catering is by Rosies. This month’s door prize will be noise cancelling BOSE QuietComfort SC headphones.

Register today to get this on your calendar so you won’t miss the kickoff lunch for 2026.

Cyber Tabletop Exercise Training by Cyber Brews
2026-02-13 08:30 - 12:30 | Five Stones Research Corporation, 401 Wynn Dr NW, Huntsville, 35805, United States
Cybersecurity Tabletop Exercise (TTX) Design & Facilitation Workshop

This in-person tabletop exercise (TTX) training workshop is designed for professionals who want to do more than participate in tabletop exercises—they want to run their own.

Participants will experience a facilitated cyber incident tabletop while also learning how to design, conduct, and document tabletop exercises that support incident response readiness and CMMC Level 1 and Level 2 assessment objectives.

This workshop blends hands-on participation with practical instruction, giving attendees the tools and confidence to take tabletop exercises back to their own organizations.

What You’ll Learn

Participants will learn how to:

Design tabletop exercises aligned to organizational size, mission, and risk

Build realistic scenarios and injects that drive meaningful discussion

Facilitate tabletop exercises across technical and non-technical roles

Capture decisions, assumptions, and gaps during an exercise

Conduct effective hot washes and after-action discussions

Use tabletop exercises to support CMMC Level 1 and Level 2 practices, including incident response and operational readiness

You’ll see how a tabletop unfolds in real time, then break down why it was structured that way and how to replicate it.

What You’ll Experience

A guided, facilitator-led cyber incident scenario

Small-group participation with progressive injects

Real-time discussion and decision-making

Instructor walkthroughs of scenario design and facilitation techniques

Practical guidance on documentation and lessons learned

Templates and approaches you can reuse for your own exercises

This is not a lecture-only workshop. Active participation is encouraged, but no prior tabletop experience is required.

NOTE: This is not a NAC-ISSA event. Registration is handled through the Cyber Brews registration page.

Securing the Connected Transit Ecosystem: Why Next-Generation Systems Demand Next-Generation Testing
2026-02-17 11:30 - 12:30 | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
The NAC-ISSA February 2026 lunch will be chapter sponsored. We are proud to present our chapter member and former chapter president, Jason Cuneo. Jason has worked with large municipalities in the US to secure their mass transit systems. Join us for a look into a different segment of cybersecurity than you may typically think about.

Mass transit systems are rapidly adopting interconnected vehicle, infrastructure, and control technologies to improve safety, efficiency, and situational awareness. While these advances enable powerful new operational capabilities, they also introduce attack surfaces that traditional security testing approaches were never designed to evaluate. This presentation reviews prior research and recent security test events conducted on mass transit platforms, highlighting how enterprise-centric vulnerability assessment methodologies fall short in highly dynamic, V2X-enabled environments.

Additionally, we will discuss new testing methods including realistic traffic generation scenarios, protocol-aware threat emulation, and understand how attackers conduct modern vehicular platform attacks. This talk will conclude with recommendations for developing a more robust, reconfigurable testing environment that can keep pace with next-generation transit technologies.

Walton’s Southern Table will provide the catering. Door prize to be announced.

Tech Thursday: Making Your Own Wireshark Dissector for Mysterious and Unknown Protocols
2026-02-19 18:00 - 20:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
Presenter: Doogie

NAC-ISSA and DC256 present our second Tech Thursday of 2026 at Gigaparts on Feb 19 at 6:00PM. This hands-on workshop moves beyond filtering and display into the craft of understanding undocumented protocols and using that knowledge to create a reusable Wireshark dissector.

Attendees will walk away with their own network protocol dissector that can be used in any Wireshark instance.

Attendees should already understand networking basics, such as the OSI model, IP addresses, MAC addresses, the differences between TCP and UDP, and the concept of port numbers. Familiarity with Wireshark is recommended.

The event is open to anyone interested in cyber security, is free and pizza will be provided.

DC256 Presents: Artificial Doubt: The Collapse of Trust in Digital Materiel
2026-02-20 18:00 - 20:00 | GigaParts, 6123 University Dr NW, Huntsville, 35806, United States
Join DC256 at GigaParts on February 20th @ 6:00PM! Rodney V. will be giving a presentation — Digital Trust: The Collapse of Trust in Digital Materiel. We will also be making a special announcement at the event, so stay tuned!

For decades, digital evidence has quietly relied on a fragile assumption that authenticity could be inferred after the fact. Hashes, metadata, chain-of-custody forms, and expert testimony were “good enough” when fabricating convincing images, video, or audio was expensive and rare. Generative AI shattered that assumption and we need better means of security against threats that exploit this ambiguity.

This month’s presentation is sponsored by the North Alabama Chapter – Information Systems Security Association (NAC-ISSA). The event is free to attend, registration not required.

CMMC Coffee & Compliance Series Presented by CyberProtex
2026-02-26 08:00 - 09:30 | UAH Invention to Innovation Center (I2C), 850 Ben Graves Drive Northwest, Huntsville, 35816, United States
Join us for coffee and discussions on practical automation strategies to simplify CMMC readiness. You’re not alone. Thousands of SMBs in the DIB face the same challenge.

Meeting CMMC requirements doesn’t have to mean overbuilding your security program or blowing your budget. CMMC Without the Chaos is a practical, executive-friendly session designed specifically for small and mid-sized contractors looking to use automation to simplify compliance.In this Coffee & Compliance event, we’ll break down what automation realistically means for CMMC, where it delivers the most value, and where manual processes are still required. Attendees will learn how to reduce time spent on documentation and evidence collection, avoid common overengineering mistakes, and better leverage Microsoft tools they may already own.

This session focuses on doing enough—without doing too much—so organizations can stay contract-eligible while remaining efficient and audit-ready.

You’ll walk away with:

A realistic understanding of automation’s role in CMMC compliance

Practical ways to automate evidence collection and compliance tasks

Guidance on leveraging Microsoft 365 and Azure security capabilities

Insight into common automation pitfalls seen by assessors

A clear roadmap for simplifying CMMC readiness without chaos

Who Should Attend:Small and mid-sized defense contractors, subcontractors, IT leaders, security managers, compliance owners, and business leaders responsible for CMMC readiness.

NOTE: This is not a NAC-ISSA event. Registration is through CyberProtex.

Beers for Engineers with NAC-ISSA
2026-02-26 17:30 - 20:00 | InnerSpace Brewing, 2414 Clinton Ave W, Huntsville, 35805-3014, United States
It has been far too long since we gathered to network over a fine craft beer and wood fired oven pizza! Members and friends of the North Alabama Chapter of ISSA are invited to join us at InnerSpace Brewing on Thursday, February 26. Membership not required!

This event is sponsored by NAC-ISSA. Registration not required but appreciated to help plan for the attendance.

Automating Exploitation with Agentic Systems presented by Jason Kearns. NAC-ISSA's March chapter lunch
2026-03-17 11:30 - 12:30 | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
Abstract: This session explores the emerging role of agentic AI in modern offensive cybersecurity operations. Through a guided presentation and discussion, we will examine how AI-driven agents can be used to automate elements of reconnaissance, web enumeration, and vulnerability discovery within red team workflows.

Agentic AI for reconnaissance and vulnerability discovery: How autonomous agents can assist in identifying attack surface, enumerating web assets, and surfacing potential vulnerabilities.

Collaborative agent architectures: Designing systems where multiple specialized agents coordinate tasks to augment traditional security testing approaches.

Operational implications for red teams and defenders: How AI-enabled automation is changing the pace, scale, and accessibility of offensive security capabilities.

Attendees will leave with a practical understanding of how agentic AI systems can be structured, the opportunities and risks they introduce, and how these technologies may reshape both offensive and defensive cyber operations.

Tech Thursday presents Shell Sorcery: The Magic of the Linux Command Line
2026-03-19 18:00 - 20:00 | Gigaparts, Address 6123 University Drive, Huntsville, 35806, United States
NAC-ISSA and DC256 continue the Tech Thursday series with Shell Sorcery: The Magic of the Linux Command Line.

Linux isn’t as scary as it seems! This crash course uses gamification to introduce you to the command line. Instead of rote memorization, you will solve logic puzzles to master the three pillars of daily Linux work: secure access, file navigation, and data extraction.

There is no pre-requisite knowledge for attendees, but an open and curious mind is encouraged!

Participants will need to have an SSH client installed before class begins. We recommend PuTTY: https://www.chiark.greenend.org.uk/~sgtatham/putty/

Beers for Engineers with NAC-ISSA
2026-03-26 17:30 - 19:30 | InnerSpace Brewing, 2414 Clinton Ave W, Huntsville, 35805-3014, United States
As of Sunday, March 8, Daylight Saving Time returns and the days get longer. Come celebrate the longer, warmer days with NAC-ISSA and the North Alabama cybersecurity community at InnerSpace Brewing. Beers and Pizza on NAC-ISSA; networking on YOU!

Southeast Cybersecurity Summit
2026-04-15 08:00 - 2026-04-16 17:00 | Birmingham Jefferson Convention Center, 2100 Richard Arrington Jr Blvd N, Birmingham, 35203, United States
The Central Alabama Information Systems Security Association (CA-ISSA), InfraGard Birmingham Member Alliance (IBMA) and TechBirmingham are jointly hosting a cybersecurity conference in April and invite anyone interested to attend. BSides Huntsville will return in 2027 so NAC-ISSA. Chapter members and guests are encouraged to fill their 2026 need for content this spring with the Southeast Cybersecurity Summit.

About the Summit

The purpose of the Summit is to strengthen and promote the internet security profession in the southeastern United States region. That goal is achieved through event activities which result in relationship building, information sharing, and ongoing education and training focused on current technology challenges and solutions.The Summit will highlight the strength, diversity and economic impact of the technology companies and talent working and living in the southeast.

NOTE: This is not a NAC-ISSA event. Registration is handled via the event website.

Tech Thursday presents The Network Cartographer: The Art of Digital Door-Knocking with NMap
2026-04-16 18:00 - 20:00 | GigaParts, 6123 University Dr NW, Huntsville, 35806, United States
Taken straight out of a hacker’s toolkit, learn how to figure out what’s really running on your network!

Learn to look through the eyes of a hacker as we investigate open services and ports, so you can understand what steps to take to lower your footprint. This workshop will tell you how to quickly and definitively understand your network exposure once and for all.

Attendees should download and install Nmap on their machine prior to the beginning of class. Nmap can be found at: https://nmap.org/download

Chapter lunch with Jason Cuneo and Digital Forensics
2026-04-21 11:30 - 12:30 | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
Join NAC-ISSA for our April chapter lunch with Jason Cuneo. Jason will present on Digital Forensics. Catering and door prize to be announced.

Beers for Engineers with Women in Defense
2026-04-23 16:30 - 19:30 | InnerSpace Brewing, 2414 Clinton Ave W, Huntsville, 35805-3014, United States
Join the North Alabama Chapter of ISSA and the Tennessee Valley Chapter of Women in Defense as we co-host Beers for Engineers in April. Both organizations seek to grow the cyber community throughout North Alabama. We’ll run this event from 4:30 to 7:30 at InnerSpace Brewing. Come join us to meet new friends and help make our cybersecurity community even stronger!

WallArm sponsors May 2026 NAC-ISSA lunch
2026-05-19 11:30 - 12:30 | Auburn University Research and Innovation Campus, 345 Voyager Way, Huntsville, AL, 345 Voyager Way, Huntsville, United States
TOPIC: Business Logic Abuse: Technology Agnostic Mapping of Attack Types

OWASP’s technology specific top 10 lists have provided a ton of value, but it’s time for a different approach to business logic abuse. The rise of APIs and complex business logic attacks requires a new taxonomy that isn’t tied to a specific technology.
