-

Social Engineering Expert and Hacker Rachel Tobac to Deliver Keynote at CyberSheath's CMMC CON 2025

RESTON, Va.--(BUSINESS WIRE)--With federal contractors facing mandatory CMMC compliance deadlines and sophisticated social engineering attacks on the rise, defense industrial base (DIB) organizations need proven strategies to protect sensitive data from human-centered threats.

CyberSheath, the largest CMMC managed service vendor in the DIB, will host its sixth annual free virtual conference, CMMC CON 2025: Compliance Blueprint – Plan. Execute. Certify., on Sept. 24-25, 2025. Rachel Tobac, renowned hacker and CEO of SocialProof Security, will deliver the keynote on the event’s first day. She’ll break down recent cyberattacks in the news and how to defend against the latest hacking methods, even when criminals are using AI. Her tales from the field and live hacking demonstrations throughout the presentation are sure to keep you and your team “politely paranoid” to catch the next human hacker in the act.

“Rachel’s hands-on experience exposing vulnerabilities through social engineering gives her a unique perspective on the threats our DIB contractors face daily,” said Eric Noonan, CEO of CyberSheath. “Her ability to demonstrate how attackers exploit human psychology makes her the perfect speaker to help our attendees understand why CMMC compliance is so crucial and defend against these sophisticated tactics.”

Tobac gained recognition in DEF CON’s Social Engineering Competition, establishing her as a formidable expert in the field. As CEO of SocialProof Security, she helps organizations strengthen their security posture through targeted training and penetration testing focused on social engineering threats.

Her cybersecurity expertise has been sought after at the highest levels of government. Tobac served on the CISA Technical Advisory Council under Director Jen Easterly, where she contributed to national cybersecurity initiatives. Beyond her professional achievements, Tobac serves as Chair of the Board for Women in Security and Privacy (WISP), where she works to advance women leaders in cybersecurity fields.

CMMC CON 2025 will feature sessions from leading experts covering compliance strategies, threat mitigation, legal insights, and practical steps for achieving and maintaining CMMC certification. The two-day virtual event runs from 9 a.m. to 1 p.m. EDT each day, providing attendees with actionable insights to enhance their cybersecurity posture and meet Department of Defense requirements.

Learn more about CMMC CON 2025 and register to join the two-day event.

About CyberSheath
Established in 2012, CyberSheath is one of the most experienced and trusted IT security services partners for the U.S. defense industrial base. From CMMC compliance to strategic security planning to managed security services, CyberSheath offers a comprehensive suite of offerings tailored to clients' information security and regulatory compliance needs. Learn more at www.cybersheath.com.

Contacts

CyberSheath Services International, LLC
Kristen Morales
Kristen.Morales@cybersheath.com

Lexie Capperella
Gregory FCA for CyberSheath
cybersheath@gregoryfca.com

CyberSheath


Release Versions

Contacts

CyberSheath Services International, LLC
Kristen Morales
Kristen.Morales@cybersheath.com

Lexie Capperella
Gregory FCA for CyberSheath
cybersheath@gregoryfca.com

Social Media Profiles
More News From CyberSheath

Pentagon’s James Mismash to Keynote CMMC CON 2026

RESTON, Va.--(BUSINESS WIRE)--On July 13, the Pentagon suspended CMMC Phase 2, pausing mandatory third-party certification requirements while the Department conducts a 60-day review of the program. The announcement created immediate questions across the defense industrial base (DIB) about what changed, what did not, and what contractors should expect next. To explain the government’s perspective, CyberSheath, one of the most experienced and trusted IT security services partners for the U.S. DIB...

New Report Shows Defense Contractors’ Self-Reported Cybersecurity Scores Are Rising as Confidence in Their Accuracy Plunges 24 Points

RESTON, Va.--(BUSINESS WIRE)--The Cybersecurity Maturity Model Certification (CMMC) program is a Pentagon framework that became federal defense contract law last November, requiring defense contractors to prove their cybersecurity practices meet federal standards. In July, the Pentagon paused the requirement for third-party verification, leaving the defense industrial base (DIB) to rely on self-attestation. A study conducted by Merrill Research and commissioned by CyberSheath found that contrac...

CyberSheath Guides Woman-Owned Small Business Gemini Industries Forward with CMMC Level 2 Certification Despite Phase 2 Pause

RESTON, Va.--(BUSINESS WIRE)--The Pentagon suspended CMMC Phase 2 requirements on July 13, pausing the mandatory third-party assessment requirement that had been set to take effect Nov. 10. For some defense contractors, the announcement was a reason to wait. For Gemini Industries, a technology solutions provider specializing in mission-critical support for U.S. government agencies and national security customers, it reaffirmed a decision the company had already made: invest in cybersecurity and...
Back to Newsroom