Schedule
<Talks_That_Break_Boundaries/>
09:00
–
09:40
Sean Hopkins (US) – Agentic AI Development for Red and Blue Teams
09:45
–
10:25
Gergo Gyebnar (HU) – Detection-as-Code in Practice
10:30
–
10:50
Tobias Schrödel (DE) – The “I’m not a robot” trap
Understanding Authentication Bypass Vulnerabilities
10:50
–
11:10
Cofee Break
11:10
–
11:50
Erica Burgess (US) – Multi-Modal Steganography and Attack Chaining
11:55
–
12:35
Csaba Ajtony (HU) – Free-Droid: Building a Sovereign Robot – Open-Source LLMs, Fine-Tuning, and Why You Should Own Your Robot’s Brain
12:35
–
13:35
Lunch Break
13:35
–
14:15
Arad Donenfeld (IL/PL) – The Agents of Chaos: AI Driven Malware Generation
14:20
–
15:00
Csaba Fitzl (HU) – macOS Mounting Madness
15:05
–
15:25
Yossi Sassi (PT) – How to NOT Mess Up PowerShell for Security with AI: Tips from Bad Experience
15:25
–
15:45
Reboot
15:45
–
16:25
Aditya Singh (IN) – Trojan Penguin in the Windows: Advanced Attack Vectors Through WSL
16:30
–
17:10
Etizaz Mohsin (PK) – VibeShell: How Trusting Your AI IDE Costs You Your Machine
17:15
–
17:55
Chen Shiri (ISR) – The Unseen Secrets of the Cloud and How They Surface
09:45
–
10:25
Angie Agee – (US-MX) – Beneath the Stack: Detecting Physical-Layer Telecom Threats Your SIEM Will Never See
10:30
–
10:50
Koltai Beatrix (HU) – CAN We Trust Your Results? A Cross-Dataset Study of Automotive IDS Evaluation
10:50
–
11:10
Cofee Break
11:10
–
11:50
Kirils Solovjovs (LV) – Reverse Engineering the DUOX PLUS Protocol
11:55
–
12:35
Nilufar Alaskarli and Bazil Hassan (AZ/HU) – 3 Parsers Walk Into a Bar: What They Disagree On Can Hurt You
12:35
–
13:35
Lunch Break
13:35
–
14:15
Allan Dall (AU) – Harvest Now, Decrypt Later Does Not Apply Here: A Threat Model for Post-Quantum Authentication
14:20
–
15:00
Roland Győrffi (HU) – Polyglots: Schrödinger’s Files
15:05
–
15:25
Jozsef Sandor (HU) – PROPS: Learning Stack Patterns for ROP Detection on Legacy ARM-based Devices
Securing the software supply chain sounds straightforward—until you try to do it...
Between SBOMs, signed artifacts, third-party risks, and ever-growing customer demands, even well-resourced teams struggle to keep up. This talk explores the messy, expensive reality of securing the supply chain in the context of today’s secure software development lifecycle (SSDLC).
Through a fictional case study, we’ll follow one company’s attempt to build a solid supply chain security strategy—and all the ways it goes sideways. You’ll walk away with a clearer view of the standards, the gaps, and the trade-offs, plus some practical takeaways you can apply without a massive budget or a 30-person AppSec team.
15:25
–
15:45
Reboot
15:45
–
16:25
Georges Bolssens (BE) – The Vulnpocalypse is Hitting the Physical Realm: Reverse-Engineering IoT Devices with Open Source Tooling and LLMs
16:30
–
17:10
Peter Simon (HU) – GPU-Accelerated Log Processing: The Road to 1 Million Events Per Second on Consumer Hardware
17:15
–
17:55
Shaked Reiner (IL) – Seizing the Means of Software Production: The Hidden Security Risks of AI Coding Agents