Schedule

<Talks_That_Break_Boundaries/>

Room 1
Room 2

09:00
–
09:40

Sean Hopkins (US) – Agentic AI Development for Red and Blue Teams

09:45
–
10:25

Gergo Gyebnar (HU) – Detection-as-Code in Practice

10:30
–
10:50

Tobias Schrödel (DE) – The “I’m not a robot” trap

Understanding Authentication Bypass Vulnerabilities

10:50
–
11:10

Cofee Break

11:10
–
11:50

Erica Burgess (US) – Multi-Modal Steganography and Attack Chaining

11:55
–
12:35

Csaba Ajtony (HU) – Free-Droid: Building a Sovereign Robot – Open-Source LLMs, Fine-Tuning, and Why You Should Own Your Robot’s Brain

12:35
–
13:35

Lunch Break

13:35
–
14:15

Arad Donenfeld (IL/PL) – The Agents of Chaos: AI Driven Malware Generation

14:20
–
15:00

Csaba Fitzl (HU) – macOS Mounting Madness

15:05
–
15:25

Yossi Sassi (PT) – How to NOT Mess Up PowerShell for Security with AI: Tips from Bad Experience

15:25
–
15:45

Reboot

15:45
–
16:25

Aditya Singh (IN) – Trojan Penguin in the Windows: Advanced Attack Vectors Through WSL

16:30
–
17:10

Etizaz Mohsin (PK) – VibeShell: How Trusting Your AI IDE Costs You Your Machine

17:15
–
17:55

Chen Shiri (ISR) – The Unseen Secrets of the Cloud and How They Surface

09:45
–
10:25

Angie Agee – (US-MX) – Beneath the Stack: Detecting Physical-Layer Telecom Threats Your SIEM Will Never See

10:30
–
10:50

Koltai Beatrix (HU) – CAN We Trust Your Results? A Cross-Dataset Study of Automotive IDS Evaluation

10:50
–
11:10

Cofee Break

11:10
–
11:50

Kirils Solovjovs (LV) – Reverse Engineering the DUOX PLUS Protocol

11:55
–
12:35

Nilufar Alaskarli and Bazil Hassan (AZ/HU) – 3 Parsers Walk Into a Bar: What They Disagree On Can Hurt You

12:35
–
13:35

Lunch Break

13:35
–
14:15

Allan Dall (AU) – Harvest Now, Decrypt Later Does Not Apply Here: A Threat Model for Post-Quantum Authentication

14:20
–
15:00

Roland Győrffi (HU) – Polyglots: Schrödinger’s Files

15:05
–
15:25

Jozsef Sandor (HU) – PROPS: Learning Stack Patterns for ROP Detection on Legacy ARM-based Devices

Securing the software supply chain sounds straightforward—until you try to do it...

Between SBOMs, signed artifacts, third-party risks, and ever-growing customer demands, even well-resourced teams struggle to keep up. This talk explores the messy, expensive reality of securing the supply chain in the context of today’s secure software development lifecycle (SSDLC).

Through a fictional case study, we’ll follow one company’s attempt to build a solid supply chain security strategy—and all the ways it goes sideways. You’ll walk away with a clearer view of the standards, the gaps, and the trade-offs, plus some practical takeaways you can apply without a massive budget or a 30-person AppSec team.