2010, 2026

DeepSec 2026 Talk: Quantum Communication – Andreas Neuhold

Sanna/ October 20, 2026/ Conference/ 0 comments

Quantum computers will break the encryption we rely on today, and the clock is ticking. But what does that actually mean, and what can you do about it right now? This talk starts from the ground up, giving attendees an accessible introduction to the two quantum-safe building blocks: Post-Quantum Cryptography (PQC), a mathematical software-based replacement for classical key exchange, and Quantum Key Distribution (QKD), a physics-based approach that uses quantum optical channels to distribute keys with information-theoretic security. This talk cuts through the hype and delivers a technically grounded, practitioner-focused view of what quantum-safe communication actually means in 2026 and what you can deploy right now. Whether you are a security engineer, network architect, or technical decision-maker, this session provides the concrete technical foundation needed to assess, plan, and implement quantum-resistant communication today. We

1910, 2026

DeepSec 2026 Press Release: Physical Security Controls as a Universal Vulnerability

Sanna/ October 19, 2026/ Press, Training/ 0 comments

When security controls in the physical world fail, attacks are often much harder to detect. Many companies are now seeking certification to standards as part of supplier assessments and in response to higher security requirements. The ISO 27001 standard, for example, is a route many organisations are taking. Physical controls are also required as part of its implementation. DeepSec 2026 will introduce a three-day workshop that demonstrates how to bypass Physical Access Control Systems (PACS). Anyone who still thinks of analogue lock-picking is underestimating the seriousness of the situation. The specialist trainers will demonstrate how to bypass commercially available access systems on the European market. The focus will be primarily on the hardware, software, and access tokens used, such as cards or other data carriers. Bypassing Access Control Systems Physical access to infrastructure is

1910, 2026

DeepSec 2026 Talk: I Own Your “Internal” Domain… Weaponizing Name Collisions at Scale – Philippe Caturegli

Sanna/ October 19, 2026/ Conference/ 0 comments

What happens when someone else actually registered and operated your internal domain name? You leak credentials. Email gets mis-routed, deployment pipelines pull code from untrusted places, and most of the time, you don’t even notice for years. With over 1,200 new TLDs introduced over the past decade, many organisations are unknowingly using internal domain names that now exist as valid, publicly registerable FQDNs that they don’t own and never thought to claim. Name collision itself is not new. Researchers have documented it as a theoretical risk since 2013. But no one has studied it at scale, or answered simpler questions: how could threat actors identify a potential collision, and what would be the impact if they claimed a colliding domain and operated it ? We analysed nearly 39 million SSL certificates and over 9.5

0810, 2026

DeepSec 2026 Talk: Security, Trust & Privacy by Design for Smartphone Solutions – Kartik Lalan

Sanna/ October 8, 2026/ Conference/ 0 comments

Lacking security standardization in terms of usage policies, smartphones solutions are being poorly designed compromising end user’s data. Also lack of thorough risk management while developing such solutions leads to uncalculated risks emerging out of the platform. In this talk we will be discussing on drawing risk boundaries, so that making any smartphone based Solution, manufacturers and end users can achieve real data security and transparency. For instance, Very often we see solutions using additional fingerprint reader capturing raw images outside OS TEE despite beyond the promise of OS security e.g. user national identity program, using location service for security & safety solutions but those can be manipulated even without jail-breaking/rooting a device e.g. Covid’19 apps or banking or logistics etc., Payment POS without kiosk hardening which allows anyone use it fraudulently to phish

0710, 2026

DeepSec 2026 Talk: Keeping OT Insecure: A Masterclass on How To Make Hackers Happy – Melina Phillips

Sanna/ October 7, 2026/ Conference/ 0 comments

Did it ever happen to you as a kid, you’d see a machine, a switch, or a big shiny button, and you just had to know… “What happens if I press this?” Well, hackers never grow out of that phase. Except instead of breaking a toy, they poke at devices that control factories, power grids, HVAC infrastructure, alarm systems and really important stuff, and sometimes, we don’t even have to press a button. The system just hands us the keys like, “there you go, have fun”. To make matters worse, many of these environments were never designed keeping adversarial activity in mind. They were built to keep operations running, not to survive curious people, internal misuse, exposed interfaces, or attackers who understand how to abuse trust. In a lot of OT environments, convenience quietly

0610, 2026

DeepSec 2026 Talk: Connected, Tracked, Exposed: Threat Modeling a Production GPS Fleet Platform – Maria Afonina

Sanna/ October 6, 2026/ Conference/ 0 comments

A GPS fleet platform is a fleet of embedded devices in the field, a link over somebody else’s network, and a cloud back-end holding the location history of real vehicles and real people. Its customers in transport and logistics are increasingly subject to NIS2 obligations, which turns the vendor’s security posture into a contractual matter, so a weakness in the tracker is no longer just a technical bug, it is a compliance and procurement problem for everyone downstream. This talk walks through a structured threat modelling exercise built around a production GPS fleet management platform, conducted as part of an MSc thesis collaboration between KTH Royal Institute of Technology, the University of Trento and an Italian IoT company. We decompose the attack surface across three layers: the tracking device, the device-to-backend channel, and the

0210, 2026

DeepSec 2026 Press release: Security Vulnerabilities in Software

Sanna/ October 2, 2026/ Press/ 0 comments

Everyone is talking about Anthropic’s Mythos model. At its core, however, lies quality assurance, as always. The AI startup Anthropic has been pulling out all the marketing stops and has partially unveiled its new Mythos model. The company has promoted its benefits by highlighting the discovery of new security vulnerabilities, while also issuing warnings about the model. As expected, the media coverage has hailed the model and predicted the end of IT security. The DeepSec security conference has been focusing on new technologies for years and subjects them to rigorous testing. The Mythos model is no exception. Improved IT security Those responsible for securing digital infrastructure have long dedicated their efforts to improving existing software code and testing applications for security vulnerabilities. Key projects in the free and open-source software communities, in particular, have

0110, 2026

DeepSec 2026 Talk: Agent Memory Guard: Securing Long-Term Context in Autonomous AI Systems – Vaishnavi Gudur

Sanna/ October 1, 2026/ Conference/ 0 comments

As autonomous agents evolve from stateless chatbots to persistent systems with long-term memory, they inherit a massive new attack surface. “Agent Memory Guard” explores the critical security vulnerabilities introduced when agents can read, write, and act upon persistent context across sessions. This talk dissects real-world failure modes—such as memory poisoning, cross-tenant data leakage, and persistent prompt injection—and introduces a robust architectural framework for securing agent memory. Attendees will learn how to implement cryptographic memory signing, context-aware access controls, and adversarial memory sanitization to build agents that remember safely. We asked Vaishnavi a few more questions about her talk. Please tell us the top 5 facts about your talk: It focuses on agent memory and context integrity—what agents store and reuse across sessions—not another prompt-filter demo. Core failure mode: memory/context poisoning (durable writes that steer

2409, 2026

DeepSec 2026 Talk: Reverse Engineering Industrial Control System Malware – Diyar Saadi

Sanna/ September 24, 2026/ Conference/ 0 comments

This presentation explores how malware targeting Industrial Control Systems (ICS) and operational technology environments can evolve from a digital intrusion into a real-world operational threat. The session begins with an overview of how ICS environments function, why they are critical to daily life, and the security challenges created by legacy systems, increasing connectivity, and IT/OT convergence. The talk then transitions into advanced malware tradecraft used against industrial targets, including stealth execution, process manipulation, memory-resident activity, and staged intrusion techniques. Attendees will follow a practical reverse engineering and investigation workflow focused on understanding attacker behavior, identifying malicious execution chains, analyzing runtime activity, and correlating host and network artifacts. Designed for defenders, reverse engineers, and incident responders, the session provides practical insight into how industrial malware operates and how security teams can improve detection, investigation, and

1609, 2026

DeepSec 2026 Training: Hybrid Threats: OSINT for the Protection of Critical Infrastructure – Christina Lekati

Sanna/ September 16, 2026/ Training/ 0 comments

Today’s threat landscape is fast evolving into a complex hybrid battle-space. Nation-states increasingly seek to gain a geopolitical advantage through strategic and multi-domain adversarial campaigns that are designed to operate in the grey zone: below the threshold of open conflict, yet designed to deliver significant strategic, economic, and societal harm. These hybrid operations often combine social engineering, cyber intrusions, and physical damage or disruption (in any combination). Whether the goal is damage and sabotage, the destabilization of societies, or the theft of critical information and intellectual property, public and private organizations have become unwilling participants in this geopolitical chessboard. In times of geopolitical tension, protecting critical infrastructure becomes a high priority, and securing the human and physical perimeters of this infrastructure necessarily starts by understanding their level of exposure against adversarial tactics. Energy networks,

1509, 2026

DeepSec 2026 Talk: Blind Spots in the Software Supply Chain: What Security Scanners Miss – Ofri Ouzan

Sanna/ September 15, 2026/ Conference/ 0 comments

Modern software supply chain (SSC) security relies heavily on automated security controls. Organizations trust SBOM generators and Software Composition Analysis (SCA), secret scanners, malware scanners, reachability analysis tools, and recently also AI security scanners to identify risks before software reaches production. But what happens when the assumptions behind those tools are wrong? Over the past several years, our research focused on identifying fundamental blind spots across multiple application security categories. Rather than targeting a specific vendor, we analyzed how entire classes of security solutions make assumptions about where software, vulnerabilities, secrets, malware, and risks exist. We will present how these blind spots manifest in even the most popular software components, besides attacker-crafted components. In this talk, I will present real-world examples of blind spots we discovered, including software that completely disappears from SBOMs because

1109, 2026

DeepSec 2026 Training: AI Security Laboratory: Hands-On + Full-Stack (Lifetime Lab Access) – Dawid Czagan

Sanna/ September 11, 2026/ Training/ 0 comments

AI has introduced an entirely new layer of security risk — one that needs to be understood from both attacker and builder perspectives. This training is a hands-on, full-stack guide to that landscape, showing how modern AI systems are attacked, built, and used in real-world security. You will work through the offensive side of AI security with prompt injection, jailbreaking, and fuzzing of LLM applications. You will also apply AI in security engineering and daily operations — turn AI building blocks into practical workflows and use AI security tools for everyday tasks. Along the way, you will move into more advanced capabilities — building agentic AI for real-time security operations, applying AI to vulnerability research and PoC development, and exploring how smarter AI can assess other AI. The training includes hands-on exercises, reusable Python

1009, 2026

DeepSec 2026 Training: Anti-Forensics (and Anti-Anti-Forensics) Techniques for Incident Responders – Stephan Berger

Sanna/ September 10, 2026/ Training/ 0 comments

Today, incident response is more challenging because attackers use anti-forensic tactics to block data collection and weaken forensic evidence. In this course, you will take a technical look at these methods on Windows, Linux, and macOS. You will learn how attackers try to avoid logging, change filesystems, and slip past endpoint detection. The training is built around the ideas of “Anti-Forensics” and “Anti-Anti-Forensics.” For each evasion method, you will study how to detect it and how to recover evidence. The course highlights how to find traces left behind by attackers, even when they try to hide their actions. You will work with real case studies and hands-on labs, including MFT reconstruction, SRUM analysis, ETW evasion, and Linux runtime forensics. We asked Stephan a few more questions about his training. Please tell us the top

0909, 2026

DeepSec 2026 Training: Advanced Mobile Offensive Tradecraft – David Tancredi & Simone Scalco

Sanna/ September 9, 2026/ Training/ 0 comments

Artificial Intelligence is rapidly changing the way offensive security engagements are conducted, but most practitioners are still using it as a glorified chatbot. This hands-on training shows how to integrate modern reasoning models and autonomous agents into real mobile penetration tests and Red Team operations. This condensed session focuses on the synthetic attack techniques from the full course at Folposec, exploring how modern AI can be leveraged to execute realistic offensive operations. Through live demonstrations and practical examples, attendees will see how autonomous social engineering, AI-assisted smishing, real-time deepfake and vishing attacks, persistent conversational agents, and AI-generated hardware payloads can be used to enhance Red Team engagements. The emphasis is on practical tradecraft, real-world tooling, and the operational challenges of deploying these techniques responsibly in modern offensive security assessments. We asked David and Simone

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this:

Share this: