Bsides Limburg 2027

This talk dives into the intriguing results of a security assessment performed by Deloitte Belgium on an application using a large language model (LLM) for document analysis. Combining code review and application penetration testing, we uncovered surprising and impactful vulnerabilities that exposed the application to critical risks. Attendees will learn how subtle flaws in input handling and integration design can lead to significant security breaches, with real-world examples from our findings

This presentation introduces an innovative approach that leverages artificial intelligence, specifically large language models (LLMs), to enhance contextual analysis and risk prioritization of potential threats across large domain scopes. The developed tool addresses the limitations of traditional security engagements by incorporating AI-driven contextual analysis to interpret web pages from a penetration tester's perspective and further analyze the results from a security analyst's viewpoint.

During her talk, Phédra Clouner, Deputy Director General of the Centre for Cyber Security Belgium (CCB), will tell you more about this organization, its missions, and ambitions, and will also present some interesting and concrete initiatives that have visible and effective effect on the cyber resilience of our country. We will also take the opportunity, because it is always useful, to remind you of some European regulations that also aim to have a positive impact on European... and national cybe

In this talk, two dedicated security researchers with a passion for gaming share how they've turned their mission to combat hacking and exploitation in video games into a full-time career. They'll reveal insights into how bad actors operate and explain the strategies they use to create safer and more secure online gaming environments.

In this session, Jeroen will present an innovative architecture that merges industry-leading SOC technologies (SIEM/XDR, SOAR, BAS and a pinch of ChatGPT). The result is a detection engineering CI/CD pipeline that can automatically create, test, and deploy detection analytics. The proof is in the pudding: Live demo included!

Dries will explain how cybersecurity in nuclear is different than in other sectors. He will discuss the nuclear installations that need to be protected in Mol and how it is ensured that a cyber incident does not lead to radiological consequences.