Overview
Hospitals are a perfect example of a complex System of Systems. Their infrastructure is like a small city, with multiple, independent, operationally distinct systems that interact to deliver healthcare services to users at the end of the day. No single system controls...
Speakers
3Schedule
Registration and check-in
Opening session
Opening keynote
1000 Ways to Die: The Convergence of IT/OT in Hospitals
Hospitals are a perfect example of a complex System of Systems. Their infrastructure is like a small city, with multiple, independent, operationally distinct systems that interact to deliver healthcare services to users at the end of the day. No single system controls...
The Chatbot Was Fine. The Cloud Was Not.
Everyone is hardening their AI. Prompt filtering, OWASP LLM guidance, jailbreak prevention — organizations are checking every box. This talk is not about any of that. This is the true story of a security assessment where the AI held up fine and...
Lunch
Cold Codes, Warm Keys: Building a Pocket-Sized Thermal PIN Sniffer
Thermal residue attacks - recovering PINs and passwords from heat left behind on keypads have long been considered an esoteric threat due to the high cost of thermal imaging equipment. This talk proves that effective thermal attacks no longer require $200+ smartphone...
So You Gave an LLM a Shell: Measuring Offensive AI at SCALE
Large language models can already use shells, call security tools, inspect outputs and keep working on a target across many steps. Once planning, memory, reflection and tool orchestration are added, the resulting system starts to resemble an autonomous offensive operator. The problem...
Coffee break
Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE
Arbitrary file write is often treated as an “almost critical” bug class in web security: interesting and dangerous, but hard to prove impact when you can’t drop a web shell in an obvious location. In this talk, we present a novel methodology...
Don't Drawer Your Badge: Turning the previous Bsides Badge ESP32-C6 into a Multi-Spectrum Threat Radar
Every year, conference badges end up forgotten in a desk drawer the moment the event ends, certainly accompanied by a mental note: “I’ll play with it ASAP.” But beneath the blinking LEDs and flashy screens lies a highly capable hardware platform. This...
BeerSides
The Fuyao Enterprise: Building an Ad-Fraud Empire with AI and Kids’ Coding Blocks
A sophisticated Android TV-box botnet, spoofing devices as phones operated quietly, escaping public research for years. Now, its operators openly advertise it as a fleet of over 120,000 “AI digital humans”. This talk presents the first end-to-end dissection of the “Fuyao Enterprise,”...
Hybrid Warfare in the Electromagnetic Domain: 10 years of GNSS Attacks in Europe
This session will examine GNSS jamming and spoofing as cyber-physical threats affecting systems that depend on trusted positioning, navigation, and timing data. While GNSS interference is often discussed as an aviation, RF, or military problem, this talk will reframe it as a...
Reading Between the Lines: Exploiting Indirect Injection in AI Systems
We’ve moved past the era of users manually bypassing chatbot filters with ‘Ignore previous instructions.’ and entered a more dangerous era: Indirect Injection. The 2025 EchoLeak exploit first proved that a single unread email could trigger Microsoft Copilot to silently exfiltrate private...
One Click to System: Exploiting Bixby's Trust Model for Full Device Compromise
During the 2025 Mobile Pwn2Own competition, we identified a series of vulnerabilities affecting Samsung devices. Chained together, these issues resulted in remote system-level compromise triggered by a single user interaction. What distinguishes this entry from previous submissions is its focus on design...
Mathematical Patterns of Poison
Data poisoning attacks add small, often imperceptible perturbations to training data so a model learns the wrong thing without any obvious sign in the data itself. Nightshade popularized this against text-to-image generators, but the underlying mathematics generalizes to any model trained on...
Pastel de Nata O'Clock
Fight Fire With Fire: Bringing vulnerability management to the age of AI
Attackers are using AI to break into systems. Bug bounty researchers to flood your inbox. Even managers are using it to write emails. Defenders are still triaging last quarter’s backlog. This talk is a field report from building an AI agent that...