AGENDA

Two days of conferences | 20 speakers

09:00

Registration, coffee & croissants

10:00

Introduction

15 min

10:15

Opening keynote

Ivan Krstić | 60 min

Coffee break

30 min

11:45

Exploiting the Undefined: PWNing Firefox by Settling its Promises

Tao Yan, Edouard Bochin | 45 min

From 2-Bit Reset to 0-Click RCE in Redis: A Pwn2Own Edition

Benny Isaacs | 30 min

Lunch

1h30

14:30

Arise from the Wireless: Breaking the Security Barrier in Wi-Fi

Xiaobye | 45 min

Crash One - A StarBucks Story (CVE-2025-24277)

Csaba Fitzl, Gergely Kalman | 30 min

Breaking the Vault: USB Bugs and Bug Bounty Failures

Sergei Volokitin | 30 min

Coffee break

30 min

16:45

Déjà Vu in Linux io_uring: Breaking Memory Sharing Again After Generations of Fixes

Pumpkin | 45 min

Inside Apple Secure Enclave Processor in 2025

Quentin Salingue | 30 min

Lightning talks

Auditorium
45 min

09:00

Welcoming participants, coffee & croissants

1h15

10:15

ReVault! Compromised by your Secure SoC

Philippe Laulheret | 45 min

Coffee break

30 min

11:30

Korean Rookie Hackers' Journey: Road to Pwn2Own with a VirtualBox Exploit

HanseoKim | 45 min

NTLM reflection is dead, long live NTLM reflection: Story of an accidental Windows RCE

Wil | 30 min

Lunch

1h30

14:15

An RbTree Family Drama: Exploiting a Linux Kernel 0-day Through Red-Black Tree Transformations

William Liu, Savino Dicanosa | 45 min

Paint it Blue: Attacking the Bluetooth stack

Mehdi Talbi, Etienne Helluy-Lafont | 45 min

Coffee break

45 min

16:30

CUDA de Grâce: Owning AI Cloud Infrastructure with GPU exploits

Valentina Palmiotti, Samuel Lovejoy | 45 min

Where the shells land: a forensic perspective on in-the-wild exploitation

Donncha Ó Cearbhaill | 45 min

Closing session

15 min

Prepare your venue at Hexacon

Brace yourselves, it is going to be amazing

Reserve your place

Talks and speakers

Trainings

AGENDA

Two days of conferences | 20 speakers

Day 1 - Friday 10th of October | Day 2 - Saturday 11th of October

09:00

Registration, coffee & croissants

10:00

Introduction

10:15

Opening keynote

11:15

Coffee break

11:45

Exploiting the Undefined: PWNing Firefox by Settling its Promises

12:30

From 2-Bit Reset to 0-Click RCE in Redis: A Pwn2Own Edition

13:00

Lunch

14:30

Arise from the Wireless: Breaking the Security Barrier in Wi-Fi

15:15

Crash One - A StarBucks Story (CVE-2025-24277)

15:45

Breaking the Vault: USB Bugs and Bug Bounty Failures

16:15

Coffee break

16:45

Déjà Vu in Linux io_uring: Breaking Memory Sharing Again After Generations of Fixes

17:30

Inside Apple Secure Enclave Processor in 2025

18:00

Lightning talks

19:00

Social event & Speedrun challenge finals

Day 1 - Friday 10th of October | Day 2 - Saturday 11th of October

09:00

Welcoming participants, coffee & croissants

10:15

ReVault! Compromised by your Secure SoC

11:00

Coffee break

11:30

Korean Rookie Hackers' Journey: Road to Pwn2Own with a VirtualBox Exploit

12:15

NTLM reflection is dead, long live NTLM reflection: Story of an accidental Windows RCE

12:45

Lunch

14:15

An RbTree Family Drama: Exploiting a Linux Kernel 0-day Through Red-Black Tree Transformations

15:00

Paint it Blue: Attacking the Bluetooth stack

15:45

Coffee break

16:30

CUDA de Grâce: Owning AI Cloud Infrastructure with GPU exploits

17:15

Where the shells land: a forensic perspective on in-the-wild exploitation

18:00

Closing session

19:00

Closing party

Prepare your venue at Hexacon

Brace yourselves, it is going to be amazing