Area41 2026
Switzerland's biennial technical infosec conference, run by DEFCON Switzerland (DC4131): Entra ID tenant takeover, physical access control flaws, EDR evasion, ransomware and DFIR case studies, LLM guardrail bypasses, and microcode and hardware reversing.
→ See editor’s top picks at Area41 2026
- Hacking Every Entra ID Tenant With Actor Tokens — Dirk-Jan Mollema
In a groundbreaking presentation at Area41, security researcher Dirk-Jan Mollema unveiled a critical vulnerability that could have allowed attackers to gain global administrator access to virtually…
- Hands-Free Lockpicking: Opening Doors Like in The Movies — Werner Schober, Clemens Stockenreitner
In a revealing presentation at Area41, Werner Schober and Clemens Stockenreitner unveiled critical vulnerabilities within Dormakaba's Axos 9300 physical access control system (PACS), demonstrating…
- DFIR Report at Cons - Deconstructing Real-World Intrusions — Angelo Violetti, Alessandro Di Carlo
In this insightful Area41 talk, "DFIR Report at Cons - Deconstructing Real-World Intrusions," Angelo Violetti and Alessandro Di Carlo, both contributors to The DFIR Report, delve into the…
- DragonForce: the cartel makes a TURN in Ransomware Capabilities — Thibaut Passilly
In an illuminating presentation at Area41, Thibaut Passilly, a Threat Hunter at Broadcom (Symantec and Carbon Black), delved into the evolving tactics of DragonForce, a rapidly emerging ransomware…
- EDR Introspection — Levi Cailleret
In the realm of cybersecurity, Endpoint Detection and Response (EDR) solutions are the frontline defense against advanced threats. However, for both red and blue teams, EDRs often operate as opaque…
- The Linux Evasion Stack: Breaking All Three EDR Pillars with io_uring and ELF Packing — Massimo Bertocchi
In this compelling talk, "The Linux Evasion Stack," Massimo Bertocchi, a specialist in threat hunting and attack engineering, unveils advanced techniques to bypass the full spectrum of Linux…
- Hacker goes Speedrunning: Beating a 25 hour game in under 2 minutes — Gynvael Coldwind
In a captivating talk at Area41, Gynvael Coldwind, Managing Director at Dragon Sector and a renowned figure in the cybersecurity and CTF community, took the audience on an unexpected journey into…
- Keynote: AI All The Things x Security: past, present, future — Nico Fischbach
In his Area41 keynote, "AI All The Things x Security: past, present, future," Nico Fischbach delivers a comprehensive and thought-provoking analysis of how artificial intelligence, particularly…
- Panic at the DISCO: When Patient Data Hits the Dance Floor — Marina Bochenkova
In "Panic at the DISCO," Marina Bochenkova of Z-CERT unravels a perplexing and deeply concerning case of patient data exposure in the Netherlands, stemming not from a sophisticated cyberattack, but…
- Breaking Every Guardrail Everywhere All At Once — Donato Capitella
In this engaging talk at Area41, Donato Capitella, a seasoned security consultant from Reverse Engineering, delves into the escalating challenges of securing applications built on Large Language…
- Phishing for Patterns: What Happens When Agents Explore Domain Data — Beni Urech, Patrick Schläpfer
In an era where phishing remains a pervasive and evolving threat, the ability to rapidly identify and track entire malicious campaigns is paramount for effective defense. This talk by Patrick…
- Copy, Paste Persist: Inside the .NET Malware Gene Pool — Jonathan Peters
In the rapidly evolving landscape of cybersecurity, understanding the origins and relationships between malware families is paramount for effective defense. Jonathan Peters, a Malware Analyst and…
- Toward Verifiable Microcode: Reverse Engineering AMD Zen5 Update — Kaya Ercihan, Antonio Vazquez Blanco
In their Area41 talk, "Toward Verifiable Microcode: Reverse Engineering AMD Zen5 Update," Kaya Ercihan and Antonio Vazquez Blanco presented a groundbreaking methodology and a suite of custom tools…
- Mask off: analyzing a secure SD card — Nicolas Oberli
In this compelling talk at Area41, security researcher Nicolas Oberli dissects the security claims of the Flexxon X-Mask SD card, a product marketed as offering robust data protection through…