CODE BLUE 2025
Japan's international security conference in Tokyo: offensive research on mobile, firmware and cloud exploitation, AI-driven hacking, threat intel, cyber policy, and open-source Bluebox tools from Japanese and Asian researchers.
→ See editor’s top picks at CODE BLUE 2025
- Keynote: Bend the Machine: The Hacker Path to Autonomy in the Real World — David Brumley
In this thought-provoking keynote at CODE BLUE, David Brumley, a distinguished figure in cybersecurity and CEO of Mayhem (now acquired by Bugcrowd), delves into the critical question of whether…
- AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor — Bing-Jhong Jheng, Pan ZhengPeng
This talk, presented by Bing-Jhong Jheng (Billy) and Pan ZhengPeng (Peter) from STAR LABS, delves into the discovery and exploitation of a novel vulnerability within the Graphics System Processor…
- Azazel System for Emergency Shelters: Rapid-Deploy Portable SOC/NOC on Raspberry Pi — Makoto Sugita
In an era increasingly defined by both natural disasters and geopolitical conflicts, the need for robust and secure communication infrastructure in emergency settings has become paramount. Makoto…
- Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit” — Bing-Jhong Jheng, Muhammad Ramdhan, Pan ZhengPeng
This talk, "Dancing with Exynos Coprocessor: Pwning Samsung for fun and 'profit'," delivered by researchers from STAR LABS, delves into the critical security vulnerabilities discovered within…
- BIN2TL: Visualizing Program Dynamics with Perfetto — Michael Telloyan
In the realm of binary analysis, understanding the dynamic behavior of executables is paramount, yet often fraught with challenges. Michael Telloyan's talk at CODE BLUE introduces BIN2TL, an…
- Practical Automation of Penetration Testing with Agentic AI — Hiroaki Toyota
In an era where cyber threats are constantly evolving and attack surfaces are rapidly expanding, the demand for more efficient and comprehensive penetration testing solutions is at an all-time high…
- Build Your Own Pivoting Lab: A Starting Point for Internal Network Exploration — Francisco Canteli
In this insightful CODE BLUE presentation, Francisco "Franki" Canteli, Head of Offensive Security at Hackmetrix, demystifies the critical penetration testing technique of pivoting, offering a…
- Don't judge an audiobook by its cover: taking over your Amazon account with a Kindle — Valentino Ricotta
In a compelling presentation at CODE BLUE, security researcher Valentino Ricotta unveiled a critical chain of vulnerabilities that could allow an attacker to remotely compromise an Amazon Kindle…
- Proposal and Implementation of a Reduced Assembly Set Compiler for Enabling CPU Security Measures — Hiroaki Sakai
In this CODE BLUE talk, Hiroaki Sakai, a Global Jisshi Engineer and renowned author, introduces a novel approach to compiler design: the Reduced Assembly Set Compiler (RASC), specifically his…
- Cache the Frames, Catch the Vulnerabilities in Kernel Streaming — Angelboy Yang
In this compelling talk at CODE BLUE, Angelboy Yang, a Senior Security Researcher at DEVCORE, delves deep into the intricate world of Windows Kernel Streaming (KS), a critical framework within the…
- GHARF: GitHub Actions RedTeam Framework — Yusuke Kubo, Yuuki Matsumoto
In a compelling presentation at CODE BLUE, Yuuki Matsumoto and Yusuke Kubo from NTT Docomo Business unveiled GHARF, the GitHub Actions RedTeam Framework. This innovative framework represents a…
- Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing — Dillon Franke
In this compelling talk at CODE BLUE, Dillon Franke, a Senior Security Engineer at Google and a researcher with Google Project Zero, unveiled groundbreaking research into exploiting CoreAudio on…
- How to Hack Any Micro-controller with a Raspberry Pi Pico. Easy Fault-Injection by Traffic Mocking — Tongren Chen
In this CODE BLUE talk, Tongren Chen presents a groundbreaking and significantly simplified approach to performing precise fault injection on microcontrollers. The core challenge in hardware…
- PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry - Mercedes-Benz, Volkswagen, Skoda — Mikhail Evdokimov
Mikhail Evdokimov's CODE BLUE talk, "PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry," unveiled a sophisticated attack chain capable of achieving remote code execution (RCE) on…
- Panel Discussion: The Present and Future of AI and Security — David Brumley, Evan Downing, Minwoo Baek, Tyler Nighswander
This panel discussion, held at CODE BLUE, delves into the transformative impact of Large Language Models (LLMs) on cybersecurity, specifically through the lens of DARPA's ambitious AI Cyber…
- Dissecting FINALDRAFT: Actionable Intel from a State-Sponsored Multi-Platform Backdoor — Salim Bitam
In a revealing presentation at CODE BLUE, Salim Bitam, a Senior Security Research Engineer at Elastic Security Labs, unveiled the intricacies of FINALDRAFT, a sophisticated multi-platform backdoor…
- Bypassing Anti-Debugging: A Hybrid Real-Simulated Approach to Rootkit Analysis — Yong-Xu Yang, Heng-Ming Fan, Yu Xuan Luo
Analyzing rootkits presents a formidable challenge in cybersecurity due to their privileged kernel-mode operations and sophisticated anti-analysis techniques. This talk, "Bypassing Anti-Debugging: A…
- The Deepfake Supply Chain: Weaponizing Synthetic Media into Modern Cybercrime Operation — Niladri Sekhar Hore
In an era where digital authenticity is increasingly challenged, Niladri Sekhar Hore, a Security Researcher at StoneX, delivered a compelling talk at CODE BLUE, dissecting the alarming rise of…
- BOOTKITTY: Multi-OS Trust Chain compromise from Bootkit to Rootkit — Junho Lee, HyunA Seo
The "BOOTKITTY: Multi-OS Trust Chain compromise from Bootkit to Rootkit" presentation at CODE BLUE by Junho Lee and HyunA Seo delved into the alarming capabilities of a novel hybrid bootkit designed…
- Introduction to CICDGuard - Orchestrating visibility and security of CICD ecosystem — Pramod Rana
In today's fast-paced software development landscape, Continuous Integration and Continuous Delivery (CI/CD) pipelines are the backbone of modern applications, enabling rapid updates and feature…
- Cloud-Wide Contamination: Chaining SSRFs for Tenant Compromise in Azure (CVE-2025-29972) — Vladimir Tokarev
In a compelling presentation at CODE BLUE, Vladimir Tokarev, a Senior Vulnerability Researcher at Cyera (formerly with Microsoft's Azure Network Security Research team), unveiled a critical…
- Mind the Gaps: Detecting What You Miss in Windows Event Logs (and Fixing It!) — Fukusuke Takahashi, Zach Mathis
In the realm of cybersecurity, Windows Event Logs are foundational for incident response and forensic analysis. However, as Fukusuke Takahashi from NTTDATA-CERT and Zach Mathis from Yamato Security…
- Exploiting Blind Memory Corruption in Cloud Services — Anthony Weems, Stefan Schiller, Simon Scannell
This talk, "Exploiting Blind Memory Corruption in Cloud Services," delivered by Simon Scannell, Anthony Weems, and Stefan Schiller from the Google Cloud Vulnerability Research team, addresses a…
- TOAMI (Casting Net): A Browser Extension Tool for Supporting Phishing Hunters — Yuichi Tsuboi
In an era where phishing attacks are escalating in sophistication and frequency, the critical role of phishing hunters in identifying and neutralizing these threats cannot be overstated. Yuichi…
- Invitation Is All You Need! Invoking Gemini for Workspace Agents with a Google Calendar Invite — Or Yair, Ben Nassi, Stav Cohen
In an increasingly interconnected digital landscape, the integration of generative AI (GenAI) capabilities into everyday applications introduces a new frontier of security vulnerabilities. This…
- Uncovering the Past: Reconstructing File Activity from Ext4 and XFS Journals — Minoru Kobayashi
In the realm of digital forensics, uncovering a complete and accurate timeline of file system activity is paramount to understanding the scope and nature of a security incident. However, traditional…
- YAMAGoya: Open Source Threat Hunting Tool using YARA and SIGMA — Shusei Tomonaga, Tomoya Kamei
In an era dominated by sophisticated fileless malware and Living Off The Land (LOTL) attack techniques, traditional file-based security solutions often fall short. The talk, "YAMAGoya: Open Source…
- The CCEL and the Thin Line Between Cyber Defence and Pre-emption: Japan's Legal and Strategic Pivot — Andrea Monti
In an increasingly digitized and interconnected world, the traditional boundaries between cyber defense, intelligence operations, and law enforcement are rapidly eroding. Andrea Monti's talk, "The…
- Closing Keynote: Future Cybersecurity Strategy - Active Cyber Defense, Human Resource Development, and More — Kazutaka Nakamizo
In a compelling closing keynote at CODE BLUE, Kazutaka Nakamizo, Deputy Director-General of Japan's newly established National Cybersecurity Office (NCO), unveiled Japan's forward-looking…