DefCamp 2025
The largest hacking and cybersecurity conference in Central and Eastern Europe, 15th edition: AI and LLM attacks, cloud and identity security, Kerberos and SCCM tradecraft, IoT and satellite security, compliance and policy panels.
→ See editor’s top picks at DefCamp 2025
- Panel: Deepfakes & Vibe Hacking: the next frontier of social engineering — Lucian Constantin, Dragos Stanca, Aurel George Proorocu, Mihai Rotariu, Loredana Vladu
This DefCamp panel, moderated by Lucian Constantin, Senior Writer for CSO, delved into the rapidly evolving landscape of cyber threats, specifically focusing on how AI-assisted content generation…
- Panel: Zero trust & identity‑first security architectures — Dan Popa, Mircea-Constantin Scheau, Yugo Neumorni, Dragos Cazaceanu, Razvan George Chereches, Raluca-Claudia Seucan
This panel discussion, "Zero trust & identity-first security architectures," delves into the foundational shift occurring in cybersecurity paradigms. Moderated by Dan Popa of Microsoft, the esteemed…
- Panel: Supply‑Chain and infrastructure resilience in the current landscape — Gabriel Mihai Tanase, Alex "Jay" Balan, Chris Kubecka, Johnny Xmas, Costin Burdun
In an era defined by increasing digital interconnectedness and escalating geopolitical tensions, the security of an organization's supply chain and underlying infrastructure has become paramount…
- Simplify or Sink: Practical Strategies for Streamlining Security Processes — Sebastian Avarvarei
In today's rapidly evolving threat landscape, security teams are often overwhelmed, perpetually understaffed, and bogged down by inefficient processes. Sebastian Avarvarei, Information Security…
- The Control & Security of Cloud Resources: How to Be (or Not to Be) Cloud Confident — Marius Zaharia
In an era defined by rapid cloud adoption, the security of cloud resources has become paramount, yet it remains a persistent challenge for organizations worldwide. Marius Zaharia, Cloud Team Leader…
- Only God can help us now — Paula Popovici
Paula Popovici's DefCamp talk, "Only God can help us now," delves into the alarming and rapidly evolving landscape of online threats targeting children. The poignant title is not a theological…
- DeepFakes: Seeing Is No Longer Believing — George Proorocu, Mihai Roman
In an era where digital interactions increasingly define our professional and personal lives, the rise of sophisticated deepfake technologies presents an unprecedented challenge to trust and…
- Panel: Building Cyber Resilience Through Education — Anca Doce, Cristian Patachia - Sultanoiu, Florina Avadanei (Dumitrache), Maksim Iavich, Razvan Rughinis
This panel discussion, "Building Cyber Resilience Through Education," moderated by Anca Doce from Romania's National Cyber Security Directorate (DNSC), brought together leading voices from academia…
- Panel: Cyber Resilience in Financial Services: Staying Ahead in the Age of AI — Cristian Manescu, Alessandro Miracca, Larisa Gabudeanu, Gheorghita Cristinel Calita, Brennan Lodge
The DefCamp panel, "Cyber Resilience in Financial Services: Staying Ahead in the Age of AI," brought together a distinguished group of cybersecurity leaders from the financial sector to dissect one…
- Panel: Public Systems, Private Threats: Cyber Defense Strategies for Governments — Madalin Staniu, Eduard Mititelu, Madalin Dumitru, George Dobrea, Dan Gavojdea
This DefCamp panel discussion, "Public Systems, Private Threats: Cyber Defense Strategies for Governments," brought together leading voices from Romania's government, industry, and academia to…
- When Tech Makes You Dumber: Protecting Your Cognitive Skills in the age of AI — Tudor Damian
In his thought-provoking DefCamp talk, "When Tech Makes You Dumber: Protecting Your Cognitive Skills in the Age of AI," Tudor Damian delves into the often-overlooked downsides of our increasing…
- Deceiving LLM into Attacking its Own Agent through natural language — Eric Kim, Chunghyun Kang
In an insightful and technically detailed presentation at DefCamp, Eric Kim and Chunghyun Kang from Korea's Information Technology Research Institute (KITRI) unveiled critical vulnerabilities within…
- Containing the Threat: Analyzing cryptomining campaigns — Bogdan Trufanda, Mihai Vasilescu
In an insightful presentation at DefCamp, CrowdStrike threat hunters Bogdan Trufanda and Mihai Vasilescu delved into the pervasive and rapidly evolving landscape of cryptomining campaigns targeting…
- Threat Assessment and Remediation Analysis for Nanosatellite On Board Computers — Klara(ChaeYoung) Kim, Donavan Cheah
In an era of rapidly expanding space exploration and commercialization, the cybersecurity of orbital assets has become a critical, yet often overlooked, concern. This talk, delivered by…
- Exploring Browser Permissions and Exploiting Permission Hijacking — Alberto Fernandez-de-Retana
In this insightful DefCamp talk, Alberto Fernandez-de-Retana, also known as Boou in the CTF community, sheds light on the often-overlooked complexities and critical vulnerabilities within browser…
- Another One Bites the DAST — István Albert-Tóth
In "Another One Bites the DAST," István Albert-Tóth, DevSecOps and Product Development Director at VerSprite cybersecurity, delivers a compelling and critically important talk on the pervasive…
- NightmareFactory — Matei "Mal" Badanoiu
In "NightmareFactory," Matei "Mal" Badanoiu, Offensive Security Research Lead at Pentest-Tools.com, unveils a series of critical vulnerabilities discovered within Dream Factory, a platform that…
- Threat Actor Branding: The Strange World of APT Marketing — Simona David, Stefan Mihalache
In an increasingly professionalized cybercrime landscape, threat actors have begun to adopt sophisticated branding strategies traditionally associated with legitimate businesses. Simona David, a…
- New Kerberos Attack Vector : Disabled SPN Kerberoasting — Yeonwoo Park
In a compelling presentation at DefCamp, Yeonwoo Park, a seasoned red team operator from RaonSecure's Team SaturnX, unveiled a novel Kerberos attack vector dubbed "Disabled SPN Kerberoasting." This…
- Trust No Format: Risks and Defenses for ML Model Serialization — Octavian Purcaru, Văşcuță Denis
In the rapidly evolving landscape of machine learning, the seemingly innocuous act of downloading and executing a pre-trained model carries significant, often overlooked, security risks. Octavian…
- Hidden Risks: Pitfalls in Learnable Obfuscation for Private A.I. — Mihail-Iulian Pleșa
In an era defined by stringent data privacy regulations like GDPR and the increasing need for collaborative data analysis across multiple, sensitive data silos, privacy-preserving machine learning…
- Security layers: how much security is enough — Alexandru Cozma, Tiberius Hodoroabă
In a rapidly evolving threat landscape, the concept of a "single layer" of defense is a relic of the past. Alexandru Cozma, Principal Engineer, and Tiberius Hodoroabă, Advisory Software Engineer at…
- 0-Click Compromise hits the Enterprise - thx AI! — Inbar Raz
Inbar Raz, VP Research at Zenity, delivered a compelling and unsettling talk at DefCamp titled "0-Click Compromise hits the Enterprise - thx AI!", building upon previous research presented at the…
- Democratizing IoT Security Research and Training Through Advanced Instrumentation — Kamel Ghali
In this insightful DefCamp presentation, Kamel Ghali, COO of Kage and a prominent figure in the automotive cybersecurity community, introduced "Project Shadow" – a groundbreaking initiative aimed at…
- TEE in Web3: Myths, Risks, and Real-World Pitfalls — Kang Li
In this insightful DefCamp talk, Kang Li, CTO of CertiK, delves into the complex interplay of Trusted Execution Environments (TEEs) and Web3 applications, aiming to demystify common misconceptions…
- Hacking the Edge: Real-World ESI Exploits — Robert Vulpe
In his compelling DefCamp talk, "Hacking the Edge: Real-World ESI Exploits," Robert Vulpe, a Senior Security Engineer at UiPath and prolific bug bounty hunter, delves into the often-overlooked…
- Offensive Security - Automation and AI — Andrei Cristea, Carmen Ruset, Constantin-Danut Covrig
In an era defined by an ever-expanding digital attack surface and the relentless pace of cyber threats, the DefCamp talk "Offensive Security - Automation and AI" by Andrei Cristea, Carmen Ruset, and…
- RAGe Against the Machine: AI-Powered Compliance and Cybersecurity — Brennan Lodge
In an era where cybersecurity threats are escalating and regulatory landscapes are becoming increasingly complex, Brennan Lodge’s DefCamp talk, "RAGe Against the Machine: AI-Powered Compliance and…
- Evolving the approach to Third Party Risk Management — Alessandro Miracca
In an era defined by increasingly sophisticated supply chain attacks and stringent regulatory demands, effective Third-Party Risk Management (TPRM) has become a critical, yet often burdensome…
- Access Denied (eventually) — Ioan Constantin
In a candid and insightful presentation at DefCamp, Ioan Constantin, a Cyber Security Expert at Orange România, shared a detailed post-mortem analysis of a significant data breach that impacted the…
- Smart Devices, Dumb Resets? Testing Firmware Persistence in Commercial IoT — Matei Josephs
In his compelling DefCamp talk, "Smart Devices, Dumb Resets? Testing Firmware Persistence in Commercial IoT," Matei Josephs, a Senior Security Researcher at Happening, unveiled a critical, yet often…
- CLR DLL Side-Loading, a secret technique used by APT41 — Georgy Kucherin
In this insightful talk, Georgy Kucherin, a security researcher from Kaspersky's Global Research and Analysis Team, unveils a sophisticated and often overlooked technique for DLL sideloading…
- From Prompt to Payload: Breaking GenAI with Real-World MCP Exploits — Dolev Attiya
In an era increasingly dominated by Artificial Intelligence, the integration of Large Language Models (LLMs) with external services is becoming ubiquitous. Dolev Attiya, a Staff Cyber Research…
- Verkle-Based HORST: A Scalable and Efficient Post-Quantum Digital Signature Scheme — Maksim Iavich
In an era rapidly approaching the dawn of practical quantum computing, the security foundations of modern digital communication are under existential threat. This talk, "Verkle-Based HORST: A…
- Breaking the Cloud: Finding and Exploiting Misconfigurations in AWS — Victoria Shutenko
In this insightful DefCamp presentation, Victoria Shutenko, a seasoned security engineer and penetration tester at Techmagic, delves into the pervasive and critical issue of misconfigurations in…
- Analyzing 100 Hacker's scripts using Claude Sonnet and ChatGPT — Arik Atar
In an insightful DefCamp presentation, Arik Atar, a Senior CTI Researcher at Radware, unveiled groundbreaking research on the efficacy of Artificial Intelligence (AI) in analyzing real-world…
- C2 by Microsoft: What can go wrong if SCCM ends up in the wrong hands — Alexander Rodchenko
In the modern enterprise, Microsoft System Center Configuration Manager (SCCM) stands as a powerful, indispensable tool for managing a vast array of endpoints. It streamlines everything from…
- Why Vulnerability Assessment Isn't Sufficient for Attack Surface Management — Catalin Neacsu, Darius Iakabos
In an era where cyber threats constantly evolve, organizations frequently find themselves operating in a false sense of security, relying solely on traditional vulnerability assessment for their…
- Threat Modelling in Modern Systems — Donavan Cheah
In his rapid-fire "master class" at DefCamp, Donavan Cheah, a Senior Cybersecurity Consultant, delivered an insightful exploration of threat modeling in an increasingly complex technological…