CSIT Village·24 min
Kang Hao
Kang Hao explores android security: javascript bridge is falling down at DEF CON SG1, examining android-security and practical defenses.
android-securitywebviewjavascript-bridge+1
DEF CON SG1/CSIT Village across years
CSIT Village DCSG1
Marina Bay Sands, Singapore · 28-30 April 2026 · 22 talks
Presentations, exploit disclosures, and security research from the CSIT Village at DEF CON SG1 in Singapore.
1–22 of 22 talks
CSIT Village·18 min
Theodore Lee
Theodore Lee examines reverse engineering (RE) is time consuming and resource intensive.
malware-analysisreverse-engineeringbinary-analysis+1
CSIT Village·13 min
Daniel Siok
Daniel Siok examines what does an air-gapped system really mean in practice.
air-gapsystem-hardeningnetwork-isolation+1
CSIT Village·19 min
Sim Wei Jun
Sim Wei Jun examines this presentation expands on prior research into CVE-2024-27304 through a proof-of-concept walkthrough of SQL injection at the protocol level.
sql-injectionpostgresqlprotocol-exploitation+1
CSIT Village·24 min
Jun Rong · Javier Koh
Jun Rong and Javier Koh examines this talk breaks down the discovery of CVE-2025-52692, a zero-day vulnerability in the widely used Linksys E9450 SG router.
router-securityfirmware-exploitationembedded-security+1
CSIT Village·21 min
Anton Chua
Anton Chua examines this session re-examines physical security assumptions in Cyber Defence structures.
cyber-physical-systemsphysical-securitycritical-infrastructure+1
CSIT Village·38 min
Ernest Ang
Ernest Ang explores from chrome renderer, to mouse, to system at DEF CON SG1, examining browser-exploitation and practical defenses.
browser-exploitationchromiumprivilege-escalation+1
CSIT Village·30 min
Chua Meng Han
Chua Meng Han examines critical vulnerabilities like CVE-2025-52691 remind us that “low-hanging fruit” still exists today.
vulnerability-researchcve-researchexploit-development+1
CSIT Village·19 min
Loke Yan Hao
Loke Yan Hao examines we share our findings from using AI tools for web penetration testing on bug bounty programmes.
ai-securitybug-bountypenetration-testing+1
CSIT Village·40 min
Kenneth Huang Shaoqi
Kenneth Huang Shaoqi examines compilers generate all our code, but they don’t get it right all the time.
compiler-securitybinary-exploitationvulnerability-research+1
CSIT Village·22 min
Poh Cai Min · Shawn Pang
Poh Cai Min and Shawn Pang examines grammar-based fuzzing made painless.
fuzzingapi-securitygrammar-fuzzing+1
CSIT Village·25 min
Kendrick Yeo · Eugene Ong
Kendrick Yeo and Eugene Ong examines during this session, we will share simulated water testbed, and the attacks that can work on it.
ics-otdigital-twinsindustrial-control-systems+1
CSIT Village·27 min
Eugene Lim
Eugene Lim examines audiovisual hardware - from web conferencing cameras to meeting room systems - is deeply embedded in modern enterprises' physical attack surface.
audiovisual-hardwareembedded-securityhardware-hacking+1
CSIT Village·22 min
Koh Kian Woon
Koh Kian Woon examines as AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders.
browser-exploitationheap-exploitationcfg-bypass+1
CSIT Village·13 min
Lim Jing Qiang
Lim Jing Qiang examines using the rubber ducky to deploy a large payload in an air-gapped environment is no easy feat.
rubber-duckyusb-attackspayload-delivery+1
CSIT Village·17 min
Daryl Lim · Zhi Kai
Daryl Lim and Zhi Kai examines a thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through continuous key rotation.
api-securitytoken-securitycryptographic-protocols+1
CSIT Village·20 min
Kan Onn Kit
Kan Onn Kit examines in stripped binaries, malware analysts often struggle in a sea of raw offsets and pointer arithmetic.
reverse-engineeringstruct-reconstructiondecompiler+1
CSIT Village·24 min
Shao Xiang
Shao Xiang examines understanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically strengthen defenses.
adversary-emulationthreat-modelingred-team+1
CSIT Village·16 min
Arne Sim
Arne Sim examines the InfoSecurity Challenge (TISC) is one of Singapore's most anticipated Capture-the-Flag competition (CTF), hosted annually by CSIT.
ctfchallenge-designinfosec-education+1
CSIT Village·27 min
James Tan
James Tan examines join us as we go behind-the-scenes of threat hunting and investigation.
threat-huntingthreat-detectiondetection-engineering+1
CSIT Village·24 min
Sng Peng Boon
Sng Peng Boon examines we share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared.
bug-bountyweb-application-securitygovernment-security+1
CSIT Village·27 min
Liu Wen Kai · Martin Koh
Liu Wen Kai and Martin Koh examines during this session, we will share an automated end-to-end AI workflow to perform digital analysis on Windows images with capabilities of fully on-premise investigation.
ai-securityai-agentsdigital-forensics+1