Main Stage·54 min
Karo Vallittu
Traces how Rolls-Royce built cyber defenses for Swan, a demonstrator autonomous passenger ferry, and what went wrong.
buildinglessons-learnedrisk+2
Main Stage Disobey 2023
Helsinki, Finland · February 2023 · 13 talks
Main Stage talks from Disobey 2023.
1–13 of 13 talks
Main Stage·34 min
windytan
Shows how HDMI display signals leak radio emissions that can be captured from another room to move data across an air gap.
attackhardwaredevice+2
Main Stage·28 min
J. Tuomas Harviainen
Examines how drug buyers and sellers build trust on dark web image boards and the closed groups replacing them.
trustthreatintelligence+2
Main Stage·1 hr 2 min
Aapo Oksman
Shows how clients that skip certificate checks can be tricked into trusting forged TLS servers, with demos against iOS and Windows.
vulnerabilitiestrustnetwork+2
Main Stage·42 min
Jonas Vestberg
Walks through local privilege escalation flaws found in example scripts of a popular Windows pentest toolkit.
vulnerability-researchwindowstool+2
Main Stage·58 min
Connie McIntosh
Surveys how generative AI, deepfakes and human error are reshaping attacks and what defenders should expect.
aiphishingthreat+2
Main Stage·39 min
Suvi Lampila
Explains why harvest-now-decrypt-later attacks make post-quantum key exchange urgent and how to migrate existing network protocols.
post-quantum-cryptographynetworkrisk+1
Main Stage·28 min
Pyry Åvist
Compares red team phishing emails with ChatGPT-generated ones across tens of thousands of simulated attacks.
phishingaimachine-learning+3
Main Stage·52 min
Benjamin Nagel
Explains how aircraft are engineered and where cybersecurity fits, from redundancy and building blocks to segregation and testing.
architecturerisksystem+2
Main Stage·45 min
Ville Vainikka · Henri Aalt
Compares EDR endpoint telemetry with SSL-decrypting gateway visibility for spotting C2 traffic and adversary-in-the-middle logins.
threat-detectionnetworkdetection+2
Main Stage·51 min
Nick Jones
Walks through real-world AWS attack paths, from leaked credentials and CI/CD pipelines, plus detection and hardening advice.
cloudattackdetection+3
Main Stage·52 min
Antti Kurittu
Traces the Vastaamo psychotherapy patient data breach from an exposed database to extortion, leaked records and regulatory fallout.
incident-responseransomwarelessons-learned+2
Main Stage·58 min
Jussi Eronen
Explains how a national cyber security center finds and notifies owners of vulnerable internet-facing systems at scale.
vulnerabilitiesinfrastructurenetwork+2