Talks·51 min
Joe Grand
Traces a hardware hacker's path from teenage pranks and early hacker groups to disclosure, consulting, and ethical boundaries.
hackhardwarelessons-learned+1
February 2026 · Helsinki, Finland
Disobey 2026
1 session · 29 talks
Sessions at this event
All Disobey 2026 talks
1–24 of 28 talks / 29
Talks·45 min
Candid Wuest
Separates hype from reality on AI-powered malware, testing LLM-driven loaders against common endpoint products.
aimalware-analysisthreat+2
Talks·47 min
Sami Laiho
Shows how removing local admin rights blocks common Windows attacks and how to make the case to users.
windowsdefensive-securityidentity+2
Talks·43 min
Joseph Slowik
Explores how state-directed actors use compromised routers and IoT devices as proxy networks to hide command and control.
threatinfrastructurenetwork+2
Talks·43 min
Fabian Bader
Examines where passkeys resist phishing and where synced keys, attestation and cross-device login can still fail.
identityattackdevice+2
Talks·46 min
Firat Acar · Moritz Thomas
Walks through real physical intrusions where red teamers used pretexts, cloning and a rogue Raspberry Pi to breach client sites.
socialattacklessons-learned+2
Talks·48 min
Derek Fisher
Explains how to cut scanner noise and harden CI pipelines against poisoned builds, stolen secrets and unpinned dependencies.
devopsbuildsupply+2
Talks·42 min
Matias Mesiä
Explains how Finland's national cyber security center runs its large incident cases, from coordination to lessons learned.
incident-responsemanagementlessons-learned+1
Talks·34 min
Anton Helin
Explains how a validation bypass in the Android Settings app lets a crafted link reach sensitive screens.
androidmobilevulnerability-research+2
Talks·38 min
Lyra Rebane
Shows how CSS alone can spoof webmail interfaces, bypass email sanitizers, and exfiltrate data through SVG filters.
webappsecvulnerability-research+2
Talks·42 min
Petrus Vasenius
Shows how decoy data planted in cloud analytics stores can expose insiders and stolen sessions through monitored alerts.
cloudthreat-detectiondefensive-security+1
Talks·43 min
Markus Hölsä
Traces how EU chat control and high-level group proposals could erode end-to-end encryption and user privacy.
privacytrustintelligence+2
Talks·30 min
Willem
Argues that gender bias in tech hiring and teams creates security risk, and proposes controls to measure and reduce it.
teammanagementrisk+2
Talks·48 min
Mikael Nilsson
Walks through turning scattered AppSec work into a plan using DevSecOps maturity models and developer-friendly automation.
appsecframeworkautomation+2
Talks·45 min
Jack Fitzsimons
Introduces z/OS mainframes and shows how assessors probe RACF, CICS and FTP for weak access controls.
introductionattackidentity+2
Talks·30 min
Hans Metsoja
Explains how tabletop simulations help teams practice incident response decision-making and communication without a real breach.
incident-responselessons-learnedteam+1
Talks·38 min
Jarno Niemelä
Shows how misconfigured file permissions in Windows software let a low-privileged user escalate to admin rights.
windowsvulnerability-researchvulnerabilities+2
Talks·47 min
Joseph Carson
Traces a real ransomware intrusion from stolen credentials to recovery, with a live replay of the attacker's steps.
incident-responseransomwarelessons-learned+2
Talks·43 min
Esa Jääskelä
Walks through practical Linux hardening steps covering interfaces, users, files, processes, containers and supply chain.
linuxdefensive-securitysystem+2
Talks·31 min
Susanna Haavisto
Argues that awareness training should build real skills and habits instead of just ticking compliance boxes.
phishinglearningsocial+2
Talks·29 min
Jarkko Vesiluoma
Analyzes millions of breached Finnish and Swedish passwords to reveal reuse patterns, cracking shortcuts and advice for defenders.
identityattackrisk+2
Talks·34 min
Patrik Jokela
Shows how small application quirks, from verbose errors to regex backtracking, let one request overload a server.
vulnerabilitiesattackweb+2
Talks·46 min
Marko Buuri
Walks through how TIBER threat-led red team tests are run in financial firms, from threat intelligence to execution.
intelligencethreatframework+2
Talks·30 min
Ben Nagel
Explains the EASA Part-IS aviation information security regulation, how it ties to safety, and how audits are run.
riskmanagementtrust+2