Talks·10 min
Nicol Dankova
Recounts how a rushed IPS rule deployment flooded a SIEM and reset production settings to defaults.
security-operationsdetectionlessons-learned+1
Talks hack.lu 2025
Luxembourg · October 2025 · 52 talks
Talks from hack.lu 2025.
Filters+
1–24 of 52 talks
Talks·43 min
Trey Darley · Pedro Umbelino
Maps how the 2038 Unix time rollover threatens systems worldwide and why coordinated remediation is so hard.
riskinfrastructurevulnerabilities+2
Talks·29 min
Thomas Patzke
Shows how a chemical company builds a relevance-scored threat landscape from free sources and MITRE ATT&CK.
threatintelligenceframework+1
Talks·28 min
Martin Salfer
Shows how attack graphs over automotive network topology can rank which vehicle assets carry the highest risk.
attackrisknetwork+2
Talks·28 min
Stephan Berger
Shows how forensic artifacts still expose attackers who try to erase their traces on Windows and Linux.
incident-responsewindowslinux+2
Talks·34 min
Joseph Beeton
Shows how a visited web page can silently reach developer services bound to localhost and run code on the machine.
webdevelopervulnerability-research+2
Talks·25 min
Antoine Gicquel · Benjamin Sepe
Explains how quantum computers threaten current key exchange and signatures, and what organizations and auditors can do now.
post-quantum-cryptographyencryptiontls+2
Talks
Covers fuzzing Android's AIDL interfaces to probe the inter-process communication attack surface.
androidfuzzingvulnerability-research+2
Talks·26 min
David Durvaux · Christophe Vandeplas
Explains how a team collects and analyses iOS sysdiagnose data across thousands of managed devices.
mobileincident-responsedevice+2
Talks·22 min
Vladimir Kropotov
Maps how geopolitics, remote work and AI are reshaping criminal business models on Russian-speaking underground forums.
threatintelligenceransomware+2
Talks·33 min
William Robinet
Shows how crafted certificate fields inject terminal control codes into OpenSSL output, misleading administrators who review them.
vulnerability-researchtrustopen-source+2
Talks·31 min
Ben (@polygonben)
Shows how an infostealer's Telegram exfiltration channel, exposed through operator mistakes, lets an analyst monitor a criminal's chat.
infostealermalware-analysisintelligence+2
Talks·33 min
Bogdan Trufanda · Mihai Vasilescu
Traces how TeamTNT-style cryptomining campaigns abuse exposed Docker APIs and how runtime detection and prevention can stop them.
cloudcontainermalware-analysis+2
Talks·30 min
Julien Bedel
Shows how COM and DCOM are abused for execution, persistence, lateral movement and impersonation on Windows.
windowsattacknetwork+2
Talks·31 min
Laurent Clevy
Shows how emulating a camera's firmware crypto routine can decrypt and verify Canon DIGIC 8 update files.
reverse-engineeringembeddeddevice+2
Talks
Revisits Widevine L3 digital rights management as a hands-on hacking target.
drmreverse-engineeringvulnerability-research+1
Talks·30 min
Cocomelonc
Shows how malware operators can route command-and-control traffic through legitimate web APIs to blend into trusted traffic.
attackthreatnetwork+2
Talks·29 min
Paul Rascagneres
Shows how threat actors use public blockchains like Ethereum as command-and-control channels and how analysts can hunt them.
threatintelligencemalware-analysis+2
Talks·34 min
Edouard D'hoedt · Hayk Gevorgyan
Surveys physical attacks that recover BitLocker keys, from DMA and boot tampering to sniffing the TPM bus, with mitigations.
hardwarewindowsattack+2
Talks·28 min
Marina Bochenkova
Argues that smart city security needs a holistic view across IT, OT and IoT, illustrated with incidents from Amsterdam and Luxembourg.
ioticsprivacy+2
Talks·46 min
Hugo
Shows how attackers abuse CI/CD pipelines in Azure DevOps and Terraform to run code and steal cloud credentials.
devopscloudattack+2
Talks
Focuses on MISP, the open-source threat intelligence sharing platform, as the subject of this talk.
intelligencethreatopen-source+1
Talks·29 min
Philippe Lagadec
Explains why content-only file identifiers fail on weaponized files and proposes combining extensions with content checks.
malware-analysisdetectionmachine-learning+2
Talks·28 min
Melina Phillips
Traces the post-compromise artifacts a breached beauty retailer left on Linux systems and how responders can spot them.
incident-responselinuxthreat-detection+2