Have you used Kerberos and Public Key Infrastructure (PKI) to “secure” your Active Directory environment? This talk unravels how a simple misconfiguration within ESC can lead to easy wins for an attacker and complete control over your Active Directory domain. Privilege escalation in Active Directory (AD) allows cyber attackers to increase access within the environment and potentially compromise entire networks—undetected. We’ll walk through why ESC flaws are so damaging and which template settings to avoid when using ADCS. You’ll see how attackers can chain vulnerabilities like PetitPotam (NTLM Relay Attack) and ADCS web enrollment for privilege escalation, achieving Domain Admin in less than 30 seconds. By the end of this presentation, you will understand which configurations to avoid and how to detect these flaws in your own environment for prevention, mitigation and remediation purposes. We’ll also cover detection tools and how this data can be ingested into platforms like BloodHound.

Think cookies are just harmless crumbs left behind by websites? Think again. In this presentation, we will dissect the real nature of browser cookies — how they are harvested, how that data gets traded, and how is weaponized by third parties to shadow your every move across the world wide web. We will expose the under-the-hood mechanics of online web tracking, from deceptive consent banners like pop-ups to the vast data ecosystems profiting off your clicks. You will walk away with practical defenses, including how to wield tools like uMatrix and the Brave browser to disrupt tracking and take back control of your digital footprint.

This presentation is about Generative Artificial intelligence -AI- Security and Exploitation with a specification in Prompt Injection, a very simple, yet effective vulnerability ranked number 1 in the OWASP Top Ten Generative AI vulnerabilities. This presentation will go into depth about all forms of Prompt Injection attacks as well as their mitigations. Furthermore, there will be a demonstration of a proof of concept -POC- of an adversarial generative AI prompt injection attack

Join us for an exciting, hands-on Lockpicking Workshop where we explore the art and science behind mechanical locks—and how understanding their inner workings makes us all smarter about security. Whether you're a curious beginner or a cybersecurity enthusiast, this workshop offers a rare peek into the physical side of security. Far from encouraging unauthorized entry, this workshop teaches the mindset of a security professional: understanding how things break is the first step in learning how to protect them. Come ready to pick, learn, and challenge your thinking—because security is not just digital, and curiosity is the master key.

Coming soon... yes, you too can learn