Cybersecurity in Berlin: Nullcon Returns With Hands-on Hacks | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware

Professional Certifications & Continuous Training
,
Training & Security Leadership

Pwning Ray-Bans and VWs, Finding Resilience, Escaping Containers, Embracing Chaos

Mathew J. Schwartz
(euroinfosec)

•
November 5, 2026    

Image: Shutterstock/ISMG
The cyberpunks are back in Berlin, for this year’s annual Nullcon cybersecurity conference. Cue five days of research-led briefings, training, professional networking and capture-the-flag competitions.See Also: 28.3% of CVEs Exploited Within 24 Hours — Can Your Bank Keep Up?
Launched in 2010 in Goa, India, Nullcon arose from null, the country’s largest open-source and active security community. This is the fifth year the conference has run in Berlin, where it’s being held in Berlin-Mitte, the central and historical heart of the city.
Immersion in the tools, techniques, research, conversations and thinking that collectively drive modern cybersecurity remains the focus of Nullcon.
This week kicked off with three days of training tracks, running from Monday to Wednesday, focused on agentic security, mastering “strategic artificial intelligence penetration” offensive techniques for hacking large language models, advanced Active Directory intrusion tactics and strategies for exploiting Windows binaries.
Community-led briefings dominate the program Thursday and Friday, launching with a keynote presentation from web security and penetration testing expert Mario Heiderich, founder of Berlin-based Cure53, on all things AI, including “how it feels to be a meat proxy” with AI agents always saying “yes” to everything.
In a Friday keynote, Institute for Security and Open Methodologies’ “I make bad things go away” Pete Herzog promises to deliver a “high-velocity collision of physics, quantum and hacker culture” to prove “that true security isn’t just a framework you build; it’s a fundamental force of nature you embrace.”
Can you buy cyber resilience, in the form of services and technology? That’s the focus of a panel discussion, moderated by Anna Delaney, ISMG’s director of productions, featuring panelists Osama Jamaleddine, chief business information security officer at Deutsche Bank, Sven Zehl, CISO of German fintech Moss and Rubrik Field CTO Frank Schwaak.
With AI continuing to be used and abused, Gavin Reid and Lindsay Kaye of Human Security will look into fraudsters’ latest physical and cloud-based phone farms and their embrace of AI, and what can be done to spot such abuse.
Trend Micro’s Nitesh Surana will explore “hostile inference,” in the form of Docker’s local AI infrastructure being used to effect container escapes.
Can hackers pwn your car? If it’s a Volkswagen ID.4 all-electric compact sports utility vehicle, the Bluetooth, infotainment and virtualization systems are definitely at risk, researchers Radu Motspan and Abdellah Benotsmane will warn in their technical presentation, which reviews an exploitation chain they discovered that can deliver real-world consequences.
Endpoint detection and response expert Ray Goh of Mandiant is set to explore “what gaming anti-cheat systems can detect that enterprise EDR solutions might miss.”
Finally, if the future’s so bright, then why is pamoutaf from Italian vulnerability research firm Bynario demonstrating arbitrary code execution on Meta’s Ray-Ban sunglasses?
That’s a taste of the many different briefings in store for this year’s fifth annual German edition of Nullcon. Come to Berlin, feel the cyber.

——————————————————-
Click Here For The Original Source.

Next Article

Previous Article

Related