Conference recordings are now online!

Conference recordings are now online!

We've highlighted a few talks worth checking out:

• Root From Kilometers Away: Ubiquiti AirMax RCE. The researchers analyze the AirMAX protocol and demonstrate two vulnerabilities that allow an unauthenticated remote attacker to gain full control over a device. The attack requires only a specially crafted Wi-Fi frame transmitted from several kilometers away.

• Can AI Do Novel Security Research? Meet the HTTP Terminator. The author presents a system for automatically discovering and exploiting new variants of HTTP desync attacks. The resulting techniques desynchronize requests and responses, allowing an attacker to obtain data belonging to other users.

• Born Corrupted: Hack the Planet by Hijacking Linux Package Factories. Multiple compromise chains were discovered in the package-build infrastructure used by Ubuntu, Alpine, and Fedora. Artifact-handling flaws, excessive automation privileges, and broken trust boundaries allow an attacker to make official systems build, sign, and distribute malicious packages.

• Reflecting Your Authentication: Look in the Mirror — It’s You. The talk presents CVE-2026-26119 in the Windows Admin Center web interface. A regular domain user can use DCOM to reflect the server’s Kerberos authentication back to its own web interface and gain SYSTEM privileges. If WAC is deployed on an AD CS server, the attack can lead to a full domain compromise.

• Is Spectre Dead Yet? Eight Years In, Hypervisors Still Pwnable. The talk explores Spectre attacks against the FreeBSD bhyve and Oracle VirtualBox hypervisors, along with techniques for bypassing existing mitigations. The presented PoC exploits allow a guest virtual machine to read arbitrary regions of host memory.

• The CI/CD Escape Room — Eleven Doors, Zero Exploits. The researcher demonstrates a chain from a regular source-control account to cloud-organization administrator privileges without exploiting software vulnerabilities. The chain relies on code execution during Terraform plan generation, flawed federated trust policies, and excessive IAM permissions.