Schedule
Room
Timeline size
Day 1
November 19, 2026
Time
A-Side
B-Side
CTF Room
Lockpicking
Marble Room
Off the Record
Stream 'n Chill (no Netflix)
Workshop
7:00 am
7:30 am
8:00 am
8:30 am
9:00 am
9:30 am
10:00 am
10:30 am
11:00 am
11:30 am
12:00 pm
12:30 pm
1:00 pm
1:30 pm
2:00 pm
2:30 pm
3:00 pm
3:30 pm
4:00 pm
4:30 pm
5:00 pm
5:30 pm
6:00 pm
6:30 pm
7:00 pm
Walk-in & Registration
Walk-in & Registration
Marble Room
Opening notes
Alexandra Charikova, Hugo van den Toorn, Joey Dreijer, Korstiaan Stam, Marina Bochenkova, Paul Moreno, Roald Nefs
Opening notes
Alexandra Charikova, Hugo van den Toorn, Joey Dreijer, Korstiaan Stam, Marina Bochenkova, Paul Moreno, Roald Nefs
A-Side
Opening Keynote by Ellen Mok
Ellen Mok
Opening Keynote by Ellen Mok
Ellen Mok
A-Side
Staring into the Darkness: Compromised C2 Server Analysis for Network Threat Hunting
John Strand
Staring into the Darkness: Compromised C2 Server Analysis for Network Threat Hunting
John Strand
A-Side
B-Side Stream
B-Side Stream
Stream 'n Chill (no Netflix)
From Signals to Shutdowns: Tags, Transmitters, and Trips in Cyber-Physical Systems
Jalal Bouhdada
From Signals to Shutdowns: Tags, Transmitters, and Trips in Cyber-Physical Systems
Jalal Bouhdada
CTF Room
Gamifying AI Threat Modeling and Security Requirement Analysis to Empower Agile Software Development
Johan Sydseter
Gamifying AI Threat Modeling and Security Requirement Analysis to Empower Agile Software Development Gamifying AI Threat Modeling and Security Requirement Analysis to Empower Agile Software Development Gamifying AI Threat Modeling and Security Requirement Analysis to Empower Agile Software DevelopmentGamifying AI Threat Modeling and Security Requirement Analysis to Empower Agile Software Development
Johan Sydseter
Workshop
How a regulator approaches the Cyberbeveiligingswet/NIS2
Alan Lewis, Randy Snellenburg
How a regulator approaches the Cyberbeveiligingswet/NIS2
Alan Lewis, Randy Snellenburg
Off the Record
Social lockpicking afternoon at Bsides
Ivan Iushkevich
Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at Bsides Social lockpicking afternoon at BsidesSocial lockpicking afternoon at Bsides
Ivan Iushkevich
Lockpicking
The Art of Same-Site Phishing
Jorian Woltjer
The Art of Same-Site Phishing
Jorian Woltjer
B-Side
Coffee Break
Coffee Break
Marble Room
CTF: Pentester vs AI
Gwendal Mognier
CTF: Pentester vs AI CTF: Pentester vs AI CTF: Pentester vs AI CTF: Pentester vs AI CTF: Pentester vs AI CTF: Pentester vs AI CTF: Pentester vs AI CTF: Pentester vs AI CTF: Pentester vs AICTF: Pentester vs AI
Gwendal Mognier
CTF Room
OSINT in the Age of AI: Personal Privacy and Cyber Threat Intelligence
Domagoj Marić
OSINT in the Age of AI: Personal Privacy and Cyber Threat Intelligence
Domagoj Marić
B-Side
The Cost of Security: Measuring the Operational Impact of Endpoint and SIEM Visibility
Kıvanç Aydın, Zafer Balkan
The Cost of Security: Measuring the Operational Impact of Endpoint and SIEM Visibility
Kıvanç Aydın, Zafer Balkan
Off the Record
Your credentials were leaked, so what?
Pascal Kahn, Xavier Mertens
Your credentials were leaked, so what?
Pascal Kahn, Xavier Mertens
A-Side
PhysSecHound Has Entered the Building – OpenGraphing Physical Security
Kieran Croucher
PhysSecHound Has Entered the Building – OpenGraphing Physical Security
Kieran Croucher
Off the Record
Finding the Crypto: Lessons from Cryptographic Asset Discovery in Government
Mine Temürhan
Finding the Crypto: Lessons from Cryptographic Asset Discovery in Government
Mine Temürhan
B-Side
n00b guide into the Dutch Hacker Scene
Nancy Beers
n00b guide into the Dutch Hacker Scene
Nancy Beers
A-Side
Lunch Break
Lunch Break
Marble Room
Design Your First PCB: From Concept to Board
- Tcccorp -
Design Your First PCB: From Concept to Board Design Your First PCB: From Concept to Board Design Your First PCB: From Concept to Board Design Your First PCB: From Concept to Board Design Your First PCB: From Concept to BoardDesign Your First PCB: From Concept to Board
- Tcccorp -
Workshop
How To Think In Graphs
Martin Sohn Christensen
How To Think In Graphs
Martin Sohn Christensen
B-Side
Inside a celebrity cyber scam: deepfakes & mind games
Kerry Tomlinson
Inside a celebrity cyber scam: deepfakes & mind games
Kerry Tomlinson
A-Side
Tracing Ghost Suppliers: What DNS, TLS and JavaScript Reveal About Your Real Supply Chain
Robin de Vries
Tracing Ghost Suppliers: What DNS, TLS and JavaScript Reveal About Your Real Supply Chain
Robin de Vries
Off the Record
Introducing Cycas: a scalable DFIR automation pipeline in Azure
Tom Sturme
Introducing Cycas: a scalable DFIR automation pipeline in Azure
Tom Sturme
B-Side
Lock, Badge, Breach: Inside a Real-World Physical Pentest
Paul Nieto III
Lock, Badge, Breach: Inside a Real-World Physical Pentest
Paul Nieto III
A-Side
Trust by Design: When Deception becomes Education
Brigitte Heijkoop
Trust by Design: When Deception becomes Education
Brigitte Heijkoop
Off the Record
1979 called. They already figured it out.
Kaja Möller
1979 called. They already figured it out.
Kaja Möller
B-Side
A Few Dollars to Disappear: Breaking C2 Beaconing Detection
Mehmet Ergene
A Few Dollars to Disappear: Breaking C2 Beaconing Detection
Mehmet Ergene
A-Side
The Context Gap: Why Your SOC Misses Attacks It Already Logged
Marvin Ngoma
The Context Gap: Why Your SOC Misses Attacks It Already Logged
Marvin Ngoma
Off the Record
Refreshments served
Refreshments served
A-Side
Clickfix: Copy, Paste, Compromise
Toni Dujmović
Clickfix: Copy, Paste, Compromise
Toni Dujmović
Off the Record
Ants, Bricks and Spiders: Threat Emulation on the VMware Stack
Leo Tsaousis
Ants, Bricks and Spiders: Threat Emulation on the VMware Stack
Leo Tsaousis
B-Side
Hacking Browsers: The Easy Way
Robbe Van Roey
Hacking Browsers: The Easy Way
Robbe Van Roey
B-Side
Racing the Adversary: Accelerating IR with Intelligence-Led Velocity
Nicholas Pockl-Deen
Racing the Adversary: Accelerating IR with Intelligence-Led Velocity
Nicholas Pockl-Deen
Off the Record
The hype around autonomous pentesting, and where the coverage actually is
Antoine Carossio
The hype around autonomous pentesting, and where the coverage actually is
Antoine Carossio
A-Side
Re-shipping Death: Inside Russian Smuggling Operations
Alex Holden
Re-shipping Death: Inside Russian Smuggling Operations
Alex Holden
A-Side
Closing notes
Alexandra Charikova, Hugo van den Toorn, Joey Dreijer, Korstiaan Stam, Marina Bochenkova, Paul Moreno, Roald Nefs
Closing notes
Alexandra Charikova, Hugo van den Toorn, Joey Dreijer, Korstiaan Stam, Marina Bochenkova, Paul Moreno, Roald Nefs
A-Side
Drinks
Drinks
Marble Room