This event has ended. Visit the official site or create your own event on Sched.

Security BSides Prague 2026

It is an annual, community-driven information security conference held in Prague. The event provides a platform for cybersecurity professionals, enthusiasts, and researchers to share knowledge, exchange ideas, and discuss the latest trends in the field. It’s a unique opportunity to connect with like-minded individuals, expand professional networks, and stay informed about the ever-evolving cybersecurity landscape.
More info at www.bsidesprg.cz

Charlie

09:00 CEST

Autonomous Malware Logic: Practical Design and Analysis of Stealth Execution Techniques Novotel - WR2Kashif Amanat Mad data science for practical C2 detection Novotel - WR1Eva Szilagyi • David Szili

12:00 CEST

BloodHound Basics Workshop Novotel - WR2Martin Sohn Christensen • Joey Dreijer • Hugo van den Toorn

13:00 CEST

Payload Obfuscation for Red Teams Novotel - WR1Duncan Ogilvie

09:00 CEST

Digital Forensics on MacOS - Analyzing current Threats Novotel - WR1Evgen Blohm Unveiling the Obscurity: Decrypting Agent-Server Communications Novotel - WR2Jorge Escabias

13:00 CEST

Beyond the Web: Exploration of Windows Userland Weaknesses Novotel - WR1malacupa Practical Threat Modeling: from vague worries to an actionable backlog Novotel - WR2Michal Svoboda

08:00 CEST

08:40 CEST

Opening talk Lucerna Cinema - MAINMartin Hron

09:45 CEST

Coffee Break All

10:10 CEST

Adventures in Router Firmware Through Dynamic Taint Analysis Lucerna Cinema - AUXRavshan Rikhsiev

10:40 CEST

JA3/JA4+ hashes: A "Secret" Fingerprint Identifying Bots and Scrapers Lucerna Cinema - AUXMiloslav Homer

11:10 CEST

Malware Evasion - Packers, Loaders, and Why Your EDR Misses Them Lucerna Cinema - AUXMassimo Bertocchi

11:50 CEST

Exploit is in the logic: Reversing an Android application to hack transactions on an NFC tag. Lucerna Cinema - MAINLuigi Gubello

12:35 CEST

Lunch Break All

13:35 CEST

Inside the Fortress: Attacking RFID Access Control Systems Lucerna Cinema - AUXMarco Sanchez

14:25 CEST

Ghost in the Script: Impersonating Google App Script projects for stealthy persistence Lucerna Cinema - AUXJakub Pavlík • Bleon Proko

15:45 CEST

Coffee Break 2 All

16:10 CEST

Blind the Kernel: Subverting Integrity Checks via Semantic Asymmetry Lucerna Cinema - MAINTejaswini Sandapolla

10:10 CEST

Breaching The Perimeter: The Forgotten Attack Vector That Always Works Lucerna Cinema - AUXJiří Vaněk • Chris Cowling

11:50 CEST

1 Click, 0 Warnings: Hijacking Mic, Camera & GPS via Browser UI Blindspots Lucerna Cinema - AUXArmaan Pathan

13:35 CEST

Painless IOS App Pentesting Lucerna Cinema - MAINKhayal Farzaliyev

14:25 CEST

What an "Exploitable CVE" Really Means: Moving Beyond CVSS Scores Lucerna Cinema - MAINEryx Paredes

15:15 CEST

Decoding Chinese State-Sponsored Cyber Activity: Behavioral Models for Early Detection and Effective Threat Hunting Lucerna Cinema - MAINNathaniel Jones LLMs for Vulnerability Fixing: Hype or Reality? Lucerna Cinema - AUXEdouard Viot

15:40 CEST

Coffee break All