Agenda 2026

Day 1 - 27th of October

8:00 - 9:00
Registration, Coffee and Snacks
9:00 - 9:15
Welcome Address
9:15 - 10:15
Keynote - Recursively self-improving security: AI offense, AI defense, and what's left for the humans by Oege de Moor
10:15 - 11:15
Automating Myself Out of a Job, Badly: Guest to Host on Apple Virtualization by Josh Maine
11:15 - 11:45
Coffee Break
11:45 - 12:45
Cracking open the closed door by Nils Ole Timm
12:45 - 13:15
100 V8 Exploits: lessons learned from three years of v8CTF by Stephen Röttger and Carl Smith
13:15 - 14:15
Lunch
14:15 - 15:15
Netflix and Pwn, Remotely Exploiting MediaTek Phones via the GenieZone Hypervisor by Philipp Mao and Leo Larigauderie
15:15 - 16:15
Harvest Season for SLUB: From io_uring vulnerability to Novel Sheaf-Based Exploitation Techniques by Hao-Yu Yang and Yu-Ting Lin
16:15 - 16:45
Coffee and Beer Break
16:45 - 17:45
Breaking NTFS at Scale: From an Unmapped Attack Surface to SYSTEM by Yunpeng Tian and Gongming Wang
17:45 - 18:45
The Cloud Runs on GPUs. So Do We: Breaking Out Through GPU Drivers by Lei Lu and Ji'an Zhou
18:45 - 19:15
Discovering iOS 0-Days with Muse Spark by Luke McLaren
22:30
Party at JW Marriot

Day 2 - 28th of October

9:30 - 10:30
Keynote - One Law for the Machine War by James Redmond
10:30 - 11:30
Stickers r-lot-tie Handle: Vulns, Bypasses, and Telegram’s Zero-Click Attack Surface by Saifeldeen Aziz
11:30 - 12:00
Coffee Break
12:00 - 13:00
Crashing the crashpad by Andres Luksenberg
13:00 - 14:00
Lunch
14:00 - 14:30
Painting Out of the Box: Escaping the Chrome Renderer Sandbox via Skia by Quang L
14:30 - 15:30
SmorgasBored: Are you tired of macOS logic bugs yet by Gergely Kalman
15:30 - 16:30
Off by 2 Bits: Post-Mortem of a “Perfect” Safari Exploit at Pwn2Own by Edouard Bochin & Tao Yan
16:30 - 17:00
Coffee and Beer Break
17:00 - 18:00
ZeroDay to Zero Dollars: Exploiting the Windows Management Instrumentation Device by Erik Egsgard
18:00 - 19:00
Read Access, Root Shell, Repeat: The Page-Cache Corruption Lineage by Rajat Gupta
19:00 - 19:30
100 Exploits Later: V8 Security in the Age of AI by Samuel Groß and Michael Lippautz
22:30
Closing Party at JW Marriot

The Venue

Address

2-21-2 Takanawa
Minato-ku
Tokyo
108-0074
Japan