iiinova — where your digital self keeps evolving

BSidesFrankfurt @bsidesfra.bsky.social · 07/09/2026

Defending Microsoft Entra ID 4-hour hands-on workshop covering common attacks, tokens, Conditional Access, and real KQL hunting. Device code phishing • AiTM • refresh token replay — and how to detect them. With Ethan Bowen. #EntraID #CloudIdentity #SOC

022

BSidesFrankfurt @bsidesfra.bsky.social · 04/09/2026

A Phishing Trip with Fancy Bear Hands-on analysis of a real APT28 attack chain — phishing email → payload → persistence → C2. Interactive platform, real artefacts, free tools only. Beginner-friendly. #FancyBear #APT28 #MalwareAnalysis

032

BSidesFrankfurt @bsidesfra.bsky.social · 03/09/2026

Cryptography: An Evolutionary Tale From Caesar cipher → Enigma → RSA → Quantum cryptography — in 4 hands-on hours. Encrypt, break, and experiment your way through the history of secret communication. Interactive. Practical. No pure theory.

042

BSidesFrankfurt @bsidesfra.bsky.social · 02/09/2026

Hunting Supply Chain Attacks Hands-on analysis of real malware targeting npm, PyPI, GitHub & VS Code extensions. Work with samples from Contagious Interview, Glassworm & TeamPCP — then hunt live and produce actionable intel with Paul McCarty, OpenSourceMalware

032

BSidesFrankfurt @bsidesfra.bsky.social · 01/09/2026

Desktop Application Pentesting 101 Java fat clients still matter — and they’re tested very differently from web apps. Reverse engineer the client, analyze proprietary protocols, build a custom pentest client, and exploit the backend. Hands-on workshop with Jakob Steeg & Tim Kranz.

022

BSidesFrankfurt @bsidesfra.bsky.social · 31/08/2026

Introduction to Physical Security Testing Lock picking • Door bypasses • Access card cloning Hands-on workshop with Nico Leidecker & Harris Nuhanović (NVISO). Test your skills on the Covert Access Vault (CAV). Time to go physical.

022

BSidesFrankfurt @bsidesfra.bsky.social · 28/08/2026

Rustacean Introduction to Shellcoding Write your first position-independent implant in Rust — from scratch. PE parsing, loader design, PIC, and real working code to take home. Bring a Windows VM + x64dbg. Baseline code & Docker container provided.

022

BSidesFrankfurt @bsidesfra.bsky.social · 27/08/2026

Keyless Entry: Hacking SwitchBot Smartlocks AES-CTR with no integrity checks → universal software-only unlock of a popular smart lock. Live exploit + the vendor’s broken patch + a legendary 100€ bounty. Kolja Grassmann shows how easy it can get when crypto is done wrong.

054

BSidesFrankfurt @bsidesfra.bsky.social · 26/08/2026

Welcome to Hybrid Hell Enterprise identity is no longer just Active Directory. AD + Entra ID + Azure + M365 + SaaS + multi-tenant trusts = a massive, poorly understood attack surface. Georg Heise shows how attackers follow the trust relationships — not the technology boundaries.

032

BSidesFrankfurt @bsidesfra.bsky.social · 25/08/2026

Lessons Learned While Building an Agentic SOC The good (L1 triage & timelines), the bad (mediocre results & wasted tokens), and the scary (when agents cause incidents). Aaron Jewitt shares Elastic’s real journey — no hype, just hard-won lessons.

022

BSidesFrankfurt @bsidesfra.bsky.social · 24/08/2026

Deconstructing Modern macOS Initial Access Vectors The “macOS is safe” myth is over. Stephan Berger shows how attackers are landing on Apple devices today: Google Ads → ClickFix → AppleScript/JXA → DMGs, PKGs & Electron apps. Real tradecraft. Real defense insights.

065

BSidesFrankfurt @bsidesfra.bsky.social · 21/08/2026

Hacking Consumer Drones: From Flash Dumping to Root Exploits Full chain on the Potensic Atom 2: Flash dumping → corrupted firmware recovery → RF protocol RE → remote root. Tim Schmidt shows the real hardware + software exploit process, end to end. #HardwareHacking #IoT

022

BSidesFrankfurt @bsidesfra.bsky.social · 20/08/2026

Only 20 days left — grab your ticket now before it’s gone. Don’t miss out! 👉 tickets.bsidesfrankfurt.org/bsidesfrankf... #BSidesFrankfurt #Tickets #CyberSecurity

032

BSidesFrankfurt @bsidesfra.bsky.social · 19/08/2026

What Windows 11 Remembers (And Most Investigators Miss) Recall, Phone Link SMS history, Copilot chats, and secondary telemetry most playbooks still ignore. Maurice Fielenbach shows the evidence surface standard triage misses — based on hundreds of real cases. #DFIR #Windows11

033

BSidesFrankfurt @bsidesfra.bsky.social · 18/08/2026

Can AI do the job of a senior pentester for a few hundred euros? This talk shows real-world results of AI in SAST, DAST, source code analysis & even Active Directory exploitation — the good, the bad, and the confidently wrong. No hype. Just practical insights.

032

BSidesFrankfurt @bsidesfra.bsky.social · 12/08/2026

QuoIntelligence is back as Silver Sponsor! The European Threat Intelligence Provider delivering real Threat Intelligence as-a-Service — actionable, tailored, and built for decision-makers. Welcome back! 🔥 #SilverSponsor #QuoIntelligence www.quointelligence.eu

quointelligence.eu

QuoIntelligence — Finished Threat Intelligence Tailored for YOU.

Our finished intelligence will significantly reduce your operational risks and allow you to make informed security decisions.

010

BSidesFrankfurt @bsidesfra.bsky.social · 10/08/2026

First schedule is online! (Still subject to changes — keep an eye on it) Workshops & workshop tickets are live now! Start planning

022

BSidesFrankfurt @bsidesfra.bsky.social · 06/08/2026

Secure Code Warrior is now a Bronze Sponsor! Security at the point of code creation — not as an expensive afterthought. Secure coding skills, safe AI tools, and measurable results. Welcome! 🔥 www.securecodewarrior.com

securecodewarrior.com

AI Software Governance from #1 Secure Coding Training

AI Software Governance from the #1 secure coding training company.

020

BSidesFrankfurt @bsidesfra.bsky.social · 24/07/2026

Want to splice fiber optics yourself? @schutzwerk.bsky.social is bringing their gear — cut & “glue” real fiber on conference day! Hands-on session you don’t want to miss 🔥 #FiberSplicing #HandsOn

021

BSidesFrankfurt @bsidesfra.bsky.social · 23/07/2026

NVISO brings the CAV – Covert Access Vault back! Tired of talks? Try breaking into the box. Spoiler: it won’t be easy 😏 Real physical access fun is back! #CAV #PhysicalSecurity #NVISO

011

BSidesFrankfurt @bsidesfra.bsky.social · 16/07/2026

Welcome back, IGEL — our Gold Sponsor once again! The Secure Endpoint OS Platform trusted by enterprises worldwide. Simplifying complexity and securing digital workspaces since 2001. Thank you for your continued support! 🔥 www.igel.com #GoldSponsor #IGEL

igel.com

The Secure Endpoint OS Platform | IGEL Technology

IGEL is a transformative, secure enterprise endpoint OS platform designed for SaaS, DaaS and VDI environments.

021

BSidesFrankfurt @bsidesfra.bsky.social · 14/07/2026

New at BSidesFrankfurt 2026: a conference card you design yourself. Every attendee gets a blank ID-1 card (85.6×54mm) — your art, handle, QR, favourite CVE. We print it and hand it to you on the day. bsidesfrankfurt.org/blog/design-...

010

BSidesFrankfurt @bsidesfra.bsky.social · 07/07/2026

Excited to have Schutzwerk GmbH as our new Bronze Sponsor! Mastering Cybersecurity from Silicon to Cloud with 15+ years experience, penetration testing, Red Teaming, Embedded & AI Security and more. Welcome aboard! 🔥 #BronzeSponsor #SCHUTZWERK www.schutzwerk.com

schutzwerk.com

Willkommen bei SCHUTZWERK

Mastering Cybersecurity from Silicon to Cloud. SCHUTZWERK ist Ihr Partner für die unabhängige Prüfung und ganzheitliche Optimierung aller Aspekte der Informations-, IT- und Cybersicherheit in Ihrem Un...

000

BSidesFrankfurt @bsidesfra.bsky.social · 27/06/2026

Yeah, so… @jrn.bsky.social is doing the keynote. Just some random guy who’s been in the hacker scene for decades. Nothing special. Get ready for a totally average talk!

011

BSidesFrankfurt @bsidesfra.bsky.social · 18/06/2026

CFP Still Open and waiting for you! Submit your talk now! Too hot to do anything else anyway! Conference: Thursday, September 10, 2026 cfp.bsidesfrankfurt.org

000

BSidesFrankfurt @bsidesfra.bsky.social · 09/06/2026

⏰ CFP Still Open! Conference: Thursday, September 10, 2026 Submit your talk (or workshop) now! 👀 cfp.bsidesfrankfurt.org #CFP #CallForPapers

cfp.bsidesfrankfurt.org

Events :: pretalx

Talks and talk submissions by pretalx

021

BSidesFrankfurt @bsidesfra.bsky.social · 24/05/2026

Thrilled to announce Red Cyber Security GmbH from Frankfurt as our new Silver Sponsor! “Real Attack Simulation. Real Security.” — practical and hard-hitting penetration testing. Welcome aboard! 🔥 red-cyber-security.com

red-cyber-security.com

Red Cyber Security GmbH

Über 20 Jahre Erfahrung in Penetrationstests. Red Cyber Security stärkt Ihre Cyber-Resilienz, bevor Sicherheitslücken zu realen Bedrohungen werden.

000

BSidesFrankfurt @bsidesfra.bsky.social · 14/05/2026

Proud to announce BSides Porto as our new Community Partner! Stronger together — building a bigger and better cybersecurity community! 🔥 Welcome aboard! #BSidesPorto #CyberCommunity www.bsidesporto.org

bsidesporto.org

BSides Porto 2026 | Cybersecurity Conference

Join the Portuguese cybersecurity community at BSides Porto 2026. Two days of talks, workshops, and networking. Jun 26-27, 2026.

000

BSidesFrankfurt @bsidesfra.bsky.social · 08/05/2026

Great to have usd AG onboard as a Bronze Sponsor! Security analyses, consulting & audits all driven by their mission: #moresecurity Welcome and thank you! 🔥 www.usd.de

usd.de

usd AG

Die usd AG schützt Unternehmen vor Hackern und Kriminellen. So dynamisch und vielfältig wie die Bedrohung, ist ihre Arbeit.

000

BSidesFrankfurt @bsidesfra.bsky.social · 07/05/2026

Big thanks to Siemens Energy for joining us again as a Gold Sponsor! +150% stock performance in 12 months… must be all that sponsor karma 😏 Welcome back! 🔥 www.siemens-energy.com/de/de/home.h...

siemens-energy.com

Siemens Energy in Deutschland

Wir unterstützen Unternehmen und Länder bei der Reduzierung von Emissionen über die gesamte Energielandschaft hinweg.

000

BSidesFrankfurt @bsidesfra.bsky.social · 07/05/2026

We’re busy breaking every appliance with copyfail exploits, but you should still submit your talk! CFP & Workshop CFP still open! Don’t make us pwn your deadline too 👀 Submit now -> cfp.bsidesfrankfurt.org

000

BSidesFrankfurt @bsidesfra.bsky.social · 15/04/2026

Big welcome to OffSec as our new SILVER Sponsor! Home of OSCP and world-class offensive security training. So glad to have you onboard!

000

BSidesFrankfurt @bsidesfra.bsky.social · 05/04/2026

Excited to announce Blaze Information Security as our new GOLD Sponsor! CREST-accredited penetration testing pros delivering elite red teaming and offensive security services. Welcome onboard, Blaze — let's make this event epic! 🔥 www.blazeinfosec.com

blazeinfosec.com

CREST Penetration Testing Services Company | Blaze

Boutique penetration testing services company. We help organizations worldwide expose digital risks and defend against cyber threats. Talk to an expert today.

000

BSidesFrankfurt @bsidesfra.bsky.social · 27/03/2026

🚨 Early Bird tickets for BSides Frankfurt 2026 drop this Wednesday (April 1)! Only 30 discounted tickets available. Community-driven infosec conference + workshops → Sept 10–11, 2026. Grab yours before they're gone → bsidesfrankfurt.org

bsidesfrankfurt.org

BSidesFrankfurt

000

BSidesFrankfurt @bsidesfra.bsky.social · 18/01/2026

Conference: Sept 10, 2026 | Workshops: Sept 11, 2026. Tickets on sale end of February. CFP is open now! www.bsidesfrankfurt.org

bsidesfrankfurt.org

BSidesFrankfurt

011

BSidesFrankfurt @bsidesfra.bsky.social · 24/12/2025

Watch Evgen Blohm & Marius Genheimer's *Living on the Edge*: forensic insights into compromised edge devices (Cisco, Fortinet, Citrix, Ivanti) & tips to evict threat actors. Watch now: youtu.be/ZzGCs9H4Khs

youtu.be

Evgen Blohm, Marius Genheimer - Living on the Edge: Evicting threat actors from perimeter appliances

YouTube video by BSidesFrankfurt

000

BSidesFrankfurt @bsidesfra.bsky.social · 24/12/2025

Russia & China outsource cyber/influence ops to eCrime groups, contractors & tech firms for deniability, speed & flexibility. Contrasts Russia's decentralized model vs China's military-civil fusion. youtu.be/TSQ3-aBdNRM

youtu.be

Alixia Rutayisire - The Proxy Warfare: Unmasking Russian and Chinese externalized Cyber Capabilities

YouTube video by BSidesFrankfurt

000

BSidesFrankfurt @bsidesfra.bsky.social · 23/12/2025

Break Entra ID? Easy! Misconfigs, over-scoped perms & weak CA = game over. Watch real-world attacks recreated in EntraGoat, a new open-source CTF lab. #EntraID #CloudSecurity youtu.be/F3HRnkp0fV4

youtu.be

Tomer Nahum, Jonathan Elkabas - Breaking Entra: Real-World Cloud Identity Attacks You Can Recreate

YouTube video by BSidesFrankfurt

000

BSidesFrankfurt @bsidesfra.bsky.social · 22/12/2025

Dive into Windows kernel subversion with rootkits & exploits! Explore undocumented funcs, novel vuln driver discovery, & bypassing EDRs/Patchguard. youtu.be/e_asSUhz0rE

youtu.be

Juan Sacco - Subverting the Windows Kernel with exploits and rootkits (BSidesFrankfurt 2025)

YouTube video by BSidesFrankfurt

011

BSidesFrankfurt @bsidesfra.bsky.social · 21/12/2025

Behind Closed Doors: Physical Red Team Tactics by Moritz Thomas & Firat Acar. Discover stealth techniques, rogue device deployment, real-world case studies & prevention strategies. youtu.be/f9Ld3WH7L7o

youtu.be

Moritz Thomas, Firat Acar - Behind Closed Doors: Physical Red Team Tactics (BSidesFrankfurt 2025)

YouTube video by BSidesFrankfurt

011

BSidesFrankfurt @bsidesfra.bsky.social · 19/12/2025

How Alex Holden Took Down Killnet: Exposed ties to Russian darknet drug market Solaris, diverted funds to Ukraine charity, eroded trust & backing. Leader KillMilk unmasked. Inside story! youtu.be/iQa9iTU8yWs

youtu.be

Alex Holden - Versus Killnet (BSidesFrankfurt 2025)

YouTube video by BSidesFrankfurt

021

BSidesFrankfurt @bsidesfra.bsky.social · 19/12/2025

Get into the holiday spirit! We're excited to announce that the videos from BSidesFrankfurt 2025 will be released in the coming days, making for an early Christmas gift for our community. Stay tuned!

010

BSidesFrankfurt @bsidesfra.bsky.social · 02/12/2025

Sergej Epp from Sysdig explores why verifiers are the true currency of AI in security, how Reinforcement Learning has transformed penetration testing into a Capture-the-Flag environment, and what defensive strategies must be developed to effectively counter these threats. youtu.be/BaSuergb1cY

youtu.be

Sergej Epp - Keynote: Winning the AI Race: Verifiability is All You Need (BSidesFrankfurt 2025)

YouTube video by BSidesFrankfurt

000