Speakers

Ahmed Abdelrazek

Ahmed holds an M.Sc. in Computer Science (IT Security and Reliability) from the University of Passau, where his thesis focused on hybrid symbolic-execution-and-fuzzing techniques for embedded firmware. He worked on NXP Semiconductors' Vulnerability Analysis Team in Hamburg, developing concolic execution engines, AFL++-based fuzzing pipelines, and taint analysis tooling for ARM and RISC-V firmware, and is now focused on vulnerability research.

Andoni Alonso

Co-creator of unicrons.cloud, sharing cloud security knowledge with the community. Started as a sysadmin, evolved into SRE, and a few years ago crossed over to Security. Running and playing padel when I'm out of tokens.

Arad Donenfeld

Arad Donenfeld is an attacks and exploits developer in SafeBreach, and has a background in security research from several roles. With his strong foundations of development, security, and operating systems internals, Arad develops tools for offensive operations, detection methods, and workflow automation. Arad focuses on practical techniques to identify and manipulate vulnerabilities and breaches, while testing and improving defenses across broad environments.

Daniel Schwendner

Daniel Schwendner is a Cyber Security Specialist and former DevOps Engineer with a strong passion for Cyber Security. With a background in mobile application security and hardware security, he participates in bug bounty hunting and shares his security knowledge online.

I’m a Systems & Cryptography Engineer with a background in Political Science and Esports, which shaped my research mindset. I started as a Python backend engineer working with Django, APIs, and application architecture, then gradually shifted toward security, systems, and cryptography to understand how software behaves beneath the surface. Today, I work mainly with Rust, along Python with and C++, focusing on protocol experiments, cryptography, and security-oriented systems.

Evgen Blohm

Evgen Blohm is an experienced DFIR expert who has been involved in responding to a large number of cyber incidents. He is based in Hamburg, Germany and is currently working for InfoGuard AG, where he is also supporting customers with compromise assessments and dark web monitoring.

Gregor Ziegltrum

Gregor Ziegltrum is a Senior Consultant at TNG Technology Consulting, specializing in innovative AI solutions. His work spans building agentic systems, as well as benchmarking, training, and fine-tuning Large Language Models. Beyond project work, Gregor shares his expertise through talks and internal trainings on Python best practices and deep dives into quirky language features. Before joining TNG, he earned both his Bachelor’s and Master’s degrees in Informatics from TU Munich, where he developed a strong passion for Data, AI, and High-Performance Computing.

Hans-Martin Münch

Hans-Martin is CEO of MOGWAI LABS, a small cyber security outfit from Neu-Ulm.

Hilko works in the CSIRT for a transportation and logistics company. He feels most comfortable when thinking about problems that touch systems programming, operations and IT security. For more than 25 years, he has learned to take free and open source software for granted and he is still amazed when he hears how others have found his contributions useful.

John Strand has both consulted and taught hundreds of organizations in the areas of security, regulatory compliance, and penetration testing. He is a coveted speaker and much loved SANS teacher. John is a contributor to the industry-shaping Penetration Testing Execution Standard and 20 Critical Controls frameworks.

Jonathan Prince

Jonathan spends a large proportion of his time breaking the things enterprises trust most but understand least. He specialises in IBM z/OS and IBM i security, not because it's fashionable, but because someone has to, and the systems running your bank's core transactions deserves more than a checkbox audit. He analyses authorization models, maps privilege escalation paths, and explains to enterprises why their carefully designed access controls are actually a roadmap for attackers. At home he runs a lab that includes two AS/400s and enough enterprise equipment to make most corporate IT departments uncomfortable, because the best way to understand how to break something is to pwn one. His current research applies modern offensive security methodology to platforms the industry forgot to threat-model, and demonstrates that the gap between a compromised AD account and privileged access on a mainframe may be smaller, and more traversable, than anyone in your SOC wants to hear.

Juliane Reimann is a Founder & Security Community Expert @ FullCyrcle Security. She works as cyber security consultant for large companies since 2019 with focus on DevSecOps and Community Building. Her expertise includes building security communities of software developers and establishing developer centric communication about secure software development topics. Before going into the field of Cyber Security she founded different companies in the area of web development. Due to her background in web development she has extensive knowledge of the software development life cycle. Since 2024 she is a core member of the OWASP Security Champions Guide Community.

Larissa

I work as a Cyber Strategy & Architecture Consultant and originally moved to Munich to complete my Master’s degree in IT Security. Then I decided to stay because of the beautiful city and its surroundings. Professionally, I am passionate about cybersecurity, with a particular interest in privacy topics. In my free time, I enjoy taking advantage of the nearby nature through climbing, cycling, and hiking.

Maiwand Hamidi

Maiwand Hamidi is 29 years old and lives in Switzerland. He earned his master’s degree in IT security from Munich University of Applied Sciences. In Switzerland, he works as a Senior Security Analyst at an IT service provider focused on the financial sector in a 24/7 SOC. There, he regularly encounters interesting cases that he would like to share with the community. Working in various roles (Incident Response, Detection Analyst, Threat Intelligence Analyst) in his current position has given him a broad range of experience. Over the past few years, he has gained experience in cyber defense at a wide range of companies (PwC, Siemens, IBM, NTT DATA). His focus has been particularly on advising SOCs regarding incident response, threat intelligence, and organizational structure. Beside that he’s serving as a Vice Chair of the FIRST SOC SIG since July 26.

Marius Genheimer

Marius Genheimer is a DFIR Specialist and Threat Researcher with the SECUINFRA Falcon Team. He specializes in malware analysis and defensive security training.

Michael Fuchs

Michael Fuchs is a Software Security Engineer at inovex with a focus on IT security. He supports development projects from the concept phase through implementation and advises teams on DevSecOps strategies, working in particular on strong authentication, security in microservices architectures, and Zero Trust. With coding assistants now part of nearly every developer's toolkit, he looks at what their adoption means for the security practices these teams rely on.

Michael Kerrisk

Michael Kerrisk is a trainer, author, and programmer who has a passion for investigating and explaining software systems. He is the author of "The Linux Programming Interface", a widely acclaimed book on Linux (and UNIX) system programming. He has been actively involved in the Linux development community since 2000, operating mainly in the area of testing, design review, and documentation of kernel-user-space interfaces. From 2004 to 2021, he maintained the Linux "man-pages" project, which provides the primary documentation for Linux system calls and C library functions. Michael is a New Zealander, living in Munich, Germany, from where he operates a training business (man7.org) providing low-level Linux programming courses in Europe, North America, and occasionally further afield.

Michael Kuckuk

As a fullstack software developer, Michael's main expertise lies in simple software development. But since he is well aware that the happy path is the easy part, he's always had an interest for security and he's always been very security- and privacy-aware in his work. He enjoys developing user experiences that aren't just unobstructed by security, but that are improved because of it.

Security Engineer @ FullCyrcle Security Moritz Krause has been working in software development since 2010, with a strong focus on building and securing web applications. After completing a degree in computer science and working as a software engineer for many years, he shifted his focus toward cybersecurity in 2024. His current work centers on DevSecOps, backend development, AI security, and threat modeling. Combining deep technical expertise with a strong understanding of the secure software development lifecycle (SDLC), Moritz explores how AI can be leveraged to enhance security practices across modern development environments.

Nick Aleks is a renowned cybersecurity researcher, engineer and author of Black Hat Bash, and Black Hat GraphQL, (as well as the upcoming Drone Hacker's Handbook). Nick Aleks founded ASEC (asec.io) a full-service offensive security firm and established DEFCON Toronto (DC416). He has spent over a decade spearheading cybersecurity initiatives at major financial institutions while also devoting more than a decade to mechanical engineering, robotics and drone hacking. Nick hosts Drone Hacking Workshops at DEFCON and authored numerous drone hacking tools - including Damn Vulnerable Drone, SiKW00F, and MAVSploit.

My day-to-day involves helping organizations keep their cloud environments secure and compliant with whatever regulations apply to them. It’s a field that never stops changing, and that’s part of what keeps me hooked. Outside of work, I like hiking in the mountains, flying drones, and tinkering with open source projects when I have the time.

RAKESH KRISHNAN

I am **Rakesh Krishnan**, a Threat Intelligence Researcher and a regular contributor to the Infosec Community via Tweets and Investigation Blog Posts. I run a Threat Intelligence Blog named "**THE RAVEN FILE**" which purely focuses on Threat Intelligence Topics such as Dark Web, Ransomware Ecosystem, Scam Busting, Blockchain Analysis, etc. Recently, I infiltrated into **0APT Ransomware Group** and exposed their Modus Operandi on my latest blog post. I often expose the real IP Addresses of Ransomware Groups such as: **LockBit**, **Kairos**, etc repeatedly. 3 years back, I made it into the headlines of finding Offensive GPT Model titled "FraudGPT" which got a global recognition. I had conducted 2-Hour Workshop on **BSides Luxembourg** in May 2026. I had conducted a 3-Hour Dark Web Workshop for Conferences like:- **Craccon** in **2025** and at **IICON** in **2024** which were held in Delhi, India. This year, I have been made into the list of **Contributor of the Year** by **ABUSECH** and **SPAMHAUS** for providing large number of **IOCs**, **Ransomware Samples** to the Platform, making a real impact in the Infosec Community by providing timely action for Defending the Threats. You can read my Blog at: **theravenfile.com**

Ralph Andalis

Ralph is the Security Director of Gridlock Security (GridlockSec) - a company he founded that focuses on cybersecurity consulting services. He has 10 years experience in the industry as a Security Consultant/Pentester/Security Researcher for a few companies such as Microsoft, NCC Group, Hewlett-Packard (HP), Forward Security, and Ernst & Young (E&Y). His expertise is mainly Web, Mobile, and Network Pentesting, Threat Modelling, Security Architecture Review, and Security Design Reviews. When he was a Senior Security Engineer at Microsoft, he dealt with security architecture reviews, security design reviews, threat modelling, security research, code reviews, and pentesting on the dedicated product he is directly working on with 100+ software engineers. The threat modelling practice he had daily done with his software engineers had helped secure the product and promoted a culture of secure coding and engineering of the said software. He is also a major active contributor and a member of the working group for the OWASP Application Security Verification Standard (ASVS) project, making the standard better for fellow pentesters and developers alike. He trained attendees at BSides Vancouver 2025, BSides Orlando 2025 and BSides Luxembourg 2026 for the workshop, "Threat Modelling Starter Training" which had been well received. He has presented his talk entitled, "OWASP ASVS: A Methodical and Practical Approach to Application Security Testing" on OWASP AppSec Pacific Northwest conference (PNW) 2024 in Vancouver, BC Canada. He has also presented a similar presentation aimed for beginners delivered online at HackStop Cybersecurity Summit 2024 held in Ljubljana, Slovenia.

Reza Zamiri

Reza is a security researcher with a focus on the security of cyber-physical systems. He previously worked as a research assistant at the CISPA Helmholtz Center for Information Security and has spent the past several years working as a senior product security engineer in the automotive and industrial automation sectors. His interests include firmware security, fuzzing, reverse engineering, and securing safety-critical embedded systems.

Saifeldin Mandour

Saifeldin Mandour is a security researcher with strong interest in protocol analysis and fuzzing. He works as security analyst at Germany-based ERNW GmbH where he specializes on offensive techniques in complex environments. Saifeldin regularly gives talks at academic conferences like ACM SIGIR 2025 and at company-internal research workshops.

Samuel Hopstock

Samuel Hopstock is a software engineer at Guardsquare, where he was one of the first engineers working on AppSweep, a mobile app security testing tool. Initially, he contributed to the Java bytecode analysis engine for Android apps. Since then he has shifted his focus to analyzing and protecting native iOS, Android, and Flutter binaries.

Tobias Madl

Tobias Madl is one of the two board members of Neodyme AG, headquartered in Garching near Munich. He holds a Master’s degree in Applied Research in Engineering Sciences, specializing in Automotive Security. Alongside his PhD studies at the Technical University of Munich, he worked at Fraunhofer AISEC, contributing to cutting-edge research in product and industrial security. As a founding member of the nonprofit organization NFITS (Nachwuchsförderung IT-Sicherheit e.V.), Tobias is dedicated to promoting young talent in cybersecurity.

A driven and flexible .NET generalist who has turned a childhood hobby into his career. As CTO and Competence Center lead at itenium, Wouter gives bi-weekly tech talks and hands-on workshops on a variety of subjects, mostly Frontend, Architecture, Security and, more recently, AI. He is an architect, Scrum Master but most of all a developer and avid pingpong player. Interested in pretty much everything IT but especially excited about lean, software design, documentation, continuous integration and usability.

vurlo

I am Adrian Junge (vurlo). I started programming in school, and back then I could not have imagined how deep that rabbit hole would go. My first deeper technical interest was algorithms, competitive programming, and the occasional LeetCode problem. Over time that problem-solving curiosity pulled me further into cybersecurity. Today I study computer science at Karlsruhe Institute of Technology (KIT) with a focus on cybersecurity, work in applied computer science at FZI Forschungszentrum für Informatik, and play CTFs with my university team KITCTF. Lately, I have been digging deeper into bug bounty work, coordinated disclosure, and CVE hunting.

Younes Ahmadzei

Younes Ahmadzei is an Information Security Consultant focusing on practical NIS-2 implementation, evidence-based security assessments, and translating ISO/IEC 27001 and TISAX/VDA ISA structures into actionable improvements for SMEs. His work on NIS-2 has included outreach to 1,800 German SMEs, 17 semi-structured interviews, and the development of a pragmatic self-assessment model. He has presented his findings at BSides Munich, Elbsides, and the BSI IT Security Congress. His current work also explores how local LLMs can support the analysis of ISMS documents and security evidence while keeping final assessment decisions with human experts.

Yuen Ying Ng

Yuen Ying Ng (Ruth) is a Hong Kong–based incident responder and independent researcher specializing in campaign detection, digital forensics, security research, vulnerability research, threat hunting, and threat actor analysis. Previous Speaking Experience: 2026: JSAC2026 - Unmasking Houken: Advanced TTPs and Detection (Lightning Talk) (Ref: https://jsac.jpcert.or.jp/timetable.html) 2025: Threat Analyst Summit 2025 (TAS'25) – Pump-and-Dump” Scheme Targeting the Securities Brokerage Industry (Ref: https://tas.teamt5.org/agenda2025/) 2024: Threat Analyst Summit 2024 (TAS'24) – Ransomware's Uneven Playing Field : Re-Thinking Protection and Detection from Small Enterprises (Ref: https://tas.teamt5.org/agenda2024/)