Talks

Full kill-chain dissection of telecom malware across RAN, core network, signaling plane, and supply chain attack surfaces. Covered network-resident implants in MME/AMF/UPF, SS7/Diameter/GTP signaling abuse, rogue eNodeB/gNodeB firmware, and SIM/USIM backdoors. Case studies include LightBasin (multi-MNO intrusion across 13+ operators) and a modified PGW binary implant that survives firmware upgrades. Closed with detection approaches like canary IMSIs and anomaly-based signaling telemetry, plus what's coming: ORAN xApp supply chain attacks and AI-driven social engineering.

Walked through the full attack chain against modern ATM disk encryption: bypassing cold-boot protections, extracting keys from volatile memory, and defeating FDE implementations in production cash-handling systems. Covered firmware extraction, unattended key management flaws, and the physical attack surface that survives software hardening. Ended with the responsible-disclosure findings and recommendations for hardened boot architectures.

Security analysis of networked vending machines running embedded Linux and Windows IoT: unauthenticated cashless payment APIs, and remote code execution through unpatched telemetry agents. Demonstrated full compromise of MDB (Multi-Drop Bus) payment interfaces, manipulation of product pricing logic, and persistent implants that survive reboot cycles. Findings cover 5+ major vending platforms along with the vendor disclosure outcomes.

Systematic analysis of JWT library implementations across 40+ major frameworks, revealing authentication bypass vulnerabilities in production SSO deployments.

Presentation of the IoT exploitation framework: architecture, MQTT fuzzing methodology, and the discovery pipeline that surfaced 12 critical CVEs in consumer smart home devices.

The methodology behind 25+ LLM vulnerabilities discovered at an 80% guardrail bypass rate: systematic adversarial prompting, model behaviour analysis, and responsible disclosure to AI vendors.