Insomni'Hack

Talks 2026

Thursday, March 19th

Time	CAMPUS (AUDITORIUM B)	CLOUD (AUDITORIUM C)	GARDEN (ROOM 1ABC)	SIDE EVENTS (WITH REGISTRATION)
09:00 - 09:50	Cybersecurity between geopolitics and tech supremacyby Florian Schütz
10:00 - 10:30	COFFEE
10:30 - 11:20	Smile, you're on camera! Livestreaming from North Korea's IT workers laptop farmby Mauro Eldritch & Heiner García Perez	Security-Driven Redesign: Navigating the Art and Politics of Securing Complex Systemsby Amit Dori	A practical guide to your company’s post-quantum cryptography journeyby Florian Widmer	Prompt Attack Threat Landscape in actionby Elliot Ward
11:30 - 12:20	Core-ruption: A Deep Dive into 5G Mobile Network Vulnerability Researchby Arthur Naullet & Maxime Gautier	Breaking Entra: Real-World Cloud Identity Attacks You Can Recreateby Jonathan Elkabas	Don’t go to the policeby Orange Cyberdefense	PRISMA Airs - Making robots wearing seatbelts (FR)by Eric Semaan & Damien Raynal
12:30 - 13:30	LUNCH
13:30 - 14:20	Guard me if you can: A Novel Passwordless-to-Password attackby Yuya Chudo	Pruning Garden Paths in AWSby Evan Perotti	Cybersécurité sous contraintes : gouverner le risque quand on n’a pas les moyens de la sécurité (FR)by Fiona PONZO & Guillaume FUMEAUX	Evolving Your Security Workflow: Addressing API and AI Security Challengesby Josh Goldfarb & Carine Polaillon
14:30 - 15:20	Silo-Binding Uncovering the Ghost in the Siloby Andrei-Marius Muntea & Andrei Mermeze	Zombie Workflows and other GitHub Actions Horror Storiesby Paul Gerste	Other CISOs say we made very weird choices in our Cyber Security. Of course we did!by Olivier Martinet	Agents, co-pilots, RAGs: AI is becoming a critical asset and a pivotal point: emerging threats and concrete protections with Fortinet (FR)by Sébastien Viou
15:30 - 16:00	COFFEE
16:00 - 16:50	Shift Happens: Uncovering two built-in command injections in Windows context menusby Remi GASCOU	Meetings You Didn’t Plan, But We Didby Inés Martín	TBAby	DynamicSOC: Discover smarter threat detection at lower costs (FR)by Philippe Giummarra
17:00 - 17:50	Improving SAP security: tooling for authorizations and post-exploitationby Aloïs Colléaux-Le Chêne	SACL: The Detection Capability You've Been Ignoringby Wojtek Sochacki & Maroua LAHLOUHI	TBAby

Friday, March 20th

Time	CAMPUS (AUDITORIUM B)	CLOUD (AUDITORIUM C)	GARDEN (ROOM 1ABC)	SIDE EVENTS (WITH REGISTRATION)
09:00 - 09:50	Keynoteby
10:00 - 10:30	COFFEE
10:30 - 11:20	Running ransomware in production - Automated purple teaming for regression tests on detection rulesby Carel van Rooyen & Nicolas Heiniger	Nightmare on NTLM Street: Legacy's Revengeby Marina Bochenkova	What Are SIM Farms?by Keven Hendricks
11:30 - 12:20	Exploiting USB on a Tesla IVI with Raspberry Pi Devices to bypass KASLRby Alex Plaskett & rherrera	Reflecting Your Authentication: Look in the Mirror - It’s Youby Andrea Pierini	PAMdemic: Privileged Account Management and how unauthorized access could spread faster than you thinkby Melina Phillips	DynamicSOC: Discover smarter threat detection at lower costs (FR)by Philippe Giummarra
12:30 - 13:30	LUNCH
13:30 - 14:20	Shoot for the Galaxies: Our Samsung S25 1-click RCE Journeyby Yichen Chai & Sacha Kozma	Unmasking a Novel Google Drive Phishing Chainby Bobby Rauch	Simplify or Drown: Practical Strategies for Streamlining Security Processesby Sebastian Avarvarei
14:30 - 15:20	Many roads lead to flash: exploring new embedded bootloader exploits for firmware extractionby Qais Temeiza	Keypocalypseby Emilien Le Jamtel	Device Code Phishing is dead, long live new Azure AD attacks!by Elias Issa
15:30 - 16:00	COFFEE
16:00 - 16:50	When Digital Meets Physical: Breaking in Access Control and CCTV Systemsby Marin Cornuot	From Code to Compromise: Turning modern day IDEs into attack vectors via malicious Extensionsby Debjeet Banerjee	From AiTM Phishing to Self-Replicating Worms: Inside the 2025 npm Attacksby Christophe Tafani-Dereeper
17:00 - 17:50	Honey Well Done: Aged Vulnerabilities in the Equipment of a Major Industrial Vendorby Kirill Kutaev	Low Hanging Apples: Red Teaming macOSby Waleed Barakat & Paul Montgomery	Don’t go to the policeby Orange Cyberdefense
18:00 - 05:00	CTF (AUDITORIUM A)

Organized by

Technology partners

Partner events