This presentation examines why the traditional layered defense model is no longer sufficient in today’s threat landscape. 

With attackers increasingly targeting privileged credentials and exploiting gaps created by fragmented tools, organisations must shift to a security framework built on zero-trust and zero knowledge. 

This session explains how continuous authentication, least-privilege access, and device-level encryption prevent unauthorized movement across networks, and why zero-trust is critical for protecting sensitive data.

Learn why attackers choose easy wins and how to stop being one.

Well-known vulnerabilities, such as Log4Shell and PrintNightmare, impressively demonstrate what we can learn from previous attacks for tomorrow's cyber defense.

Key topics:

• Zero Days in Reality Check: What known exploits reveal about today's threats.
• When vulnerabilities collide: Understanding combined attack scenarios.
• Structured endpoint management: Inventory, analyze, patch.
• Unified endpoint management: Simplify processes, reduce risks, secure standards.
• Blueprint for sustainable resilience: Which measures are crucial now?

• Eliminating Shadow IT: How Modern Exposure Management Uncovers Hidden Systems and Reduces Risk 
• Breaking Down Silos: Why a Centralized, Holistic Approach Is Key to Attack Surface Reduction 
• Automated Security: Detecting Threats Early and Enabling Proactive Action

IT is everywhere. The amount of connections among IT components increases explosively and thus the attack surface extends severely. Isn’t that the exact scenario hackers have always been dreaming of? Founder and CEO of SySS GmbH Sebastian Schreiber is going to demonstrate a speed hacking live on stage. He is going to show how easy and fast the latest wireless alarm systems, electronic locking systems, and wireless presenters, as well as fingerprint secure USB can be hacked. He is also going to show how easily SMS can be faked and thermostat-regulated IoT devices be manipulated.

How is AI reshaping cyber defense—and ransomware specifically? This keynote explores both sides of the equation. We examine the rapidly evolving ransomware threat landscape and the critical shifts required in both our security tools and our mindset. As AI-powered attacks emerge, traditional approaches are no longer sufficient. Drawing on insights from the Halcyon Ransomware Research Center, we'll outline what's ahead—and how defenders can proactively build resilience against tomorrow's threats.

As external attack surfaces expand, traditional EASM (External Attack Surface Management) tools are creating an overwhelming amount of noise and alert fatigue. Artificial Intelligence offers a clear solution to analyze, contextualize, and prioritize these findings. However, sending sensitive infrastructure and vulnerability data to public LLM APIs introduces an unacceptable security risk. 

This presentation explores the powerful fusion of open-source EASM and sovereign AI. We will dive into how to build a highly automated, privacy-first reconnaissance pipeline using modern open-source tools like Openclaw and Hexstrike-AI. Crucially, we will demonstrate how to power this ecosystem using open-source LLMs hosted entirely on a private European cloud (Exoscale) as the inference provider. 

While many awareness programs are still based on static, generic scenarios, attack techniques today are evolving at AI speed. This discrepancy creates a dangerous gap between training and real-world threats. 

Jungheinrich has firsthand experience with just how precise and dangerous modern attackers are: In this masterclass, Christian Reinhardt and Sebastian Graeber discuss real-life deepfake attacks and the insights gained from them. 

Together, they take a behind-the-scenes look at real-world practice: Drawing on psychological insights and Jungheinrich’s concrete experiences, they demonstrate how security culture can be dynamically shaped and adapted in real time to current attack patterns. Because in today’s threat landscape, speed simply means security.

The best speakers on our stages are to be honored. You decide which speakers you found particularly inspiring, charismatic and innovative. At the end of the day, we will honor the best speaker of the day on each stage. Voting takes place via our app. Access is via your ticket code.
App-Download

A look at modern IT environments often reveals a chaotic picture: cloud workloads, containers, legacy servers and OT devices are haphazardly interconnected in a convoluted network. Anyone who loses track of this ‘spaghetti network’ makes it easy for attackers. Lateral movement is the main reason why a minor phishing incident can escalate into a company-wide ransomware outage. At the same time, regulations such as NIS2 and DORA demand hard evidence of risk management and segmentation in precisely this area.

Yet the fear of business interruptions and years-long projects puts many off. In this masterclass, we’ll show you how to achieve radical visibility in your environment as a first step. Discover why microsegmentation is the most powerful weapon against lateral movement and for compliance – and how you can eliminate typical project risks by using the Akamai Guardicore Generative Policy Engine (GPE). Segmentation no longer has to be a manual mess of rules.

Sophos Workspace Protection is a powerful solution that protects your applications, data, users, and browser activity—wherever work happens. The solution delivers multiple layers of protection in a single, comprehensive package, enabling you to secure your remote and hybrid workforce easily and cost‑effectively, no matter where they are.

Sophos Workspace Protection provides protection for: 

• Applications – Ensure controlled, secure access to all your internal, SaaS, and web applications. 
• Data – Protect data against copying or improper use to avoid costly mistakes. 
• Users – Enable seamless work from anywhere with consistent policies, robust protection, and a smooth user experience.

The best speakers on our stages are to be honored. You decide which speakers you found particularly inspiring, charismatic and innovative. At the end of the day, we will honor the best speaker of the day on each stage. Voting takes place via our app. Access is via your ticket code.
App-Download