All talks from Nullcon Berlin 2025
#NullconBerlin2025 | Panel: Industrial Systems In The Crosshairs: What It Really Takes To Defend OT
This talk explores the significance of cybersecurity in today's digital landscape, emphasizing the c...
#NullconBerlin2025 | Stealing All macOS Sensitive Info with a Single Vulnerability by Koh
This talk by Koh M. Nakagawa explores a critical vulnerability in macOS that undermines process isol...
#NullconBerlin2025 | Derandomizing Kernel Object Locations w Software Hardware-Induced Side Channels
In this talk, Lukas Maar discusses two timing side-channel attacks that derandomize the locations of...
#NullconBerlin2025 | Your MCP Server Executes Commands - But From Whom? by Simcha Kosman
This talk by Simcha Kosman addresses the vulnerabilities of MCP servers, emphasizing that static pro...
#NullconBerlin2025 | Finding Bugs in V8: A Formal Verification Approach by Simon Gerst
In this talk, Simon Gerst explores the intricacies of finding bugs within the V8 JavaScript engine t...
#NullconBerlin2025 | A Deep Dive into A Vulnerability Apple Deems Unexploitable by Mickey Jin
This talk covers a critical race condition vulnerability in Apple’s core file-copy APIs, which are e...
#NullconBerlin2025 | Unlock hidden Superpowers in MediaTek Wi-Fi Chips by Daniel and Edoardo
This talk covers the reverse engineering of MediaTek Wi-Fi chips, which are commonly used in a varie...
#NullconBerlin2025 | LiveWire: Remote Command Execution Through Unmarshalling by Rémi and Pierre
This talk focuses on LiveWire, a full-stack framework for Laravel that enhances the development of d...
#NullconBerlin2025 | LPEPM - Tricking Microsoft EPM To Do Our Bidding by Philip & Rotem
This talk explores the internals of Microsoft Endpoint Privilege Management (EPM), examining how ele...
#NullconBerlin2025 | Linux Kernel Runtime Guard (LKRG) 1.0 by Solar Designer
In this talk, Solar Designer presents the Linux Kernel Runtime Guard (LKRG) 1.0, a Linux kernel modu...
#NullconBerlin2025 | RDP and The Power of Deterministic Snapshot Fuzzing by Pascal Beyer
This talk, presented by Pascal Beyer, explores the power of deterministic snapshot fuzzing in the co...
#NullconBerlin2025 | Finding insecure cryptographic keys in DKIM, DNSSEC, OpenID Connect & elsewhere
This talk, presented by Hanno Böck, focuses on the identification of insecure cryptographic keys fou...
#NullconBerlin2025 | My Other ClassLoader is Your ClassLoader Reloaded: Reviving Parcelable Objects
This talk by Dimitrios Valsamaras delves into the intricacies of Java ClassLoaders and their role in...
#NullconBerlin2025 | DHCPwned: Owning Cameras One Lease at a Time by Emanuele Barbeno
This talk covers the exploitation of vulnerabilities in Ubiquiti AI Bullet IP cameras as part of the...
#NullconBerlin2025 | Constructing Domain-Specific Fuzzer for WebGPU Shader Compilers: Lukas Bernhard
In this talk, Lukas Bernhard explores the construction of a domain-specific fuzzer for WebGPU shader...
#NullconBerlin2025 | LLMs everywhere: The future is now and the past keeps repeating itself by Joern
In this talk, Joern Schneeweisz explores the pervasive integration of large language models (LLMs) i...