Find Expert Speakers

Hushcon West 2019Presented a technical talk on cellular infrastructure security, focusing on real-world weaknesses in mobile and carrier-adjacent systems. The session drew from hands-on research into cellular protocols, deployment realities, and how attackers exploit assumptions in telecom environments that are often treated as “trusted” or out of scope by enterprise security teams.Hushcon East 2023Delivered a talk centered on hacker culture, attacker mindset, and how security thinking evolves outside formal frameworks. The session explored how curiosity-driven exploration, informal knowledge sharing, and cultural norms shape real attacker behavior more accurately than checklists, tooling, or compliance-driven models.PRaSEC 2023Presented a red-team-focused session on Domain Admin attack paths, blending practical exploitation techniques with philosophical perspectives on adversary reasoning. The talk emphasized how attackers model trust, authority, and system design to move from initial access to full domain control.

Anshu is a multi-time global conference speaker on emerging security domains across Black Hat, Global OWASP AppSec, BSides SF/Berlin/Seattle/NYC/South Florida, Australian Cyber Conference (CYBERCON), ISACA Summits, FBI InfraGard, IAPP, AWS Summit, Wharton Business School, Intel CISO SummitAnshu Gupta Speaking Schedule

A motivated individual always up for breaking stuff ! Currently working as a Red Team Security Consultant with a focus on penetration testing and security assessments for Web, Mobile, API, OT, and Network environments. I have experience leading 150+ security assessments, working with vendors from various industries such as government agencies, private organizations, healthcare, crypto, finance, retail, education, and many more to identify vulnerabilities and improve their overall security and help organizations strengthen their defenses against potential threats.In addition to my professional work, I’m an active bug bounty hunter on platforms like Bugcrowd and Synack. I’ve earned recognition in 70+ Hall of Fame lists, including those of Microsoft, Apple, Google, Zoom, Okta, Canva, Indeed, Atlassian, Dell, and many more. Helping organizations strengthen their security by identifying vulnerabilities and contributing to their overall cybersecurity efforts.Constantly learning, always hacking, I thrive on offensive security challenges and take pride in discovering the unknown before attackers do.

A motivated individual always up for breaking stuff ! Currently working as a Red Team Security Consultant with a focus on penetration testing and security assessments for Web, Mobile, API, OT, and Network environments. I have experience leading 200+ security assessments, working with vendors from various industries such as government agencies, private organizations, healthcare, crypto, finance, retail, education, and many more to identify vulnerabilities and improve their overall security and help organizations strengthen their defenses against potential threats.In addition to my professional work, I’m an active bug bounty hunter on platforms like Bugcrowd and Synack. I’ve earned recognition in 70+ Hall of Fame lists, including those of Microsoft, Apple, Google, Zoom, Okta, Canva, Indeed, Atlassian, Dell, and many more. Helping organizations strengthen their security by identifying vulnerabilities and contributing to their overall cybersecurity efforts.Constantly learning, always hacking, I thrive on offensive security challenges and take pride in discovering the unknown before attackers do.

I like to explore the Internet of Things Security.

Chiao-Lin Yu (Steven Meow) currently serves as a Red Team Cyber Threat Researcher at Trend Micro. He holds numerous professional certifications including OSCE³ , OSEP, OSWE, OSED, OSCP, CRTP, CARTP, CESP-ADCS, LPT, CPENT, GCP ACE. Steven has previously presented at events such as DEFCON Main Stage, IoT Village, Car Hacking Village, Security BSides Tokyo, HITCON Bounty House, and CYBERSEC. He has disclosed 30+ CVE vulnerabilities in major companies like VMware, D-Link, and Zyxel. His expertise spans red team exercises, web security and IoT security.

Christian Herrmann – RFID Hacker | Co-Founder of AuroraSec & RRGChristian Herrmann, better known in the hacker community as “Iceman”, is a co-founder of AuroraSec and RRG, and has helped develop many of today’s most widely used RFID research tools, including the Proxmark3 RDV4 and the Chameleon Mini.He is a well-known RFID hacking and Proxmark3 evangelist, serving the community as both a forum administrator and a major code contributor alongside other developers since 2013.Christian has spoken at hacker conferences around the world, including Troopers, Black Hat Asia, DEF CON, Hardwear IO, SSTIC, NullCon, Pass-the-Salt, BSides Tallinn, BlackAlps, TenguCon, Balccon, TumpiCon, WHY and SaintCon.He also runs a YouTube channel where he shares his knowledge of RFID hacking with the public.With over 15 years of experience in bespoke software development, Christian specializes in .NET platforms and is a Certified MCPD Enterprise Architect.He possesses near-unmatched expertise in the Proxmark3 architecture and various RFID technologies, and has served as an instructor for Red Team Alliance (RTA), including training sessions at Black Hat.sessions at Black Hat.

EXPERTISE:- Experienced Cyber Security with a demonstrated history of working in the several industry. Skilled in Penetration testing, XDR, EDR, DFIR, Threat Hunting, and OSINT.- Advanced Ethical Hacking:Proficient in various hacking methodologies, including but not limited to network penetration testing, (web, API, Infra, mobile) application testing, wireless network exploitation, and social engineering.- Deep Knowledge of Security Frameworks: Expertise in industry- standard security frameworks such as OWASP, NIST, and PTES, with the ability to apply their guidelines effectively

Dinesh Sivakumar an Information Security Consultant from the BISO team at Bank of America (Chennai), specialized in cloud security governance, risk, and compliance. He holds an MTech in Cyber Security from NIIT University, Rajasthan as part of a bridge program with Infosys, his previous employer and a Diploma in Computer Applications (DCA) from SRM Infotech, affiliated to SRM University.Dinesh is certified in Microsoft Azure Security (AZ‑500) and AWS Security Specialty (SCS‑C02), alongside multiple other Azure and AWS credentials. He has recently achieved the CISM certification from ISACA, demonstrating his expertise in governance, risk, and compliance. He is currently pursuing an Executive Programme in Fintech, Banking, and Applied Risk Management at IIM Lucknow, bridging technical cloud security with strategic business risk management.He has also filed multiple patents in cloud security, reflecting his commitment to innovation in securing multi‑cloud environments.With over nine plus years of IT and cloud security experience, Dinesh has led projects across Banking, Automotive, Healthcare, and Logistics sectors. His passion lies in translating complex technical challenges into actionable business insights, enabling organizations to strengthen their security posture while meeting regulatory and risk management goals.

Drijesh Patel is an Engineering Manager and AI security practitioner with extensive experience building and securing large-scale cloud and AI-driven systems. His work sits at the intersection of Generative AI, cybersecurity, and modern software engineering, where he focuses on identifying and mitigating real-world risks introduced by LLMs, AI agents, and automated development workflows.Over the years, he has led engineering teams delivering high-impact platforms across enterprise environments, with a strong emphasis on secure architecture, DevSecOps, and AI adoption. His recent work explores adversarial techniques against LLM-powered applications, including prompt injection, data exfiltration, and supply chain risks in AI-assisted development.Drijesh is also an active speaker and community leader, regularly conducting workshops and talks for developers and security professionals on AI, secure system design, and emerging threat landscapes. He has been recognized by Google Developer Communities for his contributions and continues to drive conversations around building secure, human-centric AI systems.

Evan "Shortrange" Cook is a physical security researcher who is passionate about hacking the planet! A first-place winner of the DEFCON 2025 Embedded Systems Village CTF and SAINTCON 2024 RFID CTF, Evan knows how to train and speak success in RFID hacking. He is a battle-tested educator who has workshopped over 300+ students — ranging from newbies to industry professionals to tier-one special forces operators — in the art of successful access control exploitation. Committed to lowering the barrier of entry for beginners, he created the world's FIRST open-source access control simulation lab built entirely with off-the-shelf parts, proving that high-end security research doesn't require a high-end budget. Evan is passionate about "bringing RFID to the people" through talks, workshops, trainings, and open-source projects. Where digital and physical worlds collide... you'll find Shortrange ready to "Hack the Planet!" with you.

My journey in cybersecurity didn't start at the finish line. I built my foundation from the ground up, working extensively as a Security Analyst and Penetration Tester. Those early years spent analyzing defenses gave me the perspective I needed to evolve into my current role as a Head RND practitioner and Red Teamer.Sharing knowledge has always been a core part of my professional growth. Since 2012, I have been actively presenting materials on network security, Man-in-the-Middle attacks, and wireless security within university environments. This passion for research eventually led me to my current specific focus: biometric security.To truly test the limits of these systems, I realized I needed to build my own arsenal. This led me to develop several custom security tools specifically for biometric device pentesting, including zksentinel, Bac0d, GAMPAR, Tab0k, B0c0r, and BA RAT.I’ve been fortunate enough to share the insights from this development journey on larger stages like IDSecConf, where I first presented "Semi-automating Vulnerability Scanner and Exploitation in Biometric Systems." Most recently, I took that research further with a talk titled "Beyond the Match: From Biometric Bypass to Full Control - The Post-Exploitation Secrets Red Teams Use."At the end of the day, my goal isn't just to break systems, but to understand them deeply. My sincere hope is that the tools and knowledge I share can serve as useful resources for others and contribute positively to our community."

I'm Hrishikesh Somchatwar, a Storyteller, Electronics Hacker, and Bestselling Author based in France.🔗 Connect With Me:Email: hrishikeshsom@gmail.comLinkedIn: linkedin.com/in/hrishikesh-somchatwar/📖 Publications:"Exploitation of Embedded Systems" – Presented at Car Hacking Village"Hacking with Physics" – Showcased at HackFest Canada 2021"Car Hacking Village" – Authored publication🎙️ Speaker & Trainer:I've had the privilege of speaking and providing training at esteemed cybersecurity conferences, including:DeepSec AustriaSCSA GeorgiaSecurityFest SwedenDefcamp Romania (2019, 2023)Bsides AhmedabadBsides Delhic0c0nHackFest CanadaKey Topics:Automotive CybersecurityHardware SecurityIoT SecurityCar hacking techniquesTools for embedded system exploitation📚 Author:As the bestselling author of "Hacking the Physical World", my book topped Amazon charts in the USA and India.🎧 Podcast:Check out "The Storytelling Hacker", where I blend storytelling with electronics hacking. Available on:SpotifyApple PodcastsGoogle Podcasts💼 Professional Journey:Valeo: Worked on cutting-edge automotive cybersecurity solutions and advanced hardware technologies.Security Researcher: Contributed to NDA-protected projects at a confidential company in Maharashtra, India.Hardware Security Intern: Played a pivotal role in a cybersecurity startup, conducting security testing on:CarsIoT devicesPLCsSCADA systems

asdasdasdasdasdasdddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd

KaiJern (xwings). Founder of open source reverse engineering project, Qiling Framework (https://qiling.io). His research topic is mainly on developing cutting edge cross platform reverse engineering framework, embedded devices security, blockchain security, and various security topics.He presented his findings in different international security conferences like Blackhat, Defcon, HITB, Codegate, QCon, KCon, Brucon, H2HC, Nullcon, etc. He conducted hardware hacking courses in various conferences around the globe. He is also actively involved in Unicorn Engine (https://unicorn-engine.org), Capstone Engine (https://capstone-engine.org), Keystone Engine (https://keystone-engine.org) and hackersbage.com

Pwning Automotive and IoT eco-systems

Kirils Solovjovs is Latvia's leading white-hat hacker and IT policy activist, renowned for uncovering and responsibly disclosing critical security vulnerabilities in both national and international systems. Kirils started programming at age 7 and by grade 9 was spending his lunch breaks writing machine code directly in a hex editor.With deep expertise in network flow analysis, reverse engineering, social engineering, and penetration testing, he has significantly contributed to cybersecurity advancements. Notably, Kirils developed the jailbreak tool for MikroTik RouterOS and played a pivotal role in creating e-Saeima, enabling the Latvian Parliament to conduct a fully remote legislative process, the first of its kind globally.He currently serves as the lead researcher at Possible Security and as a research assistant at the Institute of Electronics and Computer Science.

I speak at the intersection of cybersecurity, operational technology, and real-world impact, primarily across food systems, agriculture, and zoos and aquariums as part of critical infrastructure that doesn’t always get enough attention.My background spans over 25 years in technology, along with experience in environmental systems and industrial operations, which shapes how I approach risk. I don’t treat cybersecurity as an IT problem. In the environments I work in, it manifests as production downtime, food safety issues, animal welfare concerns, supply chain disruptions, health/safety risks, and broader operational risks.I’ve delivered keynotes, conference talks, panels, and podcasts across industry, community, and global events. My focus is on making complex topics practical and relevant to the people who actually operate these systems, not just those who secure them.I tend to speak in stories and analogies because that’s how people actually understand this work. Most of the audiences I work with aren’t cybersecurity experts (they’re the ones running the systems), so I translate risk into terms they already recognize in their day-to-day environments.Most of my talks center on cyber-physical risk, the human side of cybersecurity, and how digital systems are changing the way these environments function day to day. I speak in

•Vulnerability discovery and exploitation researcher at Qihoo 360•Focuses on iot vulnerability discovery. I have discovered multiple critical unauthorized RCE vulnerabilities in Cisco, qnap, netgear, zyxel, draytek, H3C, LILIN, Sophos Cyberoam, Intelbras, draytek, H264 DVR, etc., and obtained dozens of cves.

Marc Weathers is the Founder and CEO of Red Rabbit Security, a cybersecurity consulting and managed security services firm dedicated to helping organizations protect their businesses from today's rapidly evolving cyber threats. With more than 30 years of experience in information technology and cybersecurity, Marc has built a career helping organizations strengthen their security posture while using technology to improve business operations and resilience.A published author and technology entrepreneur, Marc has earned 14 industry certifications and brings extensive hands-on experience across cybersecurity, artificial intelligence, secure application development, cloud technologies, Voice over IP (VoIP), disaster recovery, business continuity, backup and recovery, networking, and IT infrastructure. Throughout his career, he has worked with businesses ranging from small organizations to enterprise environments, translating complex technical challenges into practical, business-focused solutions.Marc is recognized for delivering engaging, real-world presentations that combine technical depth with approachable, actionable guidance. Rather than focusing on theory alone, he shares lessons learned from decades of consulting, incident response, technology leadership, and software development, providing audiences with strategies they can immediately apply within their own organizations.His speaking topics include cybersecurity awareness, ransomware defense, cyber risk management, artificial intelligence, secure software development, business continuity planning, cloud security, emerging technologies, and technology leadership. Marc regularly speaks to business owners, executives, legal professionals, financial organizations, insurance professionals, technology teams, and professional associations, tailoring each presentation to the audience's unique challenges and objectives.Whether speaking at a conference, association meeting, corporate event, or educational seminar, Marc's mission is simple: help organizations make smarter technology decisions, reduce risk, and confidently prepare for the future.

Markus Vervier is a security researcher from Germany. Software security is his main focus of work. During the last 15 years he collected professional experience in offensive IT security working as a penetration tester and security consultant for highly regarded companies. His experience combined with his personal passion regarding security research made him start his own company in 2015. Besides his daily security work, he is very actively practicing security research and discovers high profile vulnerabilities regularly such as the recent libotr heap overwrite.

Hello All.! I am Veerababu, better known as Mr-IoT, and the founder of the iotsrg.org community. My passion lies in transforming IoT security knowledge into open-source resources. Over the years, I have worked on developing ICE-Bite hardware microprobing, an IoT pentesting OS, curated lists, and insightful blogs, all aimed at advancing the field of IoT security since 2017. As a keynote speaker at BSides Dehradun, I have also had the privilege of delivering workshops, training sessions, and villages at events like c0c0n, BSides Bangalore, VulnCon, CracCon, and the Null/OWASP Bangalore communities. I have nurtured and grown the iotsrg.org community across platforms such as Reddit, Telegram, and Discord, creating a vibrant and engaging space for sharing knowledge and fostering innovation in IoT security.

Niek brings over 10 years of expertise to the device security field. With a background in System and Network Engineering and an intrinsic interest, he's able to digest the complexities of device security efficiently.He shared his research with the community at various security and academic conferences, as well as journals, such as Black Hat, Bluehat, Usenix WOOT, hardwear.io, FDTC and PoC||GTFO.He gave trainings at HITB, hardwear.io and Ringzer0.

Nishant Gupta is a data-driven product leader with over 12 years of experience scaling billion-dollar products at LinkedIn, Amazon and Procter&Gamble. Based in Mountain View, California, he specializes in AI applications and privacy-enhancing technologies for data intelligence systems, combining deep technical expertise with strategic go-to-market acumen.