Disobey - Program

TIME

10:00

10:30

11:30

12:15

13:00

14:15

15:15

15:45

16:15

16:45

17:30

17:45

18:00

18:15

19:00

19:15

20:00

21:00

Terminal Stage

Sat

10:00
Terminal

Doors open and registration

Sat

10:30
Terminal

One Request to Kill Them All: Amplification, Data Landmines, and Parser Killers

Patrik Jokela

Sat

11:30
Terminal

Taking Down The Power Grid

John Andre Bjørkhaug

Sat

12:15
Terminal

Beyond the Breach: Calming the Chaos and Leading Through Incident Response

Jouni Mikkola

Sat

13:00
Terminal

KEYNOTE : This conference was not built for you

Chantal Stekelenburg

Sat

14:15
Terminal

Committing CSS Crimes for fun and profit

Lyra Rebane

Sat

15:45
Terminal

Weaponizing the Neutral Web: Analyzing Adversary Botnets for Offensive Cyber Operations

Joseph Slowik

Sat

16:45
Terminal

Behind Closed Doors - Physical Red Team Tactics

Firat Acar, Moritz Thomas

Sat

17:45
Terminal

Take a Risk – a short introduction to why everyone at your company is wrong and dumb and you’re correct and awesome

Ville Rantamäki

Sat

19:00
Terminal

"Big case handling @ NCSC-FI"

Matias Mesiä

Sat

20:00
Terminal

A New Era of Threats: Lessons from Agentic AI Malware

Candid Wuest

Sat

21:00
Terminal

Closing by NotMyNick

NotMyNick

Security Theater

Sat

10:30
Theater

Are passkeys as secure as you think?

Fabian Bader

Sat

11:30
Theater

How playing D&D at work can improve your incident response?

Hans Metsoja

Sat

12:15
Theater

SquarePhish 2.0 QR Code OAuth 2.0 Device Code Flow Phishing for Primary Refresh Token

Nevada Romsdahl, Kam Talebzadeh

Sat

14:15
Theater

No web interface, no problem! Pwning mesh routers through cloud management

Erik de Jong

Sat

15:15
Theater

CARF - Hacking the Android Settings App

Anton Helin

Sat

16:15
Theater

Beyond the Green Checkmark: Security IN and OF Your CI Pipeline

Derek Fisher

Sat

17:30
Theater

Safety is not an option, Part-IS

Ben Nagel

Sat

18:15
Theater

No more speedruns: Better security training (with what you have)

Susanna Haavisto

Sat

19:15
Theater

Inside the Hacker’s Playbook: How We Stopped a €20M Ransomware Payout

Joseph Carson

Security Forum

Sat

10:30
Forum

Mastering Bash for Hackers: Extreme Command-Line Power

Kirils Solovjovs

Sat

15:15
Forum

Hacking AI through HackAI and other AI games

Satu Korhonen, Hannes Särkkä

Sat

18:00
Forum

Hacker Jeopardy

Petar 'Hetti' Kosic, Georg Merzdovnik, Michael 'cluosh' Pucher

TIME

10:00

10:30

11:30

12:15

13:00

14:15

15:15

15:45

16:15

16:45

17:30

17:45

18:00

18:15

19:00

19:15

20:00

21:00

13th and 14th February, 2026

Kaapelitehdas, Helsinki Finland

Program

Friday 13th

Doors open and registration

Opening by NotMyNick

KEYNOTE : A Lifetime of Disobedience

IC vulnerabilities

One Breach to Crack ‘Em All! Insights from Password Breaches

Releasing Your Inner TIBER in Regulated Adversary Simulations

Game Hacking: Attacker PoV

Admin Rights are not Human Rights

Waves of Chaos: From Rogue Signals to The Supervillain Scenario

Data Honeytokens for the Cloud Era

EU’s active war against data-privacy

From Chaos to Clarity: Designing AppSec from First Principles

Linux Hardening - It Doesn't Have To Be Hard

Exclusion Is a Vulnerability: Patching the Gender Gap in Tech

From Zero to Hero With z/OS

Introduction to Private Intelligence: Legal corporate espionage and how to protect yourself

Telemetry on trial: A Hands-On EDR testing workshop

Cyber Forensics CTF AI workshop

Saturday 14th

Doors open and registration

One Request to Kill Them All: Amplification, Data Landmines, and Parser Killers

Taking Down The Power Grid

Beyond the Breach: Calming the Chaos and Leading Through Incident Response

KEYNOTE : This conference was not built for you

Committing CSS Crimes for fun and profit

Weaponizing the Neutral Web: Analyzing Adversary Botnets for Offensive Cyber Operations

Behind Closed Doors - Physical Red Team Tactics

Take a Risk – a short introduction to why everyone at your company is wrong and dumb and you’re correct and awesome

"Big case handling @ NCSC-FI"

A New Era of Threats: Lessons from Agentic AI Malware

Closing by NotMyNick

Are passkeys as secure as you think?

How playing D&D at work can improve your incident response?

SquarePhish 2.0 QR Code OAuth 2.0 Device Code Flow Phishing for Primary Refresh Token

No web interface, no problem! Pwning mesh routers through cloud management

CARF - Hacking the Android Settings App

Beyond the Green Checkmark: Security IN and OF Your CI Pipeline

Safety is not an option, Part-IS

No more speedruns: Better security training (with what you have)

Inside the Hacker’s Playbook: How We Stopped a €20M Ransomware Payout

Mastering Bash for Hackers: Extreme Command-Line Power

Hacking AI through HackAI and other AI games

Hacker Jeopardy

Location

The Cable Factory, Helsinki

Contact us