CFP for #OffensiveCon26 Tokyo edition is STILL open. We're looking for real, original work: cutting-edge security research, novel exploit techniques and deep technical investigations that actually move the field forward. And yes, AI it's also in the game.

Last chance to secure budget-friendly rates and attractive terms — don’t miss out! ➡️ www.offensivecon.jp/venue.html

⌛️ Only 7 days left to secure your room at the JW Marriott Tokyo at the reduced Offensivecon Tokyo attendee rate. Don't miss out! ➡️ www.offensivecon.jp/venue.html

Reduced room rates for Offensivecon Tokyo's attendees only available until 30 June! ➡️ www.offensivecon.jp/venue.html

Interested in becoming a speaker at Offensivecon Tokyo? You have three months to submit your talk on an innovative offensive security topic. More information here 👉️ cfp.offensivecon.jp/offensivecon...

Offensivecon's talks are now available on our YouTube channel! 🔗 buff.ly/g63xgm5

OffensiveCon26

OffensiveCon 2026 Talks

youtube.com

Want an opportunity to have presence in Asia? Sponsor us now! Contact us at tickets@offensivecon.org for more information

Submit your talk before 1 September 2026, 18:00 UTC! 🔗 buff.ly/zrAGakb

The conference ticket shop for Offensivecon Tokyo is open! Not many tickets left... 🔗 buff.ly/lSsGVHU

Offensivecon is coming to Tokyo! 🔗 www.offensivecon.jp Ticket shop, sponsorships and CFP are already open...

A 0-Click Exploit Chain For The Pixel 10 by @natashenka.bsky.social and Seth Jenkins

From Zero To Root: Attacking Qualcomm DSP Driver by Xiling Gong

Pedal to the Metal: Accelerating to the Host via VirtualBox VMSVGA by NiNi and Xiaobye

Your TEE Is Only as Strong as Its Interconnect: Breaking SEV-SNP using AMD's Infinity Fabric by csrrw and bschlueter

Exploiting Android Apps with Counterfeit Art by Philipp Mao and Rokhaya Fall

Navigating the MTE Landscape: iOS Memory Protection Deep Dive by Patrick Ventuzelo and Atlan Pinabel

IRON GIANT: When The Vault Becomes The Victim by @hexnomad.bsky.social

From Samsung Account to RCE: A Journey to a Remote 0-Click Capability by Kaufi

Beyond the Limits of Site Isolation by @Ivan Fratric

Enhanced Insecurity Mode: 23 RCEs in Edge's "Safe" WebAssembly Interpreter by sakura and R1nd0

4-Byte Heap Overflow To RCE In Minecraft by Hrvoje Misetic

Design-Based Vulnerabilities on macOS: Oops, Not a One-Shot Fix by Zhongquan Li

SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay.Cloud by @pspaul95.bsky.social and Moritz Sanft

Exploiting QSEE Vulnerabilities In Google's Wifi Pro by Cristofaro Mune

Beyond the Limits of Site Isolation by Ivan Fratric

The DNG Weird Machine: Deconstructing an In-The-Wild Android Image Exploit by Benoît Sevens

Tile-Based Deferred Rooting: When Your GPU Starts Rendering To Kernel Code Space! by Xingyu Jin and Martijn Bogaard

Keynote - Chaotic Good and Chaotic Bad: ensuring collective success in defensive endeavours through offence by @ollieatnowhere.bsky.social

⌛️

We're proud to announce this year's Keynote Speaker: Ollie Whitehouse! For more information about his talk ➡️ buff.ly/7cY4zYT