Conference Description
Key Takeaways
- Community-driven security conference taking place in Barcelona on 30 October 2026
- Speaker topics include incident response, AI security, Kubernetes and container security, IoT vulnerabilities, and offensive security techniques
- Presentations from practitioners at Coveware, Netskope Threat Labs, SafeBreach, Microsoft, and other security organisations
- Focus on emerging threats including supply chain compromise, autonomous AI agents, and cloud security
About BSides Barcelona 2026
BSides Barcelona 2026 is part of the global Security BSides framework, a series of community-organised events built by and for information security professionals. The conference takes place on 30 October 2026 at the Districte Administratiu de la Generalitat de Catalunya in the Sants-Montjuïc district. The format emphasises discussions, demonstrations, and direct interaction between participants in an intimate setting designed to encourage collaboration.
Technical Focus Areas
The speaker lineup covers a range of offensive and defensive security disciplines. Sebas Kanj from Coveware brings expertise in digital forensics, incident response, and cyber threat intelligence. Magno Logan addresses AI security, Kubernetes vulnerabilities, container security, and CI/CD supply chain attacks, having contributed to the MITRE ATT&CK for Containers matrix. Vinicius Egerland from Netskope Threat Labs focuses on supply chain compromise and post-compromise tactics in the context of automated cyber threats.
IoT security features prominently through Sammy Azdoufal, who disclosed a critical MQTT ACL bypass in February 2026 affecting approximately 7,000 DJI ROMO robot vacuums across 24 countries, enabling unauthorised camera and microphone access. Arad Donenfeld from SafeBreach presents on offensive tooling, detection methods, and agentic workflows. Chris Brown addresses AI governance and autonomous agent authority, examining accountability when AI systems take independent action.
Who Should Attend
The event suits security practitioners working in incident response, threat research, penetration testing, DevSecOps, and cloud security. Speakers include professionals from enterprise security vendors, consultancies such as Bishop Fox and Ernst & Young, and organisations in healthcare diagnostics, financial services, and defence. Those interested in mobile payment security, PCI MPoC testing, red teaming, and the ethical dimensions of offensive security work will find relevant content.