Conference Description
Key Takeaways
- Advanced technical training covering AI-driven vulnerability research, reverse engineering, malware analysis, and Windows kernel exploitation
- Hybrid format with virtual training (October 26 to 31) and in-person sessions in Ottawa (November 2 to 6)
- Designed for experienced security professionals from government, critical infrastructure, law enforcement, and private sector teams
- Focus on bridging collaboration between public institutions and private sector security practitioners
- Hands-on workshops using tools including Ghidra, IDA, Velociraptor, and frameworks such as MITRE ATT&CK
About the Event
Ringzer0 Countermeasure Fall 2026 combines advanced technical training with a two-day conference, bringing together researchers, government agencies, law enforcement, and academic experts. The event addresses cybersecurity challenges facing governments and critical infrastructure operators, with programming split between virtual training sessions and in-person activities in Ottawa. Virtual training runs from October 26 to 31, followed by in-person training from November 2 to 4 and the conference on November 5 and 6.
Technical Training Topics
Training sessions cover offensive security and defensive operations across multiple domains. Vulnerability research tracks address AI-driven discovery methods, with sessions incorporating AI agents and large language models into security workflows. Reverse engineering and malware analysis training utilizes Ghidra, IDA, GDB, and QEMU for firmware and binary analysis. IoT and baseband firmware security sessions examine embedded device vulnerabilities, while Windows kernel exploitation training targets advanced system-level attack techniques.
Defensive tracks include incident response and threat hunting using Velociraptor, with methodology grounded in the MITRE ATT&CK framework and Unified Kill Chain. Web application penetration testing and cyber threat intelligence round out the curriculum. The format emphasizes hands-on labs and workshop-led instruction.
Critical Infrastructure and Government Focus
The conference programming specifically addresses threats targeting government systems and critical infrastructure. Sessions aim to facilitate knowledge sharing between public institutions and private sector security teams, recognizing that sophisticated attacks increasingly affect both domains. Organizations referenced in the event materials include CSE, CCCS, Field Effect, Mandiant, Calif.io, and Trend AI.
Who Should Attend
The event targets experienced practitioners rather than those new to cybersecurity. Relevant roles include vulnerability researchers, reverse engineers, malware analysts, incident responders, threat hunters, penetration testers, security engineers, and security architects. Attendees typically work within government agencies, critical infrastructure operators, private sector security teams, law enforcement, or academic research institutions. The technical depth assumes familiarity with security fundamentals and prior hands-on experience.