Conference Description
Key Takeaways
- Community-driven security conference featuring technical talks and hands-on workshops covering offensive and defensive cybersecurity research
- Technical focus areas include APT malware analysis, Kubernetes security, CI/CD and OIDC trust issues, IoT vulnerabilities, and AI-driven threats
- Platforms and technologies discussed include Kubernetes, GitHub Actions, AWS, Electron, Go, Node.js, and BLE
- Designed for security researchers, penetration testers, red and blue teamers, malware analysts, and DevSecOps professionals
About BSides Berlin
BSides Berlin is part of the global BSides movement, a series of community-organized information security conferences that provide a platform for both established and emerging voices in cybersecurity. The event combines a full day of technical talks with a dedicated hands-on workshop day, creating opportunities for research presentation, practical skill development, and peer networking. The format encourages direct interaction between speakers and attendees in a smaller, collaborative setting.
Technical Topics and Research Areas
The conference programme addresses current challenges across cloud infrastructure, application security, and emerging threat vectors. Sessions cover advanced persistent threat malware analysis, Kubernetes security and persistence mechanisms, and CI/CD pipeline vulnerabilities related to OIDC trust configurations. Additional topics include malicious proxyware distribution through trusted app stores such as the Microsoft Store, smart lock and IoT security weaknesses exploiting BLE, and AI-driven risks including code and secret leakage. The event also examines benchmarking methodologies for AI web penetration testing agents and AI-driven malware generation techniques.
Workshop Programme
The workshop day offers beginner-friendly, practical security training designed to build hands-on skills. This format allows participants to work directly with tools and techniques in a guided environment, complementing the research-focused talks.
Who Should Attend
BSides Berlin serves security researchers, penetration testers, red teamers, blue teamers, security engineers, cloud security specialists, incident responders, malware analysts, and DevSecOps professionals. Attendees typically work in IT, cloud services, software development, and cybersecurity consulting. The event welcomes participants ranging from students and early-career professionals to senior engineers and researchers seeking to stay current with evolving attack techniques and defensive strategies.