Positive Hack Days (PHDays)

1,216 talks · 2020–2025 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• How to safely code in C in 2025 2025
• What awaits white hat hackers in 2025? Boundaries between allowed and forbidden 2025
• Incident response blunders in 2023–2024 2024
• MENA 2024: APT-Groups and the Latest Cases 2024
• Navigating the fog of cyberwar: a review of APT Cloud Atlas attacks in 2023–2024 2024
• Who's knocking on your email: social engineering 2024 2024
• 2023: a watershed. Nose down or wheels up? 2023
• Internet mapping in 2023. What Shodan can't do 2023
• MapReduce 2023: benchmarking and optimization 2023
• Secure software development: new challenges in 2023 2023
• Attack methods in 2022. What will happen next year? 2022
• Cyberattacks on Russian companies. 2022 in review 2022
• Investigations in 2022 2022
• MaxPatrol O2: the evolution of autopilot in the world of cybersecurity | 05.2022 2022
• Unusual vulnerabilities in Ethereum smart contracts: review and elimination, 2022 2022
• CVE-2021-40444: why it is important 2021
• Digging through the archive of leaks from 2020 2020
• "Bank security" scammers, Black Friday, and deepfakes: how we're tricked in our daily life
• "It's not your problem." How banks protect your money
• (Ex)Cobalt. The new menagerie of the group: puma, octopus, and others
• (Non)Children's Issues
• (Un)secure development: faking Python project rankings
• 01111111day
• 15 uncommon OSINT tricks
• 20 unusual ways to use ChatGPT in cybersecurity
• 20-minute long adventure. Switching to Russian firewalls and transferring policies from foreign ones
• 200 open source проектов спустя опыт статического анализа исходного кода
• 200 open source проектов спустя опыт статического анализа исходного кода
• 2drunk2hack
• 50 shades of Cobalt: a retrospective on targeted infrastructure attacks
• 802.11 + Linux: under the hood
• A bug hunter's reflections on fuzzing
• A hardware solution to protect against USB attacks
• A look at security technologies and sandbox bypass techniques
• A look into the darkness: security of frontend applications from threat modeling to secure by design
• A modern car through the eyes of an offensive security specialist
• A monster under the bed, or how we became victims of a targeted attack
• A new approach to automated generation of exploits for major web applications
• A new SIEM in an existing SOC. The subtleties of the transition
• A new take on deception: catching an internal attacker
• A privilege escalation exploit in Windows that Microsoft won't fix
• A RCE vulnerability in Managed ClickHouse through the eyes of a SOC specialist at Yandex Cloud
• A review of cryptographic vulnerabilities in zero-knowledge proofs
• A scientific approach to happiness
• A security scan in 30 seconds? Easy... at first glance
• A software supply chain attack is an unacceptable event that we missed
• A story about one vulnerability
• AAA frontend: from out-of-the-box to enterprise excellence
• About sandcastles, comfort boxes, and other delights at small companies
• About strings in Python and beyond
• Accelerating Secure Software Delivery with Positive Technologies Application Security
• Access tokens and API gateway: how to ensure request security
• Accessible cybersecurity: how to land an internship
• Adaptive SOAR: responding off script
• Advanced Persistent Threat Attacks. The Practical Webinar
• AI agents for completing tasks
• AI agents in cyberintelligenceEN
• AI agents in WEB3 security
• AI as a means of optimizing the processes of profiling and depersonalization of sensitive data
• AI as a second pilot. Tools that information security specialists are using right now
• Airport information security — a solid fence, or Building a cyber resilient perimeter
• Algorithms against diseases
• All-Russian cyberbattle for university students. Awards ceremony
• amfiteatr day1
• amfiteatr day1 1
• amfiteatr day1 2
• amfiteatr day1 3
• An anthology of ways to monitor and secure Linux in user space
• Analysis of the client JavaScript code for detecting HTTP endpoints
• Analyzing client-side JavaScript to detect HTTP endpoints: two years later
• And that's why it all happened
• Anomaly detection using Python: from theory to practice
• Another way attackers can use ACLs in AD
• Anti-aging. Science
• Antivirus: reject or retain?
• Apache Arrow: faster, lower, more complex
• Apache Superset and Trino for building security analytics
• API keys storage
• API-First security strategy
• Applied ways to identify fake documents
• Approaches and techniques for detecting "red" utilities
• Approaches to Building a Secure Architecture: From Kill Chain to the Socratic Method
• Approaches to cryptanalysis of Arithmetization-Oriented primitives
• APTs amidst the Russian–Ukrainian conflict
• ArchOps: the architectural oversight process at Positive Technologies
• Are foreign countries interested in building nation centers to counter cyber threats
• Are Russian companies ready to switch to results oriented cybersecurity
• Are Russian companies ready to switch to results oriented cybersecurity
• Are Russian companies well-prepared to fend off cyberattacks?
• Are your pipes leaking?
• Art. Code. AI
• ASP.NET Core SCA
• Assessing the maturity of SOC processes based on MITRE ATT&CK
• Asynchronous vs threads: who will survive in the NoGIL era?
• Attackers' favorite LOLBins and how to detect their misuse
• Attacking crypto wallets: a fresh look at browser extension security
• Attacking Linux through page tables
• Attacking organizations with big scopes: from zero to hero
• Attacks on chatbots: indirect prompt injection in a real application
• Attacks on Rutube. Live issues, postmortem analysis
• Attacks on websites and sales pages during New Year’s Eve
• Automated audit of CI/CD UI pipelines
• Automated stand testing methodology at Positive Technologies
• Automated testing of cybersecurity system functionality
• Automated vulnerability analysis in smart contracts
• Automating the lifecycle of accounts at Lamoda: from manual errors to security and speed.
• AutoML threat detection: enhancing SOC autonomy
• Autonomous SOC: what has changed and where are we heading
• Autonomous SOCs: What the future of cybersecurity monitoring and incident response will look like
• Autotesting your correlation. CI and CD tools in the service of the purple team
• Available open-source playground recipe
• Avoiding burnout: secrets to building a cybersecurity community
• Award Ceremony Marking the Third Anniversary of the Standoff Bug Bounty Platform
• Awarding of the "Movement of the First" safety Ambassadors
• Balancing from L4 to L7: distinguishing the necessary from the sufficient
• Band-aid fixes or long-term excellence: navigating the old dilemma
• Basics of near real-time streaming: Kafka + CDC
• Battle of architectural approaches
• Battle of web frameworks
• Benchmarking Static Application Security Testing tools: how good are they?
• Beyond conventional data formats: the case for Apache Iceberg
• Beyond IoC: unleashing the full potential of cyber threat analytics
• Beyond the norm: unusual methods and tools used in cyberattacks on Russian organizations
• Beyond the password: new horizons in security awareness
• Beyond the patch: why vulnerability descriptions fall short
• Bezopasnost platejnih servisov eng
• Big data (in)security
• Big data and artificial intelligence platforms of moscow
• Bitcoin: evolution and internal workings
• Blameless culture: how to handle incidents the right way
• Blitz. Lifehacks from CISOs
• Boosting runtime security with Kubernetes: a game changer?
• Brain and AI
• Brave Docker security master's guide
• Brave New World: How We're Creating New Industries on the Cyber ​​Range
• Breaking in: the journey from nobody to root and SYSTEM
• Breaking through barriers: the art of auth bypass in pentesting and bug bounty hunting
• Bridging infrastructure as code and event-driven architecture
• Bug bounty for blockchain projects
• Bug bounty tasks and evolution
• Bug Bounty vs. penetration testing vs. cyberdrills vs. verification of non-tolerable events
• Bug bounty! Any results?
• Bug bounty: a view from the other side
• Bug bounty: international experience, business value, and prospects
• Building a competency center for analytical solutions in IT, cybersecurity, and business
• Building a SOC
• Building an incident management process under the MSSP model
• Building design implementation processes
• Building Industry-Specific Security Operations Centers (SOCs)
• Building your own PAM based on Teleport
• Burn IT out: why IT professionals burn out so fast. Guest: Almira Fatikhova
• Business intelligence using OSINT methods
• Business logic critical vulnerabilities
• Business partnership, or reliable security perimeter
• Business-level cybersecurity culture instead of immature culture
• Busting myths on metauniverses
• Bypassing Linux kernel protections when hijacking control flow
• Bypassing WAF signatures
• Caching patterns in large and high-load systems
• Can a hacker fool the heart of a SOC, or defense technologies and SIEM evasion techniques
• Can an electric scooter steal your identity?
• Can bug bounty guarantee business cyberresilience?
• Can Dota be hacked? Game development information security
• Can security be put on autopilot?
• Can we automate the infosec team, or When AI kicks us all to the curb
• Can we efficiently analyze incidents using only information security tools?
• Can you achieve cybersecurity without a billion-dollar budget?
• Career path of a CISO: from dawn to dusk
• Cat's house Affordable and convenient housing for your data
• Centralized management of distributed firewalls
• Centralized management of network interaction policies in large infrastructures
• Challenges for cybersecurity conferences. Part II
• Challenges in building the cybersecurity architecture of the digital ruble
• Challenges in selecting a Russian NGFW
• Challenges of typing in Python
• Changes in the distribution market. How companies in this market are getting on
• ChatGPT as a partner: changing the game in Python development
• Chief cybersecurity officer at 25: ten years later
• Choosing an ML algorithm to search for anomalies in network traffic
• Chw00t взлом chroot решений
• CI/CD unchained: searching for the weakest link in the development infrastructure
• CISO 2.0 and the team
• CISO 2.0. New challenges for a cyberleader
• CISO in hell, but with a team
• CISO in the cloud: security processes in cloud and hybrid scenarios
• Classroom to cyberspace
• Closing
• Cloud platforms: trust but verify
• Cloud, save the culture
• Code query language... is not needed?
• Cognitive biases in PostgreSQL security contracts
• Collaborative computing technologies. How companies can share data without actually sharing it
• COM/DCOM forgotten knowledge
• Combat reverse engineering, patching for non jailbroken iOS devices, botting, and anti fraud
• Come in—we are closed closed vs open cybersecurity ecosystem
• Company shares as a way to motivate top management and employees
• Comparing open source triage tools
• Confessions of a bug bounty hunter
• Confidential interbank scoring infrastructure
• Configuration management how to build and optimize the process
• Constructivism and engineering culture in the creation of enterprise-class products
• Container security in an in-house cloud: example of the Dzen platform
• Container security. How we embarked on developing our own solution and what came out of it
• Container, hacker, two DevOps: breaking containers and minimizing threats
• Corporate cybersecurity. A pragmatic approach taking into account requirements, risks, and threats
• Correlation of events from information security sensors
• Cost-effectiveness in building a result-oriented information security department
• Countering cyberbullying and involvement in droppery
• Crafting your own query language and grammar for practical problem-solving
• Creating a multipolar world: a country's digital independence and digital sovereignty
• Creating a universal harvester for collecting and processing forensic artifacts
• Creative thinking: the debate between physics and lyrics
• Crisis as opportunity for MSSPs
• Crisis as opportunity for specialized cloud infrastructure
• Critical infrastructure under protection.
• Critical proof forgery attack on zkEVM
• Crouching hacker, hidden How attackers can remain within a company's perimeter for up to 200 days
• Crypto scams: trends, threats, case studies, and how to protect yourself and your project
• Cryptocurrency investigation basics
• Cryptocurrency scams and what happens if you deal with "dirty" crypto
• Cryptography for Artificial Intelligence: Ensuring Privacy and Security
• Cryptography in WEB3: emerging trends and future developments
• CTF for development teams: how to find and train security champions
• Cuba Ransomware: details and protection methods
• Curator's voice creating a Burp Suite plugin without a keyboard EN
• Custom business solution development on no codelow code platforms
• Cyber Battle Award Ceremony Standoff 15
• Cyber challenge: bug bounty 2.0 or something more?
• Cyber ​​battle for finance: counterattack
• Cyberattacks expected in Russia in 2030
• Cyberbattle day one results. Conversation with The Standoff organizers
• Cyberbattle day one results. Innostage SOC
• Cyberbattle preliminary results
• Cyberbullying Guest: Tamara Chechetkina
• Cyberexercises on Positive Technologies infrastructure. How to hack a cybersecurity company
• Cyberfraud: how to protect citizens without bankrupting businesses
• Cybergang war: today's cyberwars
• Cyberinsurance: when to expect a breakthrough?
• Cyberintelligence is simple. How it differs from OSINT and HUMINT
• Cyberintelligence trends
• Cyberplenary. A tectonic shift of the Russian cybersecurity industry
• Cyberpunk through the eyes of infosec pros: breaking popular myths
• Cybersecurity ambassadors. Positive Education Awards
• Cybersecurity for execs in a cyberstorm: banking realities
• Cybersecurity in a young company: how to build defenses from scratch without overdoing it
• Cybersecurity in court: bridging the gap between lawyers and tech experts
• Cybersecurity in GCC,Africa,LatAm and Asia: current state,forecasts and international collaboration
• Cybersecurity labor market. How do you explain what you do to your grandmother?
• Cybersecurity market. Trends and prospects
• Cybersecurity product ecosystems
• Cybersecurity products and solutions: trends and growth opportunities
• Cybersecurity sovereignty: industry and national level
• Cybersecurity technological partnerships
• Cybersecurity through the eyes of regulators, customers, service providers, and integrators
• Cybersecurity through the eyes of top executives
• Cybersecurity, education, family: is work-life balance possible?
• Cybersecurity: shaping talent through education
• Cyberslam
• Cybersovereignty: open code contribution
• Cyberthreat categorization with AI and graph data science
• Cyberthreats to all living things: why cybersecurity is needed
• DAF: the way of the samurai in secure development
• Dark promotion: a deep dive into pricing,distribution models,and promotion methods on shadow markets
• Data Governance
• Data sources for fuzzing API web applications
• Day three of The Standoff. What happened and what lies ahead: analysis of cyberbattle
• DDD architecture: principles and implementation in Python
• Deception has no purpose, there is only a path
• Deception solutions: from a video camera to Bloodhound
• Deepfakes as a new way to engage with an audience and monetize content
• DeFi tools
• Deliver us from evil
• Denied, acquitted, fined: review of administrative cases on personal data leaks
• Dependency control on autopilot AI assistant guarding your Dockerfile EN
• DEPHAZE: Pre-launch for Partners
• Deployment automation: how to simplify complexity with a single button
• Designing unique IT spaces: VOX Architects experience
• Detecting multistage SQL injections
• Detecting SSH tunnels based on system calls from the SSH daemon process
• Detection as code. CI/CD practices for the Sysmon configuration file
• Detection of anomalies and signs of attacks in network traffic using the TCN autoencoder
• Detection of phishing domain names and typosquatting by using a string similarity metric
• Dev wars: the exponent strikes back
• Developer's internal platform: a look at backstage
• Developing the best Linux kernel livepatch
• Development
• Development of an ML model for detecting DLL side loading EN
• Development of Honeynet Threat Sharing Platform
• Development of information security expertise for ICSs in Positive Technologies
• Development trends and cybersecurity myths in a candidate-driven IT market
• DevEx: chasing bliss for a tech team
• DevSecOps practices in GitOps
• DevSecOps: from slogans to reality
• Digital amplifiers in speakers and what to reverse engineer
• Digital archaeology: restoring machine learning model training pipelines
• Digital leadership and cyberrisks: knowledge and skills for success
• Digital surveillance: fileless monitoring of any AD user
• Digital technologies are building a green future
• Digital word
• Digitalization of the Northern Sea Route
• Discovering C&C in Malicious PDF with obfuscation, encoding, and other techniques
• Distributed IT infrastructure and big data. How to achieve high utilization, remain solvent, and win
• Ditch the romantic stereotypes: why cybersecurity is not just about hackers
• Dive into dotnet development: deep analysis
• Diving into botnet development: a practical guide
• Diving into WEB3.0: the next generation Internet to replace the real world
• Do language models lighten the load? A look at data science specialist workflows
• Domain admin blitzkrieg
• Don't get caught: a blacklist of the top 10 fraud schemes in the digital space
• Don't stand under the boom: safety of industrial remote control systems
• Don't underestimate nanoseconds: the art of writing efficient code
• Don't waste a mistake, learn from it!
• Drunkhack
• DSL from scratch: where to start and how not to mess up
• Dynamic analysis. Cybersecurity regression automatic testing system (RDAST)
• Dynamic playbooks in SOC: Orchestration of the response to multi-stage attacks on the NIST framework
• Easing the load on a SOC analyst
• Ecosystems, feature factories and technical debt: how to be productive
• Edge in OT: an unclear rebranding of OPC servers or is there more to it?
• EDR, NDR, XDR: All-DR. What types of sensors are primarily needed in the SOC place
• Electronics in everyday life: devices we know little about and risks we don't always realize
• Empowering developers: open source tools we deserve
• Empowering SOCs with LLM
• Empowering talent: a CEO’s guide to building winning teams
• Enhancing cloud security. Using CSPM for SOC needs
• Enhancing security with Swagger
• Ensuring data privacy in the development of ML models
• Enterprise architecture in information security
• EQATOR: a comprehensive test automation solution
• ERM&CK framework: breaking down incident response
• Essence of recon in bug bounty and pentesting
• Ethereum projects
• Event opening, welcome speech
• Everyone can automate information security, and we're gonna tell you how
• Evil boxes
• Experience of releasing internal development to open source
• Exploring and applying smart contract formal verification approaches on the Ethereum platform
• Exposing and Fixing Physical Access Vulnerabilities
• Extending SIEM capabilities: open source solutions and more
• Extracting metrics from news, or how we automated the work of information security analysts
• Face/Off: show your quote
• Faces and facets of cybersecurity
• Fake it or make it: justifying infrastructure costs
• Fake leaks when not counted
• Fast track to CISO: six years from intern to leader in a large company
• Fathers and children: analytics and triage of transitive dependencies
• Fear and loathing in obfuscated assembly
• Filtering Windows events at the MegaBrain level
• Finals of the all-Russian contest of open-source projects by high school and university students
• Fintech cybersecurity in the new reality
• Fire or inspire: harnessing training programs to achieve strategic goals
• Firebase breaches stronger than your vodka
• Firewall-as-a-service: the birth and rise
• Firmalice автоматическое обнаружение уязвимостей обхода аутентификации в бинарных прошивках
• Fork to be rock: effective Linux kernel maintenance in production
• Formal verification of BFT consensus algorithms
• Free cryptography on microcontrollers for $2
• From burnout to inspiration: how not to give up in the long run
• From code to production what to focus on in a comprehensive approach to secure software develo
• From data to action ML at the heart of DFIR EN
• From desktop to browser: crafting browser-native game engine with WASM
• From development on a push-button phone to CPO in cybersecurity
• From disaster to recovery: how we restored our wiped confluence database
• From DoS to RCE: digging into various Mitsubishi PLC series
• From entertainment to manipulation
• From false positives to real threats: UEBA use case
• From frenemies to allies: teaming up developers and cybersecurity pros for safer products
• From hacker to CEO
• From idea to backlog: how to recognize the value of your product and your work
• From idea to startup
• From Lazarus ZINC to Moonstone Sleet
• From local accounts to passwordless authentication and SSO
• From manual machine learning to automation with Python libraries
• From Reactive to Preventive: How Antivirus Enhanced MaxPatrol EDR Capabilities
• From red team to blue team: attack and defense of AD certification center
• From then to now: tracing 25 years of analytical DBMS development
• From yacht to root: exploiting IoT weaknesses for full compromise
• Frontend application security testing (FAST): its role and place in DevSecOps
• Full infrastructure audit
• Future of application security
• Fuzzing as the basis for effective development a case study of LuaJIT
• Fuzzing of smart contracts on the TON blockchain platform
• Fuzzing: why your API must suffer
• g/vrp
• Gain access to everything.Discussion with creators of Russia's first film on reverse engineering
• Games of Future a new product at the crossroads of high tech and sport
• GEOINT from your desktop
• Getting to know the world of cyber security
• Go enlightenment: 8 insights for the next level
• Go hard or go home: a tale of pwning your favorite companies
• Government cybersecurity services for citizens
• GPFS фейловая система
• GPT native
• Grabbing secrets before attackers do it
• Green biohacking brain efficiency. Rules for neuro-detoxification.
• Guess what, I did it voluntarily! or how I got into secure development
• HackerToon finals
• Hacking techniques used by cybersecurity engineers
• Hacking techniques used by cybersecurity engineers
• Hacking through contractors from the perspective of cyberintelligence
• Hands-on cybersecurity conferences: content hunger—myth or new reality?
• Happiness Algorithms
• Happy digital world: to be handled with caution
• Hardware engineers in modern Russia
• Harnessing open source: how to build your first hacking tool
• Harnessing Polars and PyArrow for big data processing in industrial settings
• Hellhounds: operation Lahat
• Hidden in plain sight: exploring bulletproof hostings
• High-precision information security. How to protect ICS hardware and software
• Honest interviews on technology with cybersecurity and IT experts
• Hooks and Rods
• How a CISO went to work on the SOC first line
• How a SOC can see the entire infrastructure
• How a threat centric approach allows businesses to avoid damage from cyberattacks
• How a trivial information breach made a company the most valuable
• How Chip'ollino grew: power glitch attacks explained in simple terms
• How DeepSeek is broken and how AI breaks us
• How do you know if your infrastructure has been hacked?
• How do you leverage business expertise in practical training of information security specialists?
• How do you secure a service with a multimillion audience?
• How girls can succeed in IT and cybersecurity. Guest: Svetlana Gazizova
• How I would hack... the Runet
• How IT solutions transform the quality of life for ordinary Muscovites
• How Japanese cyberpunk anticipates cybersecurity issues of future technologies
• How joint development, open source, and professional communities have revolutionized digitalization
• How market needs drive development: the case of Orion soft
• How much does an open source SOC cost?
• How much does it cost to hack you? Methodology for assessing the cost of a cyberattack
• How much does secure development cost. An approach to calculating the cost-effectiveness of AppSec
• How not to become a victim of cyberattacks if you don't have a resource for cybersecurity
• How not to become an IT bot
• How not to get hooked on someone else's ecosystem and create your own that is sure to do the job
• How not to sell your soul when publishing your personal data on the web?
• How secure is corporate email in Russia?
• How text analytics helps to improve the city's transport infrastructure
• How the developers of a source code analyzer struggled with an exponent
• How the Internet, Technology, and Social Media Spoil the Lives of Art Stealers
• How to Achieve Better Results by Optimizing Cyber Budgets
• How to analyze 2,000 threat intelligence reports a year without losing your mind
• How to apply Zero Trust approaches when building a secure development process
• How to assess a company's readiness for launching a bug bounty program
• How to audit the algorithm for finding anomalies in time series and why you should do this
• How to become a top-notch incident response specialist?
• How to build a cyberresilient company: as viewed by top management
• How to build a SOC by effectively combining SOAR and SIEM
• How to build a threat intelligence program at your organization
• How to build an information security architecture without ending up with a parachute
• How to build effective layered defense depending on web traffic type without overdoing it
• How to bypass data exfiltration detection with malicious cryptography techniques
• How to deal with a noisy neighbor: limiting disk I/O in Kubernetes
• How to deploy 2FA from open source
• How to detect 95% of attacks covering 5% of threat actors' techniques
• How to detect and counter backdoor attacks on neural networks
• How to devirtualize a KoiVM-protected object
• How to ensure compliance control for results-oriented cybersecurity
• How to ensure control and security of corporate data?
• How to establish crisis communications in the public sphere during a cyberattack
• How to find out everything about a person using OSINT
• How to find security champions
• How to hack a neural network in five minutes
• How to handle a million vulnerabilities and survive?
• How to implement SOAR
• How to launch your own cybersecurity product in the Russian market without investment
• How to make AI videos that will be viral
• How to make architectural decisions when refactoring a legacy project backend
• How to make automatic emulation perform at the circus
• How to not stop trusting a root of trust
• How to optimize databases: 10 tips for developers
• How to protect the main channel of business communications
• How to protect your money online
• How to protect your open-source projects on GitHub from sanctions
• How to protect your personal data without becoming paranoid
• How to protect yourself from hidden web shells
• How to reach an agreement with everyone in the company, even if you are the tough security guy?
• How to Simplify Everything Without Slowing Down
• How to slow down ClickHouse
• How to SOC like a legend
• How to start a zoo of digital beasts for health and safely maintain them with AI
• How to talk about complex technical stuff in simple language. What ideas are voiced at TEDx
• How to teach data to "speak" so that business leaders understand
• How to train in-demand information security specialists
• How to transfer private files on a public blockchain
• How to turn fundamental technologies into commercial products
• How to turn human factor into an advantage? Cyberexercises as a tool to counter attacks
• How to use AI-generated videos in marketing and other creative industries?
• How to use big data to estimate the volume of emissions from cars on the streets of Moscow
• How to use LLMs to identify real vulnerabilities in LLM-powered applications
• How to work with a city's big data
• How to work with vendors going forward? Report vulnerabilities?
• How to write correlation rules so they don't gobble up your resources?
• How we assess vulnerabilities in Linux-based operating systems
• How we catch hackers using ML at Positive Technologies
• How we do near-real-time protection in Yandex Cloud: AI in processes and technologies
• How we fuzzed the OS kernel with syzkaller and the insights we gained
• How we implement ML at Positive Technologies
• How we looked for evidence of compromise on our network
• How we made the All-Russian Cybersecurity Olympiad
• How we made the safest car in Europe
• How we manage access in Yandex City services
• How we reduced operational work to zero for the acceptance of Kubernetes clusters for databases
• How we tamed the duck working with data X times faster without magic
• How we validated network changes
• How web attacks can bury your business
• How you lose users in the pursuit of security
• How Zhui and Dindin spent their last year in Russia
• Human factor: how information security architecture accounts for employee errors
• Hunters in the digital forest
• Hunting APTs with OPSEC mistakes
• Hunting for modern attacks on the Active Directory infrastructure
• Hunting for Remote Access Services
• Hunting in IT: Who is looking for and who is needed?
• I see it as a reverse engineer
• I want to go to IT! Where to go?
• ICS safety at a nuclear power plant: approaches and solutions. Cyberrange for ICS
• IDDQD: if cheat codes worked in information security
• IDE as a web application component
• Ideal cyberexercises: what a proper cyberrange should be like
• Identify, investigate, respond: NG SOAR for effective security
• Identity attacks in social networks. Theft of accounts
• Identity-Aware Proxy: taking a major leap towards zero trust
• Ideology and practice in the system of decision-making for cybersecurity
• IDFW: how to block an attack everywhere at once
• Immersion in metauniverses
• Impact of cyberattacks on public companies' stock quotes
• Implementing CSP for additional control of development
• Import substitution
• Importing binary dependencies in Python
• Impressive does not equal effective
• Improving fault tolerance of HTTP integrations without changing Python code
• Improving SAST accuracy through dynamic rule generation by an AI agent
• Improving SOC accuracy: how to control false negatives with BAS and SOAR integration
• In any unclear situation, (re)configure the audit rules
• Incident monetization
• Incident response and investigation: will automated analysis win over manual one?
• Incident response in information systems running on Astra Linux
• Information security and higher education
• Information security and higher education universities, students, cybersecurity departments, and inn
• Information security expertise transparency or: Why share knowledge with the community
• Information security market: integrators perspective
• Infosec memes: can we use pictures to talk about information security?
• Infosec trends
• Infrastructure Protection Without Security Tools
• Ingosstrakh experience in implementing SAST in Azure DevOps
• Inhumane technologies: liberation from routine or path to digital slavery?
• Injecting code into processes from the context of the Linux kernel
• Inner workings of CPython and JIT compilers
• Inside the Dark Web: Exploring the Psychological Profiles of Cybercriminals
• Integrating threat modeling into the development process
• Integration of continuous risk modeling into SecOps processes
• Integration of security into platform solutions: secure platform engineering
• Internal red team at T-Bank. Where does power lie, brother?
• Interview with the Standoff Hacks winners about bug hunting
• Interviews with attacker teams
• Introduction to DeFi
• Introductory remarks on the Evasion track
• Investigation of information security incidents caused by employees: how to detect and catch
• Investing in technology: is it worth it?
• Investment multiplier in security. Security at the IT infrastructure
• IP camera: a user's guide
• IR revolution: a new approach to investor relations
• IRP/SOAR implementation and operation at manufacturing companies
• Is AI a convenient tool or a global threat?
• Is automatic compliance assessment possible,how does information security architecture relate to it?
• Is it possible for the community to develop a methodology for results-oriented cybersecurity?
• Is it worth writing your own book on cybersecurity?
• Is there cybersecurity in the sea?
• Is there such a thing as secure VPN?
• IT and infosec market analytics: new time, new opportunities?
• IT infrastructure: common issues at the start of operation and their solutions
• It's never too early. How to start your career in cybersecurity at the age of 13
• Iteration at the boundary an OOB journey into file systems EN
• Javascript engine vulnerability research: state of the art
• JavaScript in PDF
• K8S Hardening. (Non)obvious settings
• Kernel-hack-drill: environment for developing Linux kernel exploits
• Kill chain involving 1C:Enterprise: from an unprivileged user to the domain admin
• KillBot screen to protect your website from fraud
• Know your IoT: how ML profiling uncovers attacks EN
• Knowledge management with Python: tools, approaches, examples
• Knowledge sharing among cybersecurity services within community platforms
• Kotlin multiverse: full-stack development
• Kubernetes from a SOC analyst's perspective: who's steering and where to turn
• Kubernetes hunting: threats in the orchestration jungle
• Large language models: vocabulary descriptions as a way to encode words and idioms
• Law No 250 how does it affect the education
• Lazarus crypto heist: an operation to steal money using 0-day exploits for Google Chrome
• Leaks in open source projects, or how to keep an eye on GitHub
• Legitimate C2: how popular services work for hackers
• Lessons from open cyber trials: what we learned after a year under attack
• Let's live in harmony
• Level of protection for companies. How quickly attackers can break into an organization
• Leveraging open source for smarter SOC automation
• Lights out: covertly turning off the ThinkPad webcam LED indicator
• Like, share, fail: what's wrong with youth's digital reputation
• Linux Endpoint Security
• Linux perf: works for penguin, but what about Python?
• Little big boxes
• LLM and agents: boosting SOC
• Logitech Flight Instrument Panel и пингвины
• Looking deeper: searching for suspicious COM requests at the ALPC level
• Making some noise: implementing fuzzing
• Managed DB security
• Managing a company's business risks through non-tolerable events, Risk Management 3.0
• Managing technological independence in the IT landscape of the oil and gas industry
• MaxPatrol SIEM health check: we know your SIEM can do more
• Measuring secure development: down to the last milligram
• Measuring SOC performance
• Memory regions, or how I loaded the shellcode in the wrong place
• Merging networks: what to expect when integrating infrastructures of different companies
• Meta-skills for job seekers and their employers
• Methodology for assessing the risks of successful social engineering attacks against companies
• Methods to access the Tuxera Reliance Nitro embedded file system
• Metrics that matter: evaluating engineering team performance
• Minimizing data loss: delivering incidents with only 0.01% lost. How many incidents have you lost?
• Mining N-days for fun and profit: gamifying vulnerability research
• Mistakes in using threat intelligence in SOC
• Mistakes in working with databases that made me better
• mix day1
• MLSecOps: how do we set the trends?
• Mobile application security
• Modeling the Future
• Modeling the impact of security checks at different stages of development
• Modern approaches to data management in the era of AI and big data
• Modern attacks on Google Chrome
• Modern backup systems: a source of your problems or the foundation of your confidence?
• Modern challenges and solutions in secure cloud service development
• Modern data center: what is it like?
• Modern history of cyberthreat intelligence development
• Modern Realities of Designing and Building Network Infrastructure
• Modern rootkits and methods of their detection
• Modernization of the Break Glass Mechanism: Ensuring the Resilience of Emergency Access Technologies
• Monitoring and managing decentralized retail network objects
• Monitoring the stability and efficiency of business processes
• Most common scams on social media
• MTS: your shield from phone scammers
• Multi-tenant Kubernetes. Network isolation. The Experience of Alfa-Bank
• Multifactor authentication: from the Mesozoic to our era
• Multitenancy in a multi-cluster platform for large enterprises
• My home is smarter than me: smart home ecosystem trends and risks
• Mythbusters: busting the myths around infosec specialists
• Mythbusters: three experiments in biometrics
• Myths and realities of the virtualization platform market and their protection
• Navigating a company's CI/CD landscape: a developer's first day on the job
• Navigating the CISO Lifecycle
• Navigating the future: Russia's journey in high-tech innovation
• Navigating the rough waters: the challenges of implementing changes
• Network compromise through backup tools
• Network equipment configuration control. How to Ensure?
• Network infrastructure hardening
• Network security in Russia: what remains after all is gone
• Network security maturity model
• Network security on the map of effective cybersecurity
• NetworkPolicy, a native Kubernetes firewall
• Neurophysiology on biohacking
• New from UserGate: a SIEM system and SOC as a service
• New industrial control systems need new security products
• New trends in deception
• New tricks of ACL abusers (Active Directory)
• NFT: the digital art of today
• NG SOAR: next-generation response
• NISTandard approach to cybersecurity
• No cybersecurity without IT: removing traffic from the network infrastructure
• No reply
• Not all VPNs are equally safe
• On the anonymity of random Telegram numbers
• On-premise SOC: how to build it without pain
• One policy to manage them all
• Online piracy: is there a solution? Guest: Zhan Prosyanov
• Open activities
• Open source at T-Bank: people make all the difference
• Open Source finals
• Open source from crystal to software stack
• Open source? Enterprise? A true story of a journey there and back
• Opening of the Cybersecurity Architecture track
• Opening of the day
• Opening of the fifth stage of the All-Russian educational relay race
• Opening of the International cyberfestival Positive Hack Days
• Opening of the module The SOC: today and tomorrow
• Opening of the PHDays 11 forum
• Opening speech by the organizers
• Opening speech by the organizers
• Opening the Languages and Tools track
• Opening, welcome speech
• Opening. POSIDev organizers' welcome speech
• Operation Triangulation: why one shouldn't attack researchers
• Optimizing AppSec with open source ASOC platforms
• oPWNstack
• Oracle manipulation in Web3
• OSINT for adults
• Our consensus in Hyperledger Fabric
• Our secret ingredient for reverse engineering
• Outcome of the discussions
• Package-by-package Attack
• Panel discussion. Cybersecurity in the era of digital transformation
• Panel discussion. Towards a technological independence
• Panel discussion: challenges of using open source for security
• Panel discussion: open source development in Russia: today and tomorrow
• Paper security and lawmaking to help industry grow
• Password: N4G0R5HK3S!D1TK0R0L. What do hackers know about passwords?
• Paying hackers ethically, or how white hackers and bug bounty hunters increase business resilience
• People as code: an employee as an asset and object of protection
• PhantomCore: activity chronicle and tool evolution
• PHDays 12 opening
• PHDays 12 opening
• PHDays V - Zal Mix
• Phishing on official websites how victims hand over their passwords to hackers
• Phishing: the art of deception in the digital world
• Phygital world and its mindset transformation tools. Guest: Sergey Kalmykov
• Pitfalls of working with asyncio
• Playbook quality metrics: how to get away from the human factor in lessons-learned procedures
• Playing out the defense of the future
• Playing together for the long haul a new strategy for the information security and IT market,
• Playing together for the long haul a new strategy for the information security and IT market,
• Plenary discussion
• Polyglot code analysis using a graph database and a domain specific language
• Popularization of cryptography as science and technology
• Port security bypass: connect to the network through any power outlet
• POSI: growth stock
• Positive Awards / Positive Community Talent awards ceremony
• Positive finance: Positive Technologies in figures
• Positive Hack Camp: the international cybersecurity training program
• Positive Hack Days festival. About dreams, gratitude, and the future
• Positive Hack Days festival. Opening
• Positive Hack Days. Live
• Positive Hack Days. Live
• Positive Hack Days. Live broadcast
• Positive Hack Days. Live broadcast
• Positive Hack Days. Live broadcast
• Positive Hack Days. Live broadcast
• Positive Hack Days. Live broadcast
• Positive Hack Media как проводник в цифровое устройство мира
• Positive Technologies presentation for investors
• Positive Technologies' contribution in the development of the open source community
• Positive Technologies: developing technologies and expertise
• Positive Technologies: tech strategy, power of vision, open source, and community development
• Practical application of the HardcoreIT approach on a live client
• Practical approaches to modernizing security architecture in the transport sector
• Pragmatic architecture, or designing software based on algorithms and hands-on experience
• Predict this! Fast, efficient, and affordable internet analysis
• Predicting vulnerabilities in information system device configurations
• Preprocessing is our everything
• Presentation attack and liveness detections: from data collection to release
• Presentation of MaxPatrol Carbon
• presszal day1
• presszal day1 1
• presszal day1 2
• presszal day1 3
• presszal day1 4
• presszal day1 5
• Preventing burn-out in a SOC
• PRINCIPIA. Fundamentals of information security for commercial organizations
• Privacy and compliance in blockchain: striking a balance
• Privacy by design for information systems and building the SDLC cycle
• Prolonged attacks
• Prompt Injection and all that jazz: getting the most out of an AI service
• Prospects of IT companies going public
• Protecting ATMs from blackbox attacks: new trends and cool stories
• Protecting information systems starts with the right IT architecture
• Protecting our repositories from vicious PyPi wheels by checking open vulnerability databases
• Protection from third parties in a modern bank: the case of T-Bank
• Protective solutions are not a panacea: a series of cyberattacks destroying local agents
• Psychology of finance vs. scammers
• PT FS programs: financing and government incentives as drivers
• PT NGFW. I Am Legend
• Purple-team approach to improving the effectiveness of SOC
• Pyramid Scam: An Overview of the Most Popular Fraudulent Schemes in Russia
• Python bytecode obfuscation
• Quantitative information security risk analysis using SGRC
• Quantitative information security risk analysis using SGRC
• Quantitative risk assessment in cybersecurity, or how not to lose in a changing digital environment
• Quantum technologies
• Quantum technology: getting ahead before it's too late
• Quantum-resistant blockchain
• Quiz "Moscow in numbers"
• Quiz "Secrets of financial security"
• R&D projects for advancing MITRE ATT&CK, tools for the job
• Ransomware protection experience of an FMCG leader
• Reachability analysis a new approach to SCA
• Ready to be in charge for the results?
• Real art in the digital age
• Real-world experience transitioning to detection as code
• Red and blue teams: rules of interaction (and game) throughout a red team project
• Red teaming with an underhyped SSRF: case study and new tool release
• Red teaming: phishing attack techniques
• Relax, it's all over now
• Reliability and security: are they additional options or the foundation for modern IT systems?
• Reliability of ATM processing system
• Remote incident response: how COVID-19 challenges transformed into new practices
• Requesting the court to consider.
• Resource isolation mechanisms in "clouds" using the example of K2 Cloud
• Result-driven cybersecurity
• Results of PHDays competitions
• Results of previous days of Standoff
• Results of previous days of The Standoff
• Results-oriented cybersecurity: the CISO perspective
• Results-oriented cybersecurity: the top management perspective
• Retain and grow: strategy for developing a multigenerational team in information security
• Reverse engineering as a profession: why we need it
• Reverse engineering of secure OS (TEE) using the AMD PSP TEE
• Revoke access without been caught
• RFID и NFC — в массы!
• Rise of the machines: from switch to terminator
• Rise of the machines: is it possible to replace SOC analysts with artificial intelligence?
• Risks when working with foreign companies
• Rock eBOOT, or how to encrypt an orange
• Role of integrated infosec solutions for industrial enterprises
• ROP больше не проблема средство автоматического обнаружения ROP шеллкодов в сетевом трафике
• Round table and talks by experts. A daily routine of IT specialists under the cyberstorm
• Round table and talks by experts. Bug bounty through the eyes of developers, users, and hackers
• Roundtable on open security
• Roundtable on the use of InnerSource approaches in Python development
• Russia crypto ban: current situation and forecasts
• Russian hardware platforms for security solutions: already true or devastatingly still not true?
• Russian operating systems today: challenges, tasks, prospects
• Safe Word for Hackers How to Prevent a Cyberattack from Paralyzing Your Business
• Sales considering the real needs of the customer
• SCA implementation
• SCA, or how to create and analyze SBOM for each language you use
• Scenarios of the future
• Schrödinger's tasks everything you didn't know about the Windows task scheduler
• Scooters or flying saucers—what will transportation be like in the future? Guest: Egor Bayandin"
• SDRcraft: the art of electronic warfare
• Searching for similar hacker activity patterns
• SEC against blockchain: TON
• Section without press. How to work with customers in a new reality
• Section. A big brouhaha over data breaches: how to minimize the risks of attacks
• Section. The ploy won't work: protection against supply chain attacks
• Secure access to information in isolated networks
• Secure by design culture
• Secure development in your IDE
• Secure development without chaos and disruption
• Secure development: experience of a cloud provider
• Secure medicine
• Securing public cloud deployment pipelines: why it's essential and how to do it
• Securing the cloud with Tetragon
• Security audit of smart contracts on TON
• Security champions: a voice of security in a team
• Security cubed: how to provide incident monitoring in a microservice architecture
• Security games people play
• Security mechanisms in DeFi
• Security of investments in blockchain technologies
• Security of resources in the cloud. Cloud-oriented SIEM systems
• Security of space systems
• Security of the automotive IoT mobile applications
• Security or paranoia
• Security technologies and antivirus and EDR system bypass techniques
• Security: what's the purpose?
• Segmentation and zoning of the local network
• Self-assessment of the AppSec process maturity
• seliger day1 10
• seliger day1 11
• seliger day1 12
• seliger day1 13
• seliger day1 14
• seliger day1 9
• Service architecture: reducing labor costs and improving the security level
• Seven domain failure stories
• Should CISOs be ashamed of missing incidents
• SIEM correlation rules and expert knowledge
• SIEM: how we nailed it
• SiemMonkey: reduce fruitless labor
• Signing an agreement between Positive Technologies and ITMO University
• Size matters: how to store cybersecurity event data
• Skala-R for artificial intelligence.
• SLSA: assessing the efficiency of cloud-based supply chain protection
• Smart contracts fuzzing
• Smart home security: how hackers can gain full access to your home through residential apps
• Smart SOC automation, AI, and cyberthreat defense best practices
• Smart toy vulnerabilities can put your child at risk of abuse by strangers
• Snatch: how stealers facilitate targeted attacks
• So, what's up with logs?
• So, you've finally integrated security scanners into your pipelines: now what?
• SOAR maximum response
• SOC architecture practices in the digital flood era
• SOC harmony in action: SIEM, SOAR, ChatGPT
• SOC on the fly: implementing a hybrid model, or our survival experience
• SOC response: how not to bring your company down?
• SOC scripting
• Social engineering or: What to do when there is no markup
• Social engineering: red team trends, technical aspects of the kill chain, and project experience
• SOCs with WAF, or Why SOCs need to monitor web application security
• Software compositional analysis: current challenges
• Software supply chain security. Building processes with OSS
• Solar NGFW. Did not expect that?
• Some bruteforce intelligence
• Space, information security, IT, development, media
• Special guest: Maksut Shadayev, Minister of Digital Development, Communications and Mass Media
• Speech recognition security
• Spotting bugs in PyTorch with continuous fuzzing
• SRE in data, or the mystery of the three spiders
• SSO in a billion Keycloaks
• StaaS (Stand as a Service)
• Standard rules for non-standard sources
• Standoff 13. Live stream
• Standoff 365: what next
• Standoff awards ceremony
• Standoff day one results
• Standoff day two results
• Star Wars: The Hidden Menace
• Starting a Career in Cybersecurity: The Path to Becoming a White-Hat Hacker
• Static (and lexical) analyzers in modern development
• Stay home: the security of marketplaces and home delivery
• Staying relevant: key business insights from Russia's largest private bank
• Stock market reloaded. New opportunities for technology companies
• Stock market reloaded. New opportunities for technology companies
• Subscription malware: how Malware-as-a-Service works on the dark web
• Super teams
• Supply chain attacks
• Supply chain security
• SW-RASP: Java self-protection defense
• Switching to Russian operating systems. How Linux is better than Windows?
• Swordfish Security's secure development framework
• Sylvester, the canary seeker
• Synthetic data generation service
• Sysinternals through the eyes of SOC
• Taking care of your serpents: hunting for trojans on PyPI with machine learning
• Target state: cybersecurity development forecast understandable to the business
• Technical interview without parentheses balancing
• Technological sovereignty and how to survive under a cyberstorm
• Technology or leadership: the evolution of the role of a cybersecurity leader
• Technology partnership between Xello and ICL
• Testing and verifying Linux kernel
• Testing biometric vitality detection algorithms for the Unified Biometric System
• Thank you for purchasing tickets to PHDays. Appeal from representatives of charitable foundations
• That's s hack
• The -=Twelve=- Chairs
• The amazing evolution of JDK sorting
• The amazing evolution of JDK sorting
• The architecture for providing a closed application environment in Aurora OS
• The art of a pathfinder in corporate infrastructure: how behavioral indicators help investigate inc
• The art of deception: The best way to deceive hackers in a corporate network
• The artifacts takeover: mass compromise of dependencies for initial access
• The battle of DI frameworks
• The bone of contention: hunting for threats in macOS
• The bottleneck problem: why the idea of resurrecting your career by entering IT is no longer viable
• The brave docker security master's guide
• The bug bounty market in Russia is on the verge of a boom: causes and prospects
• The case of the insider, or how to become a defendant in court. A report for non-lawyers
• The causes of data vulnerability today
• The concept of autonomous learning for a cybersecurity specialist
• The curse of predictable transient numeric identifiers
• The cyber resilience methodology and the multivendor ecosystem
• The cyber weather: cloudy with a chance of cyberattacks
• The cybersecurity of quantum technologies.
• The dark web as a mirror of cybercriminal interests
• The developer-warrior: exponential reflection
• The development of tracing at hh.ru: from Cassandra and OpenTelemetry to Vector and ClickHouse
• The engineer of a secure future
• The evolution of cyber morality who hacked our values
• The evolution of memory models
• The five tricky issues of your serverless solution
• The future of cybersecurity architecture: the art of balancing innovation and budget
• The future of information security architecture: how to build a managed security system
• The future of the high-tech industry
• The helmsman's caught in the net: looking into network vulnerabilities in Kubernetes service mesh
• The impact of common security issues of web 2.0 on blockchain network security
• The impact of cyberattacks on the share prices of Russian companies
• The impact of cybersecurity: transforming the top management agenda
• The industrial standard in management reporting
• The Innostage approach
• The international cyber festival Positive Hack Days 2
• The invisible ransomware virus epidemic
• The Magic of WebAssembly: from browsers to app runtime protection
• The methodology of designing an architecture and identifying its needs
• The new ITIL in the world of SOC
• The new Log4Shell they forgot to tell you about
• The new reality of information security and vulnerability management
• The NVD Crisis and the Bright Future
• The only way to survive: why and how Innostage creates MSSP SOC, the first interuniversity SSP
• The path from intern to leading expert in the SOC team
• The path of an ethical hacker: hack it if you can
• The peculiarities of development and using the latest Russian PACs vs the newer old PACs
• The Podari Zhizn charity foundation
• The Practical Guide to Answering the CEO’s Question: 'Are We Secure?'
• The profession of a reverse engineer what is reverse engineering and why is it needed
• The right to an image in the era of deepfakes and AI
• The Role of Artificial Intelligence in Cybersecurity
• The shadow data economy: what has changed in the cybercrime business over the past year
• The Standoff awarding ceremony
• The stock market and cybersecurity. Discovery of the year for investors
• The story of an Apport vulnerability
• The story of an Apport vulnerability
• The tale of how I switched to Litestar
• The thorny path from design to operation
• The twists and turns of CMS import substitution.
• The unseen helpers: the thin line where employees and customers of IT companies aid hackers
• The use of AI in attacks
• The use of GAN models to generate attacks
• The use of lightweight LLMs in cybersecurity analytical tasks EN
• The very same ChatGPT
• The world at the edge of WEB3
• Think like a criminal: an analysis of Russian cybercrime legislation
• ThinkBIG for CISOs: a security strategy without fires
• Threat detection and response
• Threat exploration to spark innovation
• Threat intelligence: not all indicators are equally useful
• Threat modeling: from three squares to secure by design
• Three open-source tools to empower your network visibility
• Time to step out of the dark! Building a trusted environment for ML model development
• To make it or not to make it: How to assess responses to сybersecurity incidents
• To secure or insure? The prospects for cyberinsurance in Russia
• To whom to sell AppSec. How security has become an ally of the finance and operations departments
• Today's recruitment market in IT and cybersecurity
• Together or alone. The potential for the Russian cybersecurity industry to penetrate new markets
• Tomorrow's cybersecurity: educating the next generation
• TON ecosystem
• Tools for unmasking bad guys, illustrated with real-life examples
• Top 10 Linux artifacts for incident investigation
• Top 5 cheating schemes
• Tour of Sense Tower
• Tour of SOC
• Tour of the festival
• Tour of the global Innostage SOC
• Tour of the Innostage SOC
• Tour of the Innostage SOC
• Tour of the Innostage SOC
• Tour of the Innostage SOC
• Tour of the Innostage SOC
• Tour of the Innostage SOC
• Tour of the Innostage SOC 2
• Tour of the mock up
• Tour of the mock up
• Tour of the mock up 2
• Tour of the mock-up
• Tour of the mock-up
• Tour of the mock-up
• Tour of the mock-up
• Tour of the mock-up
• Tour of the mock-up
• Traces, dumps, flame graphs: how sampling profilers work
• Track opening
• Track opening
• Track opening. Welcome speech
• Track, don't hide: solutions for cryptocurrency monitoring
• Transformer-based code vectorization for robust recognition of software components and dependencies
• Travel Guide for Travelers to RezBez
• Trends and challenges in the IT market
• Troubleshooting WEC: detailed analysis of issues with the Windows Event Forwarding mechanism
• Trunk-Based Development in an enterprise
• Trust is good, too much trust is dangerous, or Trusted relationship attacks
• Trust no one: red-teaming infrastructure on steroids
• Trust, but verify: how to organize work with contractors
• Tune against the machine. How we made PHDays' official soundtrack
• Turning your home-cooked app into a product in 15 minutes
• Twenty Alerts Later: Are Modern Cyberattacks Really That Silent?
• Two-factor authentication: what, why, how?
• Types beyond Any
• UEBA + SIEM transforming SOC from reactive to proactive threat monitoring
• UEBA use cases for detecting non-typical attacks
• UEBA. Is there something more interesting than a plain old "front and center"?
• Unpacking the inner workings of fuzzers
• Unsafe nuclei checks
• Untangling the snake's nest: tracing the attacks by Shedding Zmey
• Unveiling threats in next-gen LLM applications: the power of threat modeling
• Using Certora Prover for formal verification of smart contracts: methodology and case study
• Using LLM in information security: on the way to an AI assistant
• Using Semgrep for ensuring code security
• Vault: going our own way
• Vector: why the heck do we need it in cybersecurity?
• Venture into the unknown: the ins and outs of interaction in distributed systems
• Vivaldi vs VivaldAI: music of the future
• VK NFT: marketplace and custodial wallet
• VOC for vulnerabilities, SOC for monitoring
• VS Code: getting the most out of our IDE—and even more
• VSCode XP: correlations without pain and suffering
• Vulnerabilities of zk-SNARK protocols
• Vulnerability management
• Vulnerable Allsafe mobile application through the eyes of a source code analyst for beginners
• Vulnerable eye: health-checking your monitoring systems during a cyberattack
• Vulristics, a utility for vulnerability analysis and prioritization
• Waging war with the sandbox: techniques from the other side of the barricade
• Was there really a patch? Lifespan of vulnerabilities in Runet
• We don't need your service!
• We know what you did last summer: how to learn EVERYTHING about a person from open sources?
• Well, go ahead, tell me how to hunt LOLOL
• Whaling technologies are becoming more popular as phishing attacks become more sophisticated
• What alphas will wear: the fashion of the future
• What benefits can code generation from the proto3 format bring us
• What do you know about your contractors
• What does the future hold for Russian cybersecurity vendors?
• What does the perfect leader look like?
• What hackers do to stay invisible online, or traffic analysis technologies and how to bypass them
• What hinders the spread of open source in Russia?
• What is a cyberrange, or where do hackers train?
• What is Ethereum
• What is important for the protection of smart apartment buildings
• What Is LLVM And Why You Should Care
• What is more important in complex projects: product features or engineers' skills?
• What is the future of pentesting and what does the Law No 250 have to do with it
• What is the outcome of a CISO's efforts?
• What it costs to build a chip?
• What lies ahead for SOCs: evolution, degradation, transformation …
• What need would a hacker have for the Mona Lisa?
• What needs to change for leaks to become less frequent
• What not to do as a data engineer: mastering the art of bad advice
• What the dark web knows about you
• What TI vendors do not say. IoC scoring
• What to do if a company employee is a media personality?
• What to expect tomorrow at PHDays
• What worries hardware developers
• What you're doing wrong with Elasticsearch from an engineering perspective
• What's life like for the Habr community?
• What's up with cybersecurity?
• What's yours is now ours: the useful stuff you can find on hackers' servers
• When all hope is lost: metaproducts standing guard when hackers bypass traditional security tools
• When security can cause harm
• When there are multiple attackers challenges of attribution in cases of multiple compromises
• When three know it, all know it: what is known about your company on the web?
• When will ML replace humans
• Where Cybersecurity Begins: Creating a Safe Digital Space
• Where the Russian banking sector is heading: new technologies and services
• Who are you, Mr. CISO?
• Who is hacking Russian companies: interviews with top hackers on bug bounty platforms
• Who lives in an ICS and how do we find them?
• Who's who in cloud security
• Who, how, and why attacks Linux infrastructure
• Why AI is conquering every field but cybersecurity
• Why and how we're building our own buf
• Why can't we be friends' houses?
• Why cyberattacks will never come to an end. The business model of cybercrime today
• Why developers don't read requirements (and analysts write too much)
• Why does an IT manafer need soft skills?
• Why don't we call it off?
• Why open source is not only about software
• Why security without usability is doomed
• Why security without usability is doomed EN
• Why you aren't being eavesdropped on, but ads know everything: myths and realities
• Will AI replace media specialists?
• Will AI replace programmers?
• Will artificial intelligence replace everything?
• Will we still need programmers in five years?
• Windows inventory via SSH
• Words of welcome from the host Announcement of the festival events
• Working in a SOC: myths and reality
• Workshop. Best practices for creating rules in XP
• Workshop. Using ERM&CK project to write response scripts
• Wrap-up of the cyberexercises on Positive Technologies' infrastructure
• Wrap-up of the open-source projects competition. Infosec education
• Wylsacom on PHD
• X-Files: the convenience of (in)security
• XDR in Russia: trends and forecasts, first projects
• XPost: a post exploitation tool for high value systems
• XXE: how XML processing leads to security issues
• YADRO: Russian hardware platforms. Creating a product from PCB to microcode
• Yes, we can! Replacing NIST: how to conduct domestic biometric research
• Yet another Shodan, или Наш опыт создания аналогичной поисковой системы
• You can't just implement MFA.
• You don't need queues
• You've got a mail: classic email attacks reimagined
• Your core has arrhythmia: power attacks
• Youth Day opening
• Zal Mix Day 2
• Zen and the art of Excel: why less is more in big data
• Zero days and sanctions:how to report a vulnerability to a vendor who does not want to hear about it
• Zero trust and software defined perimeter how to protect business in a trustless world
• Zero-day exploits of ransomware operators (Windows OS)
• Автоматическая генерация патчей для уязвимого исходного кода
• Алгоритмы DGA и обнаружение киберугроз
• Атака на SAP Mobile
• Атака на SAP Mobile
• Безопасность тенденции и бизнес идеи — с точки зрения венчурного капитала Силиконовой долины
• Безопастность iOS приложениий
• Бинарный анализ c декомпиляцией и LLVM
• Буткит через СМС оценка безопасности сети 4G
• Взлом полностью гомоморфной криптосистемы на основе факторизации
• Взлом электросети от отдельной подстанции к блэкауту
• Вычисление, визуализация и анализ метрик
• Где заканчивается анонимность в анонимных сетях
• Если шифрование файлов способствует взлому паролей
• Жизнь в «цифре» сегодня и завтра: как сделать ее безопасной?
• Защита от перехвата GSM сигнала
• Защита против атак на HART
• Защищенность CMS
• Защищенность CMS
• ИБ в перспективе прошлое и будущее
• Из песочницы в SMM эксплуатация повреждений памяти
• Исследование правительственных шпионских программ
• Исследование скрытых каналов по времени на основе заголовков кэширования протокола HTTP
• Как выбрать WAF
• Как увидеть невидимые инциденты
• Как увидеть невидимые инциденты
• Компрометация крупных инфраструктур Расследование, устранение последствий
• Компьютерная контркриминалистика в NIX системах
• Конкурс HackQuiz
• Конкурс стартапов в области информационной безопасности, сетевых технологий, интернета вещей
• Конкурс стартапов в области информационной безопасности, сетевых технологий, интернета вещей 2
• Космическое киберпространство
• Кот в мешке вопросы безопасности при M&A
• Ломать и строить, и снова ломать
• Методы обнаружения сетевых атак на основе технологии самообучения
• Мобильная «безопасность»
• Наручники и оковы
• Нас reboot, а мы крепчаем Каково быть Россией в недружественном кибермире
• Не nmap'ом единым
• Не верь своим редиректам
• Не ходите, дети, в Африку гулять! или опыт получения сертификата Common Criteria в Германии
• Неинвазивное устранение уязвимостей логического управления доступом в веб приложениях
• Никаких оттенков серого
• Оттенки черного и белого
• Перспективные методы предотвращения внутренних угроз
• Почему же с инфобезом все так плохо
• Практические подходы к автоматизации обратного проектирования
• Противодействие платёжному фроду на сети оператора связи
• Разработка сервиса доступа и управления интегрированной базой уязвимостей
• Роль экспертного сообщества в формировании банка данных угроз информационной безопасности
• Российская криптография так ли все грустно
• Рынок эксплойтов нулевого дня шантаж и товарищество
• Создание международного сообщества «белых шляп»
• Социальная инженерия в шутку и всерьез
• Специальный компилятор для взлома хешей
• Строим киберкрепость
• Технологии защиты непрерывности процесса управления АСУ ТП
• Управление ИБ
• Хакнуть сайт на Adobe Experience Manager
• Этот чертов уязвимый химический процесс
• Этот чертов уязвимый химический процесс