Back | Home Agenda

HACKING VILLAGE

Tue 13

10:00h

Workshop | HACKING VILLAGE

CaixabankTech Capture the Flag “Unleash your Hacking Skills”

Marc Palau Marti Caixabank Tech Security Architecture Manager Speaker

13-05-2025 10:00 13-05-2025 10:10 Europe/Madrid CaixabankTech Capture the Flag “Unleash your Hacking Skills” Welcome to the exciting CaixaBank Tech Capture The Flag (CTF) Challenge, taking place at the Barcelona Cybersecurity Congress from May 13-15. This special event is designed to test your cybersecurity skills across 8 challenges encompassing areas such as Web, Forensic, Cryptography, Reverse Engineering, Steganography, and Exploitation. Event Details: Time: From 10:30 AM to 23:59h Introductory Talk: Don’t miss the introductory talk about the CTF instructions at 10:10 AM before the challenge begins. Registration: https://www.caixabanktech.com/en/cybersecurity-congress-2025-en/ Join this unique challenge by registering from May 7th until the end of the contest. Prizes: 1st Place: €300 on a Money To Pay card. 2nd and 3rd Place: Samsung Buds 2 headphones. Prize Ceremony: Winners will be notified by email, and the prize ceremony will take place on May 15th at 11:30 AM at the CaixaBank Tech stand. Follow the real-time ranking at the CaixaBank Tech stand and don’t miss the chance to demonstrate your skills and win fabulous prizes! Hacking Village 1

10:00h - 10:10h Hacking Village 1

10:10h

Workshop | HACKING VILLAGE

OWASP Top 10 Vulnerabilities in Large Language Models (LLMs)

Joan Regidor Sanfeliu CaixaBank Incident Responder & Forensics Analyst Speaker

Andres Cancho Fernández CaixaBankTech Security Architect Speaker

#Artificial Intelligence, #Cybersecurity, #Standards and Regulations

13-05-2025 10:10 13-05-2025 11:25 Europe/Madrid OWASP Top 10 Vulnerabilities in Large Language Models (LLMs) We will be exposing the most critical security risks associated with the use of LLMs within companies, focusing on describing each case and bringing examples of each one. Some of them include model behavior manipulation, data poisoning, prompt injection, security breaches and hallucinations. A special chapter will also focus on AI Agents and the risks involved with them. Our aim will be to clarify what companies are facing, concerning security AI risks, and expose some mitigating clues. Hacking Village 1

10:10h - 11:25h Hacking Village 1

10:10h

Workshop | HACKING VILLAGE

ISMS Forum Workshop

Antonio Fontiveros Abertis Information Security Manager - International; Board Member ISMS Forum Barcelona Speaker

13-05-2025 10:10 13-05-2025 10:55 Europe/Madrid ISMS Forum Workshop Hacking Village 2

10:10h - 10:55h Hacking Village 2

11:00h

HACKING VILLAGE

The Security Strategy Blueprint – SSB

Christian Martorella Ascensis Founder/Principal Speaker

13-05-2025 11:00 13-05-2025 12:30 Europe/Madrid The Security Strategy Blueprint – SSB Transform your security program from a technical function into a strategic business enabler in this 90-minute interactive session for C-level executives. The Security Strategy Blueprint workshop guides you in developing a comprehensive strategy using a practical, architectural approach. Learn to craft a compelling security vision, align with business goals, and build actionable roadmaps tailored to your organization. The session integrates six key inputs—from business objectives to threat analysis—into a unified strategy. Through live polls and exercises, you’ll apply the Challenge-Opportunity-Action method to prioritize efforts and avoid common missteps. Leave equipped to create security strategies that resonate with business leaders and deliver measurable outcomes. Join this exclusive session led by a seasoned expert in aligning security with business value. Hacking Village 2

11:00h - 12:30h Hacking Village 2

11:35h

Workshop | HACKING VILLAGE

No Time to Breach: The CISO’s Role in I(O)T Security

DrBA MSc Jeroen Van Der Vlies checksec.nl Trainer, Writer, A.I. CISO/CISPO & Auditor Speaker

#CISO, #Cybersecurity

13-05-2025 11:35 13-05-2025 12:50 Europe/Madrid No Time to Breach: The CISO’s Role in I(O)T Security As cybersecurity grows critical for I(O)T environments, CISOs play a key role in ensuring I(O)T security aligns with business strategy. Security is no longer just technical—it’s a strategic imperative, with compliance requiring leadership attention. Rising Threats – I(O)T systems face ransomware & nation-state attacks, risking business continuity. Business Impact – Breaches cause financial & operational damage. Boards must prioritize proactive measures with GDPR, NIS2, & CER in mind. Strategic Imperative – I(O)T security ensures resilience & operational continuity, requiring integration into risk management. Collaboration & Culture – Leadership must foster a security-aware culture & embed security into performance metrics. Actionable Steps – Boards should implement risk assessments, zero-trust models, & continuous training. Hacking Village 1

11:35h - 12:50h Hacking Village 1

12:40h

Workshop | HACKING VILLAGE

Livin’ on the Edge

Jose de la Cruz Trend Micro Iberia Technical Director Speaker

#Cybercrime, #Cybersecurity

13-05-2025 12:40 13-05-2025 13:10 Europe/Madrid Livin’ on the Edge The Threat Landscape is more complex than ever: cybercriminals have built a profitable business model around hacking, data theft, and extortion. They perform targeted and sophisticated attacks that are hard to detect and cause economic, reputational, and operational damage to organizations. On top of that, new regulations (e.g., DORA, NIS2) require companies to meet strict security controls. Failing to comply may lead to severe penalties. Trend Vision One helps companies define a global strategy to protect all attack vectors, comply with regulations, and respond to incidents. A single pane of glass and a scalable approach meet any organization’s needs, regardless of size. This year, Trend Micro brings to the Hacking Village the opportunity to explore our platform. We’ll deliver a short presentation, then participants will compete in our Capture the Flag challenge: a journey through Trend Vision One, responding to realistic cybersecurity scenarios. Hacking Village 2

12:40h - 13:10h Hacking Village 2

13:00h

Workshop | HACKING VILLAGE

Cyberwatch: Uncover, Prioritize, and Defend Against Critical Vulnerabilities

Julien Piera Cyberwatch International Presales Manager Speaker

#Cybersecurity, #Protection, #Risk

13-05-2025 13:00 13-05-2025 13:30 Europe/Madrid Cyberwatch: Uncover, Prioritize, and Defend Against Critical Vulnerabilities In today’s digital landscape, companies must combat the relentless influx of CVEs (Common Vulnerabilities and Exposures). With 40,000+ new CVEs annually, staying ahead is harder than ever. Beyond volume, cybersecurity teams face complex IT environments—from networks, web servers, and cloud infrastructures to Docker, Kubernetes, and OT. Add multiple global sites, remote workforces, and hybrid infrastructures, and traditional approaches fall short. Join our workshop to see how Cyberwatch transforms cybersecurity by: Prioritizing Vulnerabilities: Our ""Prioritization 3D"" methodology targets critical threats first. Seamless Integration: Connect Cyberwatch with ticketing, patch management, CI/CD, MDM, and more. Unified Oversight: Get a centralized view of your infrastructure, no matter how diverse. Don’t let vulnerabilities overwhelm you—let Cyberwatch keep you proactive, efficient, and secure. Hacking Village 1

13:00h - 13:30h Hacking Village 1

14:25h

HACKING VILLAGE

Data Protection in Action: Mission Possible with DSE

Jose Bavaresco Forcepoint Channel Sales Engineer Speaker

13-05-2025 14:25 13-05-2025 15:40 Europe/Madrid Data Protection in Action: Mission Possible with DSE This isn’t just another talk. It’s a live, demo-driven session where you’ll witness how Data Security Everywhere (DSE) protects sensitive information across users, endpoints in real time. Whether you’re a CISO shaping strategy or an analyst in the trenches, you’ll leave with actionable insights and a fresh perspective on how data security should actually feel. What you’ll experience: - Real-time demos of DSE in action - How to detect and respond to insider threats & data misuse - The user experience behind intelligent data control - Insights on integrating DSE with your Zero Trust model Register now: https://forms.office.com/r/hmaSRDEc5j Your mission begins here. Experience data protection — live. Hacking Village 2

14:25h - 15:40h Hacking Village 2

14:30h

Workshop | HACKING VILLAGE

Mortal vs Machine: How AI is Transforming Cybersecurity Investigations

David Riff SentinelOne Sr. Solution Engineer Speaker

#Artificial Intelligence, #Cybersecurity

13-05-2025 14:30 13-05-2025 15:45 Europe/Madrid Mortal vs Machine: How AI is Transforming Cybersecurity Investigations In the current context where cyber threats are increasingly sophisticated and frequent, an agile and effective response is required to mitigate risks. Incident investigation is a crucial task that can be significantly improved by using endpoint detection and response (EDR) and artificial intelligence solutions. We will explore how SentinelOne's EDR solution, equipped with PurpleAI, enables rapid identification, analysis, and response to security incidents. We will present the key features of the solution, including the automation of data collection, analysis of suspicious behaviors, and correlation of events in real time. We will demonstrate how AI can reduce research time and increase accuracy in threat detection, allowing security teams to focus on strategy and informed decision-making. With case studies and a lab session, we will illustrate the positive impact that these technologies can have on organizational resilience against cyber attacks. Join us to discover how the combination of EDR and AI is revolutionizing cybersecurity Hacking Village 1

14:30h - 15:45h Hacking Village 1

15:50h

HACKING VILLAGE

Image geolocation: from beginner to intermediate

Mathieu Gaucheler Maltego Senior Subject Matter Expert Speaker

13-05-2025 15:50 13-05-2025 17:05 Europe/Madrid Image geolocation: from beginner to intermediate The ability to know where a picture has been snapped is a classic part of OSINT investigations. With the raise of social media and the popularization of smartphones, it is becoming difficult for something noteworthy to happen without an image being produced and circulated. However, these images can also be wrongfully used or even generated by AI to spread disinformation. Geolocating a picture or a video is an important tool to debunk false claims or authenticate a certain version of an event. But the multitude of investigative possibilities a picture offers can feel daunting for a beginner: should we look for metadata? Pay attention to the mountain in the background? Focus on the length of the shadows and position of the sun? In this workshop, we will present different geolocation techniques: talk about their limits, their requirements and inform the attendees about how difficult they are to use. We will illustrate these methods with specific case studies Hacking Village 2

15:50h - 17:05h Hacking Village 2

15:55h

Workshop | HACKING VILLAGE

Securing Digital Identities: The Power of Hybrid Authentication

Alfonso Egio i2Cat Technical Project Lead Speaker

Ignasi Oliva i2Cat Blockchain Line Manager Speaker

#Cybersecurity, #Protection, #Risk

13-05-2025 15:55 13-05-2025 17:10 Europe/Madrid Securing Digital Identities: The Power of Hybrid Authentication Current authentication systems rely on password management and third-party identity providers, some offering 2FA and biometric authentication. However, vulnerabilities persist, including single points of failure, data breaches, and replay attacks. Public-key cryptography systems are gaining popularity with decentralized ledgers and blockchains for digital identities and assets. They address centralization risks and third-party reliance but require users to manage private keys responsibly. Advancements like Ethereum’s ERC-4337 (Account Abstraction) now enable seamless integration of mainstream and decentralized authentication. These innovations support identity recovery and compatibility with protocols like OpenID Connect. i2CAT will showcase a hybrid authentication system combining traditional email/password authentication with account abstraction, public-key cryptography, and smart wallets, offering enhanced security and flexibility. Hacking Village 1

15:55h - 17:10h Hacking Village 1

Wed 14

10:10h

Roundtable/Panel Discussion | HACKING VILLAGE

Diving the waves – Playing with industrial protocols and visualizing them with Check Point

Santiago Ramón Urbano López de Meneses Thales 21Sec OT Security & Incident Response & Hunting Product Line Manager Speaker

14-05-2025 10:10 14-05-2025 11:25 Europe/Madrid Diving the waves – Playing with industrial protocols and visualizing them with Check Point Industry and critical infrastructure are focused in the availability more than the confidentiality, that is why, to keep the real time, communication between devices in the industry happens in clear and, this way, is easy to see traveling in the wire the different packets of the full communication how they are formed and their contents. This causes that, once the bad guys have gained access to the production environment, they could be able to modify them making the industrial equipment misbehave. In this workshop you will learn: How to analyze traffic How man-in-the-middle works and how it can be implemented How an industrial packet can be modified to cause misbehavior in the machine affected. To follow this workshop you will need a functioning Kali linux machine. After this, we will also see how Checkpoint technologies can help you to visualize, alert and prevent this kind of attacks. Hacking Village 1

10:10h - 11:25h Hacking Village 1

10:10h

Workshop | HACKING VILLAGE

Post Quantum Migration

14-05-2025 10:10 14-05-2025 11:25 Europe/Madrid Post Quantum Migration The road to prepare and to manage to quantum secure cryptographic infrastructures. The workshop gives live presentation with real data and insights into discovery and discussing the results with recomendations. Hacking Village 2

10:10h - 11:25h Hacking Village 2

11:35h

Workshop | HACKING VILLAGE

CrowdStrike Identity Protection Virtual Survivor Games Registration needed

Efrain Gamboa CrowdStrike Sales Engineers Speaker

Andres Gomez CrowdStrike Sales Engineers Speaker

#Cybersecurity, #Protection, #Risk

14-05-2025 11:35 14-05-2025 12:50 Europe/Madrid CrowdStrike Identity Protection Virtual Survivor Games *Registration needed* Identity Protection Survivor Games – an exhilarating, dynamic, hands-on Capture the Flag style competition. This challenge will drop you into real-world attack scenarios where you’ll need to think fast, hunt threats, and outmanoeuvre adversaries to stay in the game. What to expect: • 90 mins of game play tackling real-world identity threats • Analyse, hunt, and respond to attacks like a pro • Compete for awesome prizes and showcase your expertise with industry peers Who Should Attend: Security professionals, threat hunters, and anyone passionate about staying ahead of advanced cyber threats Registration Link: https://go.crowdstrike.com/crowdstrike-identity-protection-survivor-games.html Hacking Village 1

11:35h - 12:50h Hacking Village 1

11:35h

Workshop | HACKING VILLAGE

Hands-on! Train from scratch your first Edge AI model with Edge Impulse

Louis Moreau Edge Impulse Head od Developer Relations Speaker

14-05-2025 11:35 14-05-2025 12:50 Europe/Madrid Hands-on! Train from scratch your first Edge AI model with Edge Impulse Join us for an interactive and hands-on workshop where you'll learn to train your first Edge AI model from scratch using Edge Impulse. This session is designed for both beginners and experienced developers who want to dive into the world of edge computing and AI. You'll gain practical experience in collecting data, training models, and deploying them on edge devices. By the end of the workshop, you'll have a working Edge AI model and the knowledge to apply these techniques to your own projects. No prior experience in machine learning is required—just bring your enthusiasm and a willingness to learn! Hacking Village 2

11:35h - 12:50h Hacking Village 2

14:05h

Workshop | HACKING VILLAGE

From Code to Shield: DevSecOps Gets Smart with AI & LAZARUS

Panagiotis Markovits SOLVUS TECH Senior Researcher Speaker

Adriana Freitas APWG.EU Director of Research Projects Speaker

14-05-2025 14:05 14-05-2025 15:20 Europe/Madrid From Code to Shield: DevSecOps Gets Smart with AI & LAZARUS This session introduces LAZARUS, a 3-year EU-funded project focused on reshaping how we approach software security. LAZARUS delivers an AI-powered DevSecOps platform that brings intelligence into every phase of the Software Development Life Cycle (SDLC)—from coding to deployment—ensuring continuous, automated vulnerability detection and secure code development. Through this 40-minute technical workshop, participants will get a live look into several cutting-edge tools developed by the project, including: Secrets Management Detection AI-based Secret Scanning Static Code Analysis & Linting SQL Injection Detection CVE and Container Vulnerability Scanning Designed to be hands-on, attendees will be able to test selected tools directly via our cloud-based platform and see how AI can empower security automation. We’ll conclude with a short Q&A and offer opportunities to join the LAZARUS Stakeholder Community. Hacking Village 1

14:05h - 15:20h Hacking Village 1

15:30h

Workshop | HACKING VILLAGE

Strengthening Cyber-Physical Resilience in Critical Infrastructures

Gonzalo Nicolás Barreales Tecnalia Research& Innovation Researcher Speaker

Nicolas Ferry Kairos Team Associate professor, University Côte d’Azur Speaker

Hui Song SINTEF Digital Senior Research Scientist Speaker

Valeria Valdés Ríos Montimage Research Engineer Speaker

Gonzalo Martínez Rioja Cintra, Ferrovial CISO Europe and New Markets Speaker

Jason Xabier Mansell Project Manager Tecnalia Research& Innovation Speaker

Víctor Muntés Mulero Beawre Digital SL Co-founder & CEO Speaker

#Cybersecurity, #Protection, #Risk

14-05-2025 15:30 14-05-2025 16:45 Europe/Madrid Strengthening Cyber-Physical Resilience in Critical Infrastructures What if one malicious command didn’t just shut down a tunnel—but triggered a chain reaction, blocking traffic, emergency response, and entire regions? Welcome to the age of cascading cyber-physical failures. As critical infrastructures grow hyper-connected, small breaches can escalate into major crises. This hands-on workshop introduces DYNABIC, an AI-powered cybersecurity framework to anticipate, contain, and respond to these threats. You’ll model, simulate, and disrupt failure chains before they unfold. Interactive exercises include: Proactive risk modeling: Use live digital twins to visualize threats and build bowtie risk diagrams via AI. Reactive threat response: Apply real-time intelligence and automated decision-making to stop attacks before they spiral. Real-world case: Ferrovial highways & tunnels in Portugal Defending tunnel control systems from message injection attacks. Protecting free-flow tolling from ransomware threats. Equip yourself with AI-driven strategies to prevent cascading failures. Are you ready? Hacking Village 1

15:30h - 16:45h Hacking Village 1