NULLCON

🔥 Firmware flaws happen more often than you think… which one have you actually encountered in the wild? Vote below and tell us what real-world issues you’ve seen while working on embedded or IoT projects. 👇 Join our upcoming training: Building Secure Firmware: Best Practices and Labs (Mar 02–04, 2026) at #NullconGoa2026- a hands-on deep dive into securing bootloaders, update mechanisms, device hardening, vulnerability discovery, and more, led by Riddhi S. Learn More: https://lnkd.in/deGcuRrR 🛡️ Whether you’ve battled hardcoded secrets, runaway bootloaders, or downgrade nightmares, your experience matters. Cast your vote! #FirmwareSecurity #EmbeddedSecurity #IoTSecurity #SecureDevelopment

We’re excited to welcome ProTechmanize as an Exhibit Sponsor for #NullconGoa2026! ⚡🔐 ProTechmanize provide tailored cybersecurity solutions to their partners, offering consulting, implementation, and support, ensuring that the businesses stay protected and compliant.          Here’s to advancing the community with smarter defense strategies and real-world security excellence. Catch them at the exhibition floor! Know More: https://lnkd.in/dwxmMKgP #ExhibitSponsor #Cybersecurity #HackingCommunity #conference

When privilege controls crack, the path to escalation widens. 🔓⚙️ At #NullconBerlin2025, Rotem Salinas and Philip Tsukerman dug deep into Microsoft Endpoint Privilege Management (EPM), revealing how design flaws and patched-then-revived vulnerabilities can let attackers turn “allowed tasks” into full admin-level code execution. From reverse-engineering internals to resurrecting bugs through patch diffing, this session walks through how small gaps in policy enforcement can become high-impact LPE pathways. Watch Now: https://lnkd.in/ddz473BY #EPM #WindowsSecurity #LPE #PrivilegeEscalation #ReverseEngineering

When the kernel becomes the battleground, integrity becomes the first line of defense. 🛡️ At #NullconBerlin2025, Alexander Peslyak unpacked how Linux Kernel Runtime Guard (LKRG) 1.0 brings real-time integrity checking and exploit detection to the Linux kernel, even across wildly different versions and edge-case environments. From rooting out kernel-level attacks to navigating the trade-offs of maintaining a powerful out-of-tree security module, this talk dives into the evolution, challenges, and future of LKRG. Watch Now: https://lnkd.in/d3UXiXNK #LKRG #LinuxSecurity #KernelSecurity #ExploitDefense

From trust anchors to OTA integrity, every layer plays a role in keeping embedded devices secure. Vote below and see how others in the community are navigating these challenges. 👇 Join Riddhi S. for the upcoming training: Building Secure Firmware: Best Practices and Labs (Mar 02–04, 2026) at #NullconGoa2026, where she breaks down these concepts through hands-on labs and real-world scenarios. Know More: https://lnkd.in/deGcuRrR 🛠️ Cast your vote and find out where the community struggles the most! #FirmwareSecurity #EmbeddedSecurity #IoTSecurity #SecureDevelopment

We’re excited to welcome Recorded Future as an Associate Sponsor for #NullconGoa2026! ⚡🛡️ With world-class threat intelligence powered by AI and deep web data, Recorded Future helps security teams stay ahead of attackers, before threats ever hit their radar. Here’s to strengthening the community with cutting-edge intelligence and future-ready security. Meet them at the conference! Know More: https://lnkd.in/dwxmMKgP #AssociateSponsor #Cybersecurity #HackingCommunity #Infosec #conference

At #NullconGoa2026, we don’t just talk security, we live it. ⚡ A place where hackers break limits, builders reimagine tech, and curiosity fuels everything in between. Whether you’re here to hack, learn, build, or just vibe with the community, Goa is where the real infosec energy hits differently. Hack. Break. Build. Repeat. See you this March! Know More: https://lnkd.in/gxtyJYpV #Cybersecurity #Hackers #Conference #Infosec

Firmware is the foundation. When it breaks, everything above it does too. 🔧 At #NullconGoa2026, join Riddhi S. for a deep-dive training designed to make you confident in building and defending secure firmware from the ground up. Learn how to spot and mitigate real-world firmware risks, apply proven secure coding practices, implement reliable update mechanisms, harden devices, and respond effectively when things go wrong. Know More: https://lnkd.in/deGcuRrR #FirmwareSecurity #EmbeddedSecurity #IoTSecurity #SecureDevelopment

When the attack surface hardens, the tooling gets smarter. 🔍⚙️ At #NullconBerlin2025, Pascal Beyer broke down how deterministic snapshot fuzzing is reshaping vulnerability discovery - especially in complex targets like the Microsoft RDP Client. From uncovering kernel bugs to tracking heap leaks and dissecting RCEs with absolute repeatability, this talk dives deep into the power of emulation-driven research. Watch Now: https://lnkd.in/dXvAqgSC #Fuzzing #SnapshotFuzzing #RDP #Emulation