The ZeroNights 2026 conference program has been officially released, outlining a comprehensive agenda for cybersecurity professionals interested in advanced offensive techniques, vulnerability research, and secure development practices.
The event is scheduled for September 30, 2026, at 10:00 MSK in Saint Petersburg, Russia, at LOFT#7. It will feature three tracks, four stages, and more than 30 speakers.
Offensive Track – Heap Stage
The first stage of the Offensive Track focuses on modern exploitation techniques, vulnerability discovery, and binary exploitation. Notable talks include:
- «Keys to the Core: What Femtocells 3G/4G Give Us» by Artur Garipov, covering practical security analysis of seven devices from vendors including ip.access, NEC, Sercomm, Sagemcom, Alcatel, and Baicells, including extraction of IKEv2/IPsec keys and TR-069 configuration.
- «Surveillance for Zero Rubles: Exploiting Mobile Operators’ Advertising APIs» by Anton Bochkarev, demonstrating AdINT techniques for de-anonymization and geolocation tracking via public APIs.
- «Java Development Kit Compiled from 16 Million Lines of Open Source Code. The Illusion of Security» by Maxim Safronov, exploring Trusting Trust attacks on the JDK compiler and LLM-assisted attack preparation.
- «Rust In Peace» by Sergey Gordeychik, analyzing how Rust shifts bugs from memory corruption to panic-DoS and deserialization issues, with a custom pipeline applied to parsers and reverse proxies.
- «Slowburn: Breaking System Management Mode via AMD Platform Configuration Blob» by Timofey Duditsky, detailing the APCB mechanism and CVE-2025-54502.
Additional Heap Stage Presentations
Further talks cover Bluetooth stack exploitation in audio devices by Denis Goryushev, jailbreaking custom U-Boot in Dreame robot vacuums by Mikhail Dryagunov, and Qualcomm Snapdragon BootROM vulnerabilities including CVE-2026-25262 in EDL mode and Sahara protocol by Alexander Kozlov and Sergey Anufrienko.
Offensive Track – Stack Stage
The second stage continues with post-exploitation and hardware-focused research. Highlights include:
- «Localhost VPN: SSTP as a Post-Exploitation and Defense Evasion Tool» by Vyacheslav Tsepennikov, presenting Evil-SSTP for traffic redirection on compromised Windows hosts.
- «Correlation Power. Debug? Reversing Hardware with an Oscilloscope and Mathematics» by Alexey Shalpegin, recovering undocumented Scrambler mode in Realtek AES accelerators via side-channel analysis.
- «Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel Using struct device» by Alexander Popov, achieving stable local privilege escalation on Fedora 44 Server for x86_64.
- «LoRa Under Threat: Running Custom Code Inside Semtech Chips» by Egor Koleda, disclosing two hardware CVEs in the Semtech LR11xx family.
Additional Stack Stage talks address cross-chain bridge exploits, COM-based Windows attack techniques, modern Linux rootkits, and bypassing Dexprotector RASP protections on Android applications.
