27.12. - 30.12. bo v Hamburgu potekala hackerska konferenca #40c3 (events.ccc.de/en/category/40…). DragonSec SI ponovno organizira slovensko delegacijo. Za namene distribucije voucherjev prosimo, da izpolnite sledeči form: cloud.dragonsec.si/apps/form…

And that's a wrap for the European Cybersecurity Challenge 2026 in Bochum! A huge congratulations to the young talents who represented Slovenia, we are incredibly proud of everything you have accomplished during this week 💚 #ECSC2026 #cybersecurity #Slovenia #DragonSecSI

🇸🇮 Slovenian Team at the European Cybersecurity Challenge in Germany. Yesterday marked the start of the competition with the Jeopardy CTF round, running for 12 hours, with more than 30 challenges across six categories. We're wishing the Team best of luck at A/D on Thursday!

Utrinki iz FriCTF: Predavanj iz kibernetske varnosti. Hvala vsem, ki ste z nami preživeli popoldne! #DragonSecSI #cybersecurity

Te zanima kibernetska varnost, pa ne veš, kje začeti? V sredo, 7. 10. ob 17:00 na UL FRI organiziramo predavanja iz kibernetske varnosti FriCTF. Predavali bomo o izzivih, kot so: 🌐 napadi na spletne tehnologije 🔑 kriptografija 🔍 obratno inženirstvo 💻 binarna eksploitacija

𝐖𝐞 𝐚𝐫𝐞 𝐞𝐱𝐜𝐢𝐭𝐞𝐝 𝐭𝐨 𝐨𝐟𝐟𝐢𝐜𝐢𝐚𝐥𝐥𝐲 𝐤𝐢𝐜𝐤 𝐨𝐟𝐟 𝐨𝐮𝐫 5𝐭𝐡 #DCTF26 𝐜𝐨𝐧𝐟𝐞𝐫𝐞𝐧𝐜𝐞! What started as a small idea back in 2022 has grown year by year into something we are truly proud of. From just 72 attendees in our first year, we are now welcoming over 350 participants across two days. Here's to another great conference! #DragonSecSI #CyberSecurity #conference #DCTF26

It's almost time for #DCTF26! We have prepared some exciting #ctf challenges for you this year, so be sure not to miss out. We still have some tickets left at events.dragonsec.si/dctf26/

Meet our #DCTF26 speakers Peter Pavkovic, Peter Hutinski, and Matic Šebjan Ogrizek. They will be presenting "𝐂𝐚𝐩𝐭𝐮𝐫𝐞 𝐭𝐡𝐞 𝐅𝐥𝐚𝐠 𝐢𝐧 𝐒𝐎𝐂." What does cybersecurity look like in practice? Through the Capture the Flag approach, the lecture will show how threat detection, incident analysis, and finding the right answers under time pressure take place in a SOC environment. Participants will learn why these types of challenges are important for developing practical skills, analytical thinking, and effective teamwork. Free registration: events.dragonsec.si/dctf26/

Meet our #DCTF26 speaker 𝐀𝐧𝐝𝐫𝐚ž 𝐑𝐨𝐭𝐚𝐫! He will be presenting "𝐇𝐨𝐰 𝐜𝐚𝐧 𝐨𝐧𝐞 𝐝𝐨 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐢𝐧 𝐚 𝐟𝐮𝐥𝐥𝐲 𝐦𝐨𝐝𝐮𝐥𝐚𝐫 𝐤𝐞𝐫𝐧𝐞𝐥?" The talk will explore challenges of securing operating systems in a completely modular environment. Andraž has been developing a custom kernel where nearly all components are a loadable module, allowing parts of the kernel to be swapped out at will. This design presents some unique security challenges that wouldn’t exist in traditional OS kernels. In his session, he’ll examine classic kernel security techniques, why they don’t always apply in a modular kernel, and how he tackles these new risks in his custom kernel. Free registration: events.dragonsec.si/dctf26/

Meet our #DCTF26 speaker 𝐇𝐚𝐧𝐧𝐞𝐬 𝐖𝐞𝐢𝐬𝐬𝐭𝐞𝐢𝐧𝐞𝐫! He will present "𝐖𝐡𝐞𝐧 𝐂𝐨𝐫𝐫𝐞𝐜𝐭 𝐂𝐨𝐝𝐞 𝐥𝐞𝐚𝐤𝐬 𝐒𝐞𝐜𝐫𝐞𝐭𝐬: 𝐒𝐢𝐝𝐞 𝐂𝐡𝐚𝐧𝐧𝐞𝐥𝐬 𝐄𝐱𝐩𝐥𝐚𝐢𝐧𝐞𝐝." Even with flawless code and security-aware users, modern systems can still leak secrets. Side-channel attacks exploit indirect signals such as execution time, memory access patterns, or power usage to infer sensitive data. This talk explores real examples across CPU architecture, the Linux kernel, and common applications—showing why performance optimizations often make these leaks hard to eliminate. Free registration: events.dragonsec.si/dctf26/

Meet our #DCTF26 speaker 𝐋𝐞𝐧𝐚 𝐇𝐞𝐢𝐦𝐛𝐞𝐫𝐠𝐞𝐫! She will be presenting "𝐀𝐧𝐨𝐧𝐲𝐦𝐨𝐮𝐬 𝐂𝐫𝐞𝐝𝐞𝐧𝐭𝐢𝐚𝐥𝐬 𝐟𝐨𝐫 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐨𝐧 𝐑𝐚𝐭𝐞 𝐋𝐢𝐦𝐢𝐭𝐢𝐧𝐠: 𝐅𝐫𝐨𝐦 𝐋𝐢𝐧𝐞𝐚𝐫 𝐭𝐨 𝐂𝐨𝐧𝐬𝐭𝐚𝐧𝐭-𝐒𝐢𝐳𝐞 𝐈𝐬𝐬𝐮𝐚𝐧𝐜𝐞." Anonymous credentials are an important building block for privacy-preserving systems, from EU digital wallets to modern authentication schemes. They are also being explored as a way to enable efficient rate limiting after CAPTCHA verification. The talk presents two proposals to reduce the token issuance to constant-size communication regardless of batch size, and shows how to combine them to get parallel, revocable tokens. Free registration: events.dragonsec.si/dctf26/

Meet our #DCTF26 speaker 𝐀𝐧𝐝𝐫𝐚ž 𝐒𝐭𝐫𝐠𝐚𝐫! He will be presenting "𝐔𝐧𝐟𝐚𝐢𝐭𝐡𝐟𝐮𝐥 𝐂𝐥𝐚𝐢𝐦𝐬: 𝐁𝐫𝐞𝐚𝐤𝐢𝐧𝐠 6 𝐳𝐤𝐕𝐌𝐬." A Zero Knowledge Virtual Machine verifier should be faithful to one thing above all else: its public claims. That is, the proof of a statement should depend on the statement itself. As it turns out, this is not always the case, which can lead to disastrous consequences. In this talk, we will take a journey through six systems where we discovered critical vulnerabilities caused by such issues. We will learn how a subtle ordering bug or a tiny omission can let an attacker bypass the cryptography entirely and prove mathematically impossible statements. Free registration: events.dragonsec.si/dctf26/

Meet our #DCTF26 speaker Rick de Jager (@rdjgr )! He will present "𝐙𝐞𝐫𝐨 𝐭𝐨 𝐑𝐂𝐄 𝐢𝐧 𝐚 𝐖𝐞𝐞𝐤𝐞𝐧𝐝: 𝐅𝐮𝐳𝐳𝐢𝐧𝐠 𝐎𝐥𝐝 𝐆𝐚𝐦𝐞𝐬 𝐟𝐨𝐫 𝐌𝐞𝐦𝐨𝐫𝐲 𝐂𝐨𝐫𝐫𝐮𝐩𝐭𝐢𝐨𝐧." Mid-2000s videogames are a great target for finding RCE exploits. In this talk we'll pick a classic 2000's game, go over the process of fuzzing the game's server with a very fancy snapshot fuzzer, and fuzzing the client with the dumbest possible bit-flipper I could write in an hour. Both of these approaches lead to bugs that we'll exploit for remote code execution. Free registration: events.dragonsec.si/dctf26/

𝐍𝐚𝐯𝐝𝐮š𝐞𝐧𝐢 𝐬𝐦𝐨, 𝐝𝐚 𝐬𝐦𝐨 𝐩𝐫𝐞𝐬𝐞𝐠𝐥𝐢 300 𝐩𝐫𝐢𝐣𝐚𝐯𝐥𝐣𝐞𝐧𝐢𝐡! Na voljo je še nekaj kart – svojo si lahko zagotovite na povezavi: events.dragonsec.si/dctf26/ Hvala vsem, ki ste se že prijavili. Veselimo se, da se vidimo prihodnji vikend 😀 Vaša ekipa DragonSec SI #DCTF26 #CyberSecurity #conference #DragonSecSI #FRI #CTF

Meet our #DCTF26 speaker 𝐌𝐚𝐫𝐤𝐨 𝐉𝐚𝐧𝐤𝐨𝐯𝐞𝐜! He will be presenting "𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 𝐨𝐟 𝐄𝐥𝐞𝐜𝐭𝐫𝐨𝐧𝐢𝐜 𝐏𝐫𝐨𝐝𝐮𝐜𝐭𝐬 𝐢𝐧 𝐭𝐡𝐞 𝐄𝐔: 𝐅𝐫𝐨𝐦 𝐄𝐥𝐞𝐜𝐭𝐫𝐢𝐜𝐚𝐥 𝐒𝐚𝐟𝐞𝐭𝐲 𝐚𝐧𝐝 𝐄𝐌𝐂 𝐭𝐨 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐮𝐧𝐝𝐞𝐫 𝐑𝐄𝐃." This session explores key EU directives for electronic equipment — LVD, EMC, and RED — and their role in achieving CE marking. It also covers new cybersecurity requirements under RED (EU 2022/30) and how security, network protection, and data safeguards now impact the design, risk assessment, and lifecycle of connected devices. Free registration: events.dragonsec.si/dctf26/