Agenda
Explore the HITCON 2026 agenda and browse sessions, speakers, times, and room information.
Time
R2
R0
R1
R3
R4
09:00
10:00
10:40
11:00
11:20
12:00
12:40
13:00
13:20
13:40
14:00
14:40
15:10
15:50
16:00
16:10
16:50
17:10
17:30
17:50
18:00
20:30
Opening
Break
Cyber Range
HITCON Mini Cyber Range
Keynote
English
Vulnerability Disclosure in the Age of AI
James Forshaw
Hacking 101
Mandarin
Look Ma, No Hands! Constructing Autonomous AI Offensive Agents Using MCP and HexStrike-AI
Jie Liau
Lunch
Lunch
Japanese
[UnPwn2Own Berlin 2026 / $70,000] Agent2Shell: Pre-Prompt RCEs in Claude Code, Cursor, and Gemini
Satoki Tsuji
English
Senrigan(千里眼) x Suzaku(朱雀): Open-Source, Community-Driven Threat Hunting for AWS on a Single Laptop
Fukusuke Takahashi, Akira Nishikawa
PQC 專場需額外報名
Breaking Lattices：後量子密碼標準 ML-KEM 與 ML-DSA 的安全參數估算
郭博鈞
Hacking 101
English
Your First Agentic SOC Without the GPU Bill: Local LLM Triage on Apple Silicon
Tommy Wong, Ke Li Yam
Break
Mandarin
Endpoint Audit Agent: Scaling AppSec with AI at Dropbox
Po-Ning Tseng
Mandarin
Pwn2OwNothing: When a KVM Full-Chain Escapes to Emptiness
Bruce Chen, Peterpan0927, Weiming Shi, Jheng Bing Jhong
PQC 專場需額外報名
Multivariate Cryptography and Digital Signatures
Lih-Chung Wang
Tea Time
Mandarin
Before the Breach: Proactive Hunting in the Age of AI-Assisted Attacks
Joey Chen
Mandarin
Vulnerabilities Assembled! The Vulnerability Factory Inside the Windows Kernel
Angelboy
PQC 專場需額外報名
台灣近期的研究和NIST PQC 時代的挑戰
Bo-Yin Yang
Hacking 101
English
Hands-on IoT firmware extraction and forensics workshop
Dennis Giese, Arnold Wey
Break
English
CTFusion: Catching AI Agents That Cheat at CTF and Streaming Live CTFs to Fix It
Dongjun Lee, Ga-eun Bae , Insu Yun
English
Keychained Melody - Grabbing the Keys to the iCloud Kingdom
Jaron Bradley
PQC 專場需額外報名
Panel Discussion
+1陳君朋, Lih-Chung Wang, 郭博鈞, Bo-Yin Yang, 呂佳諺
Break
Mandarin
1% of tokens, All of the Strategy: LLM-Assisted Vulnerability Discovery in IoT/Embedded systems
Ta-Lun Yen
English
Harmonizing AI Agents and Human Analysts in CTI - Are CTI Agents Friends or Rivals to Junior Analyst
Takahiro Kakumaru
Mandarin🎃
Modern Android Kernel Exploitation Through a Mali Driver Vulnerability
Pumpkin Chang
Break
Wrap-up
Hacker Dinner
09:00
Attendee Check-In Time
09:00 - 10:00
10:00
Opening
10:00 - 10:40
10:40
Break
10:40 - 11:20
11:00
11:20
12:00
Lunch
12:00 - 13:00
12:40
Lunch
12:40 - 13:20
13:00
Japanese
[UnPwn2Own Berlin 2026 / $70,000] Agent2Shell: Pre-Prompt RCEs in Claude Code, Cursor, and Gemini
Satoki Tsuji
13:00 - 13:40/R0
English
Senrigan(千里眼) x Suzaku(朱雀): Open-Source, Community-Driven Threat Hunting for AWS on a Single Laptop
Fukusuke Takahashi, Akira Nishikawa
13:00 - 13:40/R1
PQC 專場需額外報名
Breaking Lattices：後量子密碼標準 ML-KEM 與 ML-DSA 的安全參數估算
郭博鈞
13:00 - 13:40/R2
13:20
13:40
Break
13:40 - 14:00
14:00
Mandarin
Endpoint Audit Agent: Scaling AppSec with AI at Dropbox
Po-Ning Tseng
14:00 - 14:40/R0
Mandarin
Pwn2OwNothing: When a KVM Full-Chain Escapes to Emptiness
Bruce Chen, Peterpan0927, Weiming Shi, Jheng Bing Jhong
14:00 - 14:40/R1
PQC 專場需額外報名
Multivariate Cryptography and Digital Signatures
Lih-Chung Wang
14:00 - 14:40/R2
14:40
Tea Time
14:40 - 15:10
15:10
Mandarin
Before the Breach: Proactive Hunting in the Age of AI-Assisted Attacks
Joey Chen
15:10 - 15:50/R0
Mandarin
Vulnerabilities Assembled! The Vulnerability Factory Inside the Windows Kernel
Angelboy
15:10 - 15:50/R1
PQC 專場需額外報名
台灣近期的研究和NIST PQC 時代的挑戰
Bo-Yin Yang
15:10 - 15:50/R2
Hacking 101
English
Hands-on IoT firmware extraction and forensics workshop
Dennis Giese, Arnold Wey
15:10 - 17:30/R3
15:50
Break
15:50 - 16:10
16:00
16:10
English
CTFusion: Catching AI Agents That Cheat at CTF and Streaming Live CTFs to Fix It
Dongjun Lee, Ga-eun Bae , Insu Yun
16:10 - 16:50/R0
English
Keychained Melody - Grabbing the Keys to the iCloud Kingdom
Jaron Bradley
16:10 - 16:50/R1
PQC 專場需額外報名
Panel Discussion
+1陳君朋, Lih-Chung Wang, 郭博鈞, Bo-Yin Yang, 呂佳諺
16:10 - 16:50/R2
16:50
Break
16:50 - 17:10
17:10
Mandarin
1% of tokens, All of the Strategy: LLM-Assisted Vulnerability Discovery in IoT/Embedded systems
Ta-Lun Yen
17:10 - 17:50/R0
English
Harmonizing AI Agents and Human Analysts in CTI - Are CTI Agents Friends or Rivals to Junior Analyst
Takahiro Kakumaru
17:10 - 17:50/R1
Mandarin🎃
Modern Android Kernel Exploitation Through a Mali Driver Vulnerability
Pumpkin Chang
17:10 - 17:50/R2
17:30
Break
17:30 - 17:50
17:50
Wrap-up
17:50 - 18:00
18:00
20:30