Agenda
Explore the HITCON 2026 agenda and browse sessions, speakers, times, and room information.
Time
R2
R0
R1
R3
R4
09:00
10:00
11:10
11:20
11:30
12:00
12:40
13:00
13:20
13:40
14:00
14:40
15:10
15:50
16:00
16:10
16:30
16:50
17:10
17:50
18:00
20:30
Attendee Check-In Time
Opening
Break
Keynote
English
Vulnerability Disclosure in the Age of AI
James Forshaw
Hacking 101
Mandarin
Look Ma, No Hands! Constructing Autonomous AI Offensive Agents Using MCP and HexStrike-AI
Jie Liau
Cyber Range
HITCON Mini Cyber Range
Lunch
Lunch
Japanese
[UnPwn2Own Berlin 2026 / $70,000] Agent2Shell: Pre-Prompt RCEs in Claude Code, Cursor, and Gemini
Satoki Tsuji
English
Senrigan(千里眼) x Suzaku(朱雀): Open-Source, Community-Driven Threat Hunting for AWS on a Single Laptop
Fukusuke Takahashi, Akira Nishikawa
PQC 專場需額外報名
Breaking Lattices：後量子密碼標準 ML-KEM 與 ML-DSA 的安全參數估算
郭博鈞
Hacking 101
English
Your First Agentic SOC Without the GPU Bill: Local LLM Triage on Apple Silicon
Tommy Wong, Ke Li Yam
Break
Mandarin
Endpoint Audit Agent: Scaling AppSec with AI at Dropbox
Po-Ning Tseng
Mandarin
Pwn2OwNothing: When a KVM Full-Chain Escapes to Emptiness
Bruce Chen, Peterpan0927, Weiming Shi, Jheng Bing Jhong
PQC 專場需額外報名
Multivariate Cryptography and Digital Signatures
Lih-Chung Wang
Tea Time
Mandarin
Before the Breach: Proactive Hunting in the Age of AI-Assisted Attacks
Joey Chen
Mandarin
Vulnerabilities Assembled! The Vulnerability Factory Inside the Windows Kernel
Angelboy
PQC 專場需額外報名
台灣近期的研究和NIST PQC 時代的挑戰
Bo-Yin Yang
Hacking 101
English
Hands-on IoT firmware extraction and forensics workshop
Dennis Giese, Arnold Wey
Break
English
CTFusion: Catching AI Agents That Cheat at CTF and Streaming Live CTFs to Fix It
Dongjun Lee, Ga-eun Bae , Insu Yun
English
Keychained Melody
Jaron Bradley
PQC 專場需額外報名
Panel Discussion
+1陳君明, Lih-Chung Wang, 郭博鈞, Bo-Yin Yang, 呂佳諺
Break
Break
Mandarin
1% of tokens, All of the Strategy: LLM-Assisted Vulnerability Discovery in IoT/Embedded systems
Ta-Lun Yen
English
Harmonizing AI Agents and Human Analysts in CTI - Are CTI Agents Friends or Rivals to Junior Analyst
Takahiro Kakumaru
Mandarin🎃
Modern Android Kernel Exploitation Through a Mali Driver Vulnerability
Pumpkin Chang
Wrap-up
Hacker Dinner
09:00
Close
09:00 - 11:20/R3
Attendee Check-In Time
09:00 - 10:00/R0
10:00
Opening
10:00 - 11:10/R0
11:10
Break
11:10 - 11:20/R0
11:20
11:30
12:00
Lunch
12:00 - 13:00/R0
12:40
Lunch
12:40 - 13:20/R3
13:00
Japanese
[UnPwn2Own Berlin 2026 / $70,000] Agent2Shell: Pre-Prompt RCEs in Claude Code, Cursor, and Gemini
Satoki Tsuji
13:00 - 13:40/R0
English
Senrigan(千里眼) x Suzaku(朱雀): Open-Source, Community-Driven Threat Hunting for AWS on a Single Laptop
Fukusuke Takahashi, Akira Nishikawa
13:00 - 13:40/R1
PQC 專場需額外報名
Breaking Lattices：後量子密碼標準 ML-KEM 與 ML-DSA 的安全參數估算
郭博鈞
13:00 - 13:40/R2
13:20
13:40
Break
13:40 - 14:00/R0
14:00
Mandarin
Endpoint Audit Agent: Scaling AppSec with AI at Dropbox
Po-Ning Tseng
14:00 - 14:40/R0
Mandarin
Pwn2OwNothing: When a KVM Full-Chain Escapes to Emptiness
Bruce Chen, Peterpan0927, Weiming Shi, Jheng Bing Jhong
14:00 - 14:40/R1
PQC 專場需額外報名
Multivariate Cryptography and Digital Signatures
Lih-Chung Wang
14:00 - 14:40/R2
14:40
Tea Time
14:40 - 15:10/R0
15:10
Mandarin
Before the Breach: Proactive Hunting in the Age of AI-Assisted Attacks
Joey Chen
15:10 - 15:50/R0
Mandarin
Vulnerabilities Assembled! The Vulnerability Factory Inside the Windows Kernel
Angelboy
15:10 - 15:50/R1
PQC 專場需額外報名
台灣近期的研究和NIST PQC 時代的挑戰
Bo-Yin Yang
15:10 - 15:50/R2
Hacking 101
English
Hands-on IoT firmware extraction and forensics workshop
Dennis Giese, Arnold Wey
15:10 - 16:30/R3
15:50
Break
15:50 - 16:10/R0
16:00
16:10
16:30
Break
16:30 - 17:50/R3
16:50
Break
16:50 - 17:10/R0
17:10
Mandarin
1% of tokens, All of the Strategy: LLM-Assisted Vulnerability Discovery in IoT/Embedded systems
Ta-Lun Yen
17:10 - 17:50/R0
English
Harmonizing AI Agents and Human Analysts in CTI - Are CTI Agents Friends or Rivals to Junior Analyst
Takahiro Kakumaru
17:10 - 17:50/R1
Mandarin🎃
Modern Android Kernel Exploitation Through a Mali Driver Vulnerability
Pumpkin Chang
17:10 - 17:50/R2
17:50
Wrap-up
17:50 - 18:00/R0
18:00
20:30