Of the Field

BSides København 2025

Sides København 2025 was a fully sold out, physical event with live speakers and an afterparty, held at the IT University of Copenhagen. The event gathers cybersecurity professionals and enthusiasts for a day of talks, networking, and knowledge sharing within the industry. Recordings from this and past years are available for attendees and the wider communi…

Visit the official site

20Voices

13Underwriters

0Exhibitors

18On the bill · sessions

20Companies · in total

§I

The Voices

Programmed at BSides, in alphabetical order.

Adrien Lasalle

Offensive Security Advisor

Anton Kalinin

Ben Folland

Security Analyst, Cyber nerd

Blake Hyatt

Senior Security Consultant · Reversec

Dorota Kozlowska

Woman in Red

Emil Hørning

Penetration Tester & Bug bounty hunter

Ford Merrill

CSIS Security Group

Georg Jobst

Red Teamer · NVISO Ares

Jesper Hanno Hansen

Cyber Security Engineer · WeSecureStuff

Jonathan Andersen

Threat intelligence analyst & founder of Webscout.io

Katrine Secher

Compliance Manager, Cyber Security · NACOS Marine

Kevin Ott

Magnus K. Stubman

Red Teamer · Mandiant

Marcel Rick-Cen

Engineering Driven Industrial Cybersecurity

Marvin Ngoma

Principal Security Architect, Security Evangelist · Elastic

Mikael Vingaard

ICSRange

Richard Suls

Senior Security Advisory Consultant, and Expert Witness for US courts.

Sarah Mader

Red Teamer · NVISO ARES

Simon Hartmann Eriksen

Microsoft MVP and Senior Consultant · Globeteam

Truls Dahlsveen

Security Architect, 2x Microsoft Security MVP

§II

Underwritten By

The houses behind the program. Tiers as disclosed.

Campfire Security

CSIS

DanDomainWebsite hosting sponsor

§III

The Programme

Selected from 18 sessions on the bill.

Saturday, November 8, 2025 10:00 am → 50 min
Catch Me If You Can: How Attackers Outsmart EDR tools
Track 3 - Aud 2
Saturday, November 8, 2025 10:00 am → 50 min
Defending Against the Chimaera: Understanding the Design Principles of Threat Actor Tradecraft
Track 1 - Aud 1
Saturday, November 8, 2025 10:00 am → 50 min
Navigating Chaos: A Prison's Struggle with Ransomware and Legacy Systems
Track 2 - Aud 0
Saturday, November 8, 2025 11:05 am → 45 min
GRC isn't a dirty word
Track 3 - Aud 2
Saturday, November 8, 2025 11:05 am → 45 min
Practical threat modeling for any occasion
Track 2 - Aud 0
Saturday, November 8, 2025 11:05 am → 45 min
They said I could be anything, so I became a botnet: Catching an APT while hunting for cybercrime
Track 1 - Aud 1
Saturday, November 8, 2025 12:15 pm → 45 min
Compromising Threat Actor Communications
Track 2 - Aud 0
Saturday, November 8, 2025 12:15 pm → 45 min
Red Team Safari - Close Encounters with Bears, Pandas and Kittens
Track 1 - Aud 1
Saturday, November 8, 2025 12:15 pm → 45 min
We Applied the MS/CIS/STIG Security Baseline - Are We Safe Now? (Spoiler: No, You’re Not)
Track 3 - Aud 2

Intermission

Part the Second · For the Buyer

What does it mean when 20 companies show up — and 2 bet on three roles at once?

“Twenty companies. two are betting more than once.”

The numbers below are derived from the speakers, sponsors, and exhibitors on this page — cross-referenced into one ledger. They are the only thing here that 10times.com cannot tell you.

№ 01Fig. 01 — Composition of the House

2All threespeak · spons · exh

11Sponsoringsponsor only

0Exhibitingexhibitor only

7Companies Speakingspeaker only

The Triple-Threat

Globeteam·ReverseC

№ 02Fig. 02 — The Voices, by Seniority

5% of the speakers carry senior titles — C-suite, Founder, VP, or Director-level.

Founder / Owner15%
Manager / Lead210%
Engineer · IC630%
Advisor / Investor15%
Other roles1050%

Of 20 on the bill · classified by free-text title

№ 03Fig. 03 — The Heaviest in the Room

01GlobeteamSp1V
02ReverseCSp1V
03Campfire SecuritySp
04CSISSp
05DanDomainSp·W
06DubexSp
07IFCRSp
08ITM8Sp
09LogsearchSp
10MnemonicSp
11Nil815Sp
12TruesecSp
13VaronisSp
14NVISO Ares2V

№ 04Fig. 04 — By Tier

website hosting sponsor1

8% of 13

unspecified12

92% of 13

BSides København 2025

Catch Me If You Can: How Attackers Outsmart EDR tools

Defending Against the Chimaera: Understanding the Design Principles of Threat Actor Tradecraft

Navigating Chaos: A Prison's Struggle with Ransomware and Legacy Systems

GRC isn't a dirty word

Practical threat modeling for any occasion

They said I could be anything, so I became a botnet: Catching an APT while hunting for cybercrime

Compromising Threat Actor Communications

Red Team Safari - Close Encounters with Bears, Pandas and Kittens

We Applied the MS/CIS/STIG Security Baseline - Are We Safe Now? (Spoiler: No, You’re Not)

“Twenty companies. two are betting more than once.”