Cybersecurity

Security BSides Kraków 2026

Security BSides Kraków 2026 is an open platform event gathering security experts and industry professionals to share insights, network, and contribute to the cybersecurity community. The conference features expert-led sessions, workshops, and keynotes covering the latest trends, techniques, and strategies in cyber security. BSides provides rare opportunities…

Visit the official siteRegister
48Speakers
12Sponsors
185Sessions
35Companies · in total

Speakers

Programmed at Security, in alphabetical order.

Adrian DSouza
GRC Consultant and Tribe Lead · Devoteam NV/S
Agata Mizera
Senior Governance, Risk and Controls Analyst · Dun & Bradstreet
Alina Malinowska
Product Owner, Data Dictionary, Global Data Management · HEINEKEN
Andoni Alonso
Cloud Security Engineer
András Klein
Ethical Hacker
Andrew Schwartz
Principal Detection Engineer · Huntress
Arad Donenfeld
Attacks and Exploits Developer · SafeBreach
Arnav Singh
Cloud Security Engineer
Arnav Tripathy
Cloud Security Engineer
Audience speakers
Bartosz Złotnik
Cybersecurity Engineer
Blessen Thomas
Independent Security Researcher
Cássio Pereira
BSides Kraków Founder; Application Security Expert · Nova8
Daniel Medina
Global Information Security Lead – Supply Chain · HEINEKEN
David Papp
CEO & Founder of Gen0Sec; Co-Founder of OpenShield · Gen0Sec
Derek Banks
Dorota Trzebieniak
Global Sourcing Manager · Rockwell Automation
Ewa Rotaru
Cybersecurity Specialist · HEINEKEN
Jyrki Huhta
ICEYE Security Engineering · ICEYE
Jyrki Huhta aka jyrki
ICEYE Security Engineering · ICEYE
Kashif Amanat
Offensive Security Engineer & Community Speaker
Kim Dvash
Offensive Security Team Leader, Israel Aerospace Industries · Israel Aerospace Industries

Sponsors

The companies behind the program. Tiers as disclosed.

BlazeNotable Sponsor
CheckmarxLeading Sponsor
CyCodeSupporter Sponsor
DevSecCon PolandSupporter Sponsor
ICWTSupporting Sponsor
InfoSecMapCommunity Partner
Nova8 CybersecurityLeading Sponsor
OWASP PolandCollaborator
Practical DevSecOpsCommunity Partner
SessionizeCollaborator
UnimusSupporting Sponsor
Zero Day AGHCollaborator

Agenda

Selected from 185 sessions.

  • 09h - 09h45

    Beyond SHA Pinning: Security for CI/CD Pipelines

    Recent months have seen several supply chain attacks, such as the tj-actions, teamPCP and hackerbot-claw. Is your CI/CD pipeline prepared to defend against them? Pipelines have pri…

  • 09h - 09h45

    Ghost in the Hiring Machine: How to Spot Fake Personas Before They're on Your Payroll

    People are getting hired and trusted every day. Some of them do not exist at all, yet they still pass interviews, collect paychecks, and gain access to sensitive systems. Campaigns…

  • 10h - 10h45

    From Thermostats to Seismic Monitors: Real-World Zero-Days in Critical Devices

    Critical devices that underpin our daily lives - from smart thermostats and routers to seismic monitors, fuel systems, and CCTVs - are far more exposed than most realize. In this s…

  • 10h - 10h45

    How To Create a Self-Evolving Autonomous Offensive Security Agent

    I have created a tool for autonomous testing. Molly is a hallucination-resistant, autonomous offensive security agent built in Python and Rust. It strictly separates LLM-driven hyp…

  • 10h - 10h45

    Zero Trust, Zero Hype: Implementing Strong Security Posture in AWS

    Zero Trust is more than a buzzword, it’s a practical approach to minimizing the blast radius of compromises and ensuring secure operations in dynamic cloud environments. But how do…

  • 11h - 11h45

    Don’t Trip the Breaker: A Practitioner's Guide to Safe Power Grid Pentesting

    Pentesting critical infrastructure like a power grid is a high-stakes game where "move fast and break things" is a recipe for disaster. This session provides a transparent look on …

  • 11h - 11h45

    Even more alert(1)

    Cross-site scripting is often treated as a solved problem. Output is escaped, frameworks are opinionated, and many assume that without obvious use of innerHTML or eval, XSS is no l…

  • 11h - 11h45

    The Agents of Chaos: AI Driven Malware Generation

    As AI agents catch wind across offensive security, from social engineering to vulnerability research, it was only a matter of time before malware followed. While much of the conver…

  • 13h - 13h45

    Building a digital beehive: The cluster that wasn't real, but the attacks were

    Kubernetes is everywhere now - and so are attacks against it. Misconfigurations, exposed APIs, and overly permissive RBAC have made clusters a prime target, while most security too…

Company intelligence

An audience of 35 companies, parsed from the program.

35 companies in attendance.

The numbers below are derived from the speakers, sponsors, and exhibitors on this page, cross-referenced into one ledger. They are the only thing here that 10times.com cannot tell you.

Who's in the room
0All threespeak · spons · exh
12Sponsoringsponsor only
23Speakingspeaker only
Speakers by seniority

10% of the speakers carry senior titles: C-suite, Founder, VP, or Director-level.

  • C-suite24%
  • Founder / Owner36%
  • Manager / Lead919%
  • Engineer · IC1940%
  • Research / Science715%
  • Other roles817%

Of 48 speakers · classified by free-text title

Most-represented companies
#CompanyRolesSpeakers
1Heineken5
2BlazeSponsor · Notable Sponsor-
3CheckmarxSponsor · Leading Sponsor-
4CycodeSponsor · Supporter Sponsor-
5DevSecCon PolandSponsor · Supporter Sponsor-
6ICWTSponsor · Supporting Sponsor-
7InfoSecMapSponsor · Community Partner-
8Nova8 CybersecuritySponsor · Leading Sponsor-
9OWASP PolandSponsor · Collaborator-
10Practical DevSecOpsSponsor · Community Partner-
11SessionizeSponsor · Collaborator-
12UnimusSponsor · Supporting Sponsor-
13Zero Day AGHSponsor · Collaborator-
14Hakai Security2
Sponsors by tier
collaborator3
25% of 12
community partner2
17% of 12
leading sponsor2
17% of 12
notable sponsor1
8% of 12
supporter sponsor2
17% of 12
supporting sponsor2
17% of 12
Related events · by shared sponsors
ConferenceDateCityShared sponsors
BSides Amsterdam 2026November 19, 2026Amsterdam2
JCON EUROPE 2027April 26, 2027Cologne2