One day, two tracks, zero attacks.
Technical IT security and governance and regulation, side by side.
Sessions of 45 to 60 minutes from practitioners and policy experts.
No ticket, no paywall. Join the live stream from anywhere.
Every session recorded and available on the IQ Defence website.
09:00 – 18:05 · All times in CET (UTC+1)
Explores how frontier AI models and autonomous agents accelerate reconnaissance, vulnerability analysis, exploit development, phishing, lateral movement and post-compromise operations, and why tools, validation and human oversight remain essential.
Uses anonymized real-world cases to compare root-cause pentesting with deeper post-compromise testing, showing how lateral and vertical movement can reveal additional weaknesses and potential organization-wide or supply-chain compromise.
No slides. Just real attacks, real defense, and AI in the loop. Watch an AI-assisted Red Team compromise a target, then switch sides and defend a box under active attack—showing where AI helps and where humans still need to take control.
Everything in life can be hacked… even SQL Server! A demo-driven session for DBAs, developers and security consultants, covering real-world exploits and practical security recommendations to protect SQL Server.
Discover modern Active Directory attacks that still work with Windows Server 2025 and without NTLM. See practical attack demonstrations, understand how they work, how to detect them, and how to defend your environment effectively.
This session explores how to protect agents with Entra Agent ID and Agent 365.
Session contains:
One leaked CI/CD secret can become a production cloud breach. Trace the attack path from repository to pipeline to cloud, then replace standing credentials with workload identity, least privilege and security controls that stop the chain.
From ILOVEYOU and Code Red to modern machine-speed exploitation, this session examines how AI-driven autonomous patch management can overcome cultural inertia and human bottlenecks to enable continuous enterprise defence.
A practical investigation gives an LLM authentication logs, firewall telemetry and threat indicators to test how AI supports threat hunting, where it makes unsupported assumptions and why analyst skills and evidence still matter.
A practical CRA overview covering timelines, reporting, manufacturer responsibilities, product classification, conformity assessment, secure development, vulnerability handling, updates, documentation and CE marking.
Guidance to the layered CRA standardization approach, from product-independent prEN 4000-1-x standards to product-specific EN 304 6xx standards, including applicability, normative and informative parts, do's, don'ts and gotchas.
Maps OWASP Top 10 vulnerabilities to CRA essential security requirements and shows how secure coding and vulnerability handling can be automated in CI/CD to support compliant, secure-by-design software development.
An interactive NIS2 tabletop exercise where participants guide a fictional energy-sector entity through a cyber incident, voting on management and legal decisions involving reporting, cross-border impact, communications and accountability.
A practical top-down framework for preparing an organization for a cybersecurity audit under the EU regulatory framework, based on the NIS2 Directive and Commission Implementing Regulation (EU) 2024/2690.
Cybersecurity as a management and governance responsibility: identifying critical assets, setting acceptable risk, testing continuity and recovery, overseeing suppliers, crisis communication and turning findings into action.
Europe's cybersecurity skills gap cannot be closed through traditional education alone. CADMUS and IQ DEFENCE provide innovative, ECSF-aligned learning pathways that help students, professionals, career changers, and educators develop in-demand cybersecurity competencies through cyber ranges, tabletop exercises, serious games, self-paced courses, and intensive bootcamps.
Delivered through the LLPA network of training centres and integrated into higher-education programmes such as those offered by Algebra Bernays University, these learning pathways create a bridge between professional upskilling, industry-recognised competencies, and academic qualifications, helping build the next generation of Europe's cyber workforce.
Successful AI adoption depends on strong information governance. Learn how data classification and sensitivity labels help organizations protect sensitive information while enabling secure AI innovation.
The original exploit fails after a patch, but another route still exposes the same data. Use code review and LLM-assisted variant analysis to find the surviving path, fix the root cause and build regression tests that preserve legitimate access.
All times are in Central European Time (CET, UTC+1).
Practitioners, researchers and policy experts from across Europe.
Michael Jesse is the founder of NexTech.Law and a specialist in EU digital regulation, cybersecurity and technology governance. With an LL.M. in Tech Law & Digital Business and over 15 years of consulting experience, he advises organizations on the AI Act, CRA, NIS2, DORA and digital transformation strategies.
Bojan Ždrnja is CTO at INFIGO IS and leads its offensive security and penetration-testing activities. A SANS Principal Instructor and Senior Handler at the SANS Internet Storm Center, he specializes in penetration testing, adversary emulation, malware analysis, incident response and cyber defence. He holds CISSP, multiple GIAC certifications and the GIAC Security Expert credential.
Bruno Banelli has more than 15 years of industry experience in cybersecurity and embedded network products. He is Rapporteur for ETSI EN 304 627, an ETSI Ambassador, active in several ETSI technical committees, a member of CEN-CENELEC JTC 21 WG 2 and committees of the Croatian Standards Institute.
Robert is a Senior Information Security Consultant at Eduron IS and a lecturer at Algebra Bernays, Croatia's leading private university college. He has been a Microsoft Certified Trainer since 2002, an EC-Council Certified Instructor since 2008, and an ISC2 Authorized Instructor since 2014. For over 20 years, he has designed and delivered ethical hacking and security awareness programs for IT professionals.
Aleksander Radovan is a cybersecurity expert and academic with over 20 years of experience in the development of complex IT systems. Specializing in secure coding, he has dedicated his career to building resilient IT systems and bridging the gap between industry practice and academic excellence. Currently, Aleksander Radovan shares his expertise with the next generation of tech leaders as a professor at Algebra Bernays University.
As an active figure in the research community, Aleksander Radovan has authored many research papers and conference talks related to software development, AI, and cybersecurity. His work continues to contribute to modern secure development practices and improve the future of cybersecurity education.
Wayne Burke is Vice President and Co-Founder of Cyber2 Labs, with more than 25 years of experience in cybersecurity. His expertise spans offensive and defensive AI, penetration testing, digital forensics, UAV/drone security, mobile security, and RF/SDR technologies. He has worked with government and military organizations including the FBI, NSA, NATO, and Europol, and has spoken at conferences including Hacker Halted, CyberChess, CornCon, TechEd, HackerFest.
Ayyappan Rajesh is a member of the Cyber2 Labs team, specializing in offensive security, wireless, automotive, and IoT security. He has discovered and published multiple CVEs and presented his research at international cybersecurity events, including DEF CON, Black Hat MEA, and ROOTCON. He is also active in the Car Hacking Village community.
Zlatan Morić is a senior lecturer, Head of the Department of Cyber Security and programme director for cyber security studies at Algebra Bernays University. He holds a PhD and has worked in systems engineering, cybersecurity and data science. He led development of an undergraduate cybersecurity programme and 20 occupational standards within the Croatian Qualifications Framework.
André has more than 23 years of experience in information and multimedia systems development, DBA, project management and IT. Organizer of Data Community, IT Pro Portugal and PowerShell Portugal, and moderator in many other online communities.
Following a successful entrepreneurial and corporate career, works as a business consultant since 2017, serving both domestic and global clients. He provides implementation and maintenance of quality (QMS), information security (ISMS), IT services (SMS) and privacy protection (PIMS) management systems, as well as TISAX. He is engaged in implementation and compliance maintenance for GDPR and NIS2/ZKS, serving as an external CISO and DPO - as well as a mentor for both roles. Additionally, he works as a certified ISO/IEC 27001 (ISMS) auditor and an instructor specializing in privacy protection, information security, and NIS2 compliance, while also providing Leadership consulting services.
Microsoft security specialist and architect of cloud and on-premises solutions. Implements security solutions for organizations of all sizes.
Dr Uroš Svete is a university lecturer and researcher at the University of Ljubljana, teaching cybersecurity, security in the information society, and defence and military technology. Until June 2026, he served as Director of Slovenia’s Government Information Security Office. His work focuses on cybersecurity governance, resilience and executive responsibility.
Sergey Chubarov is a Security and Cloud Expert with over 15 years of extensive experience in Microsoft technologies. His consulting experience spans both the red and blue sides.
Microsoft Security MVP, OSCP, OSEP, MCT, EC Council CPENT & LPT, and many more.
Frequent Speaker at Prestigious Conferences: Black Hat, Hacker Halted, DEF CON and many others.
Prefers live demos and cyberattacks simulations.
Tomislav Dominković is CEO and co-founder of Algebra Bernays University. He has spent more than two decades driving innovation in digital learning, workforce development and strategic educational transformation. His work focuses on connecting education and industry, emerging technologies and stronger digital and cybersecurity skills ecosystems.
Renaldi Gondosubroto is Director of Cloudetica Solutions, an international speaker, author, technical instructor, and Microsoft Certified Trainer (MCT). With over a decade of software development and teaching experience, he has delivered courses on a multitude of topics including generative AI, AWS, Azure, and CompTIA and has spoken at 70+ events worldwide. He is an AWS Subject Matter Expert, holds all 14 AWS certifications, and authored the O’Reilly AI-102 Study Guide.
Goce Argirov is a Solution Architect, Microsoft Cloud Consultant and Microsoft Certified Trainer (MCT) specializing in Microsoft 365, Azure, Security, Copilot, and AI solutions. With extensive experience delivering cloud transformation, governance, and AI adoption projects, Goce helps organizations securely adopt modern workplace technologies while maximizing business value through Microsoft cloud services.
Ratko Stibric is a technology executive and cybersecurity professional with over two decades of experience in information security, cloud computing, IT infrastructure, and strategic IT consulting. As Co-Founder and Tech Lead of ProMDM, he leads the development of enterprise security and mobility solutions while also serving as Principal Consultant at IT.inteligentne tehnologije d.o.o.. His professional background includes six years as Senior Consultant at Microsoft focusing on PKI, IT Management and Security. He holds a CISSP and CISA certification and a BSc in Computing from the University of Zagreb
Cezar-Adonis Cernat is a Bittnet trainer, offensive security consultant and founder of Vulnium Labs. He leads Continuous Security Control Validation at a pharma company and previously worked in security consulting and automation at Secureworks. With over a decade of experience and OSCP and OSWE certifications, he specializes in web, API and Active Directory security, turning practical attack scenarios into clear lessons on identifying vulnerabilities and verifying defenses.
Tino Šokić is a cybersecurity professional, international instructor, speaker and founder of cyberwithtino. With more than 17 years of experience across cybersecurity, IT infrastructure, consulting and education, he delivers threat intelligence and cybersecurity training internationally. His interests include threat intelligence, OSINT, AI in cybersecurity, threat hunting and security risk.
Register for free and we will send you the access link and reminders before the event. All session recordings will be publicly available on the IQ Defence website until 31 December 2028.
Supporting sponsors and participating LLPA members to be announced.
