DEF CON® 34 Hacking Conference - Main Stage Talks
The official DEF CON 34 main-stage talk listing, with full abstracts and speaker bios for dozens of original research presentations spanning bootrom-to-wallet-key exploitation of the dGEN1 Ethereum phone, a privilege-escalation chain in Microsoft's Python-in-Excel Azure container (CVE-2026-45459), a novel x86 SMM hardware attack, black-box TEE key recovery on the TI OMAP-L138 via timing side channels, native-code exploitation of llama.cpp and Ollama, a CDP-based Browser-in-the-Middle AitM phishing toolkit defeating CSP/SRI, CPDLC air-traffic-control message injection via SDR, an iCloud Keychain extraction bug (CVE-2026-28860), Segmentation Fault-Oriented Programming (SFOP) for bypassing Intel CET, weaponized WMI provider post-exploitation, an autonomous AI system (HTTP Terminator) discovering novel HTTP desync attacks, quantum ML for OS fingerprinting, reverse engineering of Windows Defender's BTR.sys driver for EDR bypass, a V8 renderer RCE in Samsung Internet (CVE-2025-10891), an LLM CI build-gate bypass, a Bring-Your-Own-EDR PPL abuse technique, Amazon Locker hardware hacking, and Windows PnP USB auto-install RCE via RDP redirection.
Organisations named here
- Bring-Your-Own-EDR
- BTR.sys
- CPDLC
- dGEN1
- Intel CET
- MS-WMIO
- OMAP-L138
- Segmentation Fault-Oriented Programming
CVEs named here
- CVE-2026-45459
- CVE-2026-28860
- CVE-2025-10891
Technologies named here
- llama.cpp
- Ollama
- Windows Defender
- Chrome
- Azure
- WMI
Threat actors named here
- GTG-1002
Related in Offensive Security