Skip to content

Back to the catalog

defcon.orgother

DEF CON® 34 Hacking Conference - Main Stage Talks

The official DEF CON 34 main-stage talk listing, with full abstracts and speaker bios for dozens of original research presentations spanning bootrom-to-wallet-key exploitation of the dGEN1 Ethereum phone, a privilege-escalation chain in Microsoft's Python-in-Excel Azure container (CVE-2026-45459), a novel x86 SMM hardware attack, black-box TEE key recovery on the TI OMAP-L138 via timing side channels, native-code exploitation of llama.cpp and Ollama, a CDP-based Browser-in-the-Middle AitM phishing toolkit defeating CSP/SRI, CPDLC air-traffic-control message injection via SDR, an iCloud Keychain extraction bug (CVE-2026-28860), Segmentation Fault-Oriented Programming (SFOP) for bypassing Intel CET, weaponized WMI provider post-exploitation, an autonomous AI system (HTTP Terminator) discovering novel HTTP desync attacks, quantum ML for OS fingerprinting, reverse engineering of Windows Defender's BTR.sys driver for EDR bypass, a V8 renderer RCE in Samsung Internet (CVE-2025-10891), an LLM CI build-gate bypass, a Bring-Your-Own-EDR PPL abuse technique, Amazon Locker hardware hacking, and Windows PnP USB auto-install RCE via RDP redirection.

TL;DR DEF CON 34 main-stage abstracts: bootrom-to-wallet-key phone hacks, Azure Python-in-Excel RCE, SMM/CET bypasses, TEE key extraction, llama.cpp/Ollama exploits, CPDLC aviation attacks, iCloud Keychain theft, autonomous AI vuln research, and more.

Organisations named here

  • Bring-Your-Own-EDR
  • BTR.sys
  • CPDLC
  • dGEN1
  • Intel CET
  • MS-WMIO
  • OMAP-L138
  • Segmentation Fault-Oriented Programming

CVEs named here

  • CVE-2026-45459
  • CVE-2026-28860
  • CVE-2025-10891

Technologies named here

  • llama.cpp
  • Ollama
  • Windows Defender
  • Chrome
  • Azure
  • WMI

Threat actors named here

  • GTG-1002