10th (Conference) & 11th (Workshops) September 2026
Principal Security Engineer, Gitlab
"Keynote"
Jörn Schneeweisz is a Principal Security Engineer at GitLab who managed to turn a decade of breaking other people's broken Ruby on Rails code into a legitimate corporate career, because apparently, getting paid to tell companies how bad their security is qualifies as a real job.
LinkedIn
Managing Director, bi-sec GmbH
"Pentesting in the age of AI - where are we?"
With over a decade of experience in the field, Christian Biehler is a seasoned IT security expert who combines the perspectives of a hacker, penetration tester, consultant, and trainer. His technical focus lies in securing Windows infrastructures and the Microsoft Cloud stack, including Entra ID, Azure, and M365. Christian holds a Master's degree in IT Security and the CISSP certification. He has successfully delivered over 300 projects across diverse sectors, establishing deep expertise in security architecture, risk management, and penetration testing for web, mobile, and operating systems. Since 2019, Christian has been the Managing Director of bi-sec GmbH, leading a firm dedicated to expert consulting, rigorous penetration testing, and specialized security training.
LinkedIn
Founder, Hexastrike Cybersecurity
"What Windows 11 Remembers (And Most Investigators Miss)"
With over 10 years of experience in cybersecurity, Maurice Fielenbach started on the offensive side before moving into defensive security. He has worked hundreds of cyber investigations, including major ransomware and APT cases across industries affecting millions of people. Among them was one of the largest ransomware incidents in German history, targeting a communal IT service provider and disrupting public infrastructure at scale. Today he focuses primarily on threat intelligence and malware analysis. He is the founder of Hexastrike Cybersecurity, where he trains blue teams in digital forensics, malware analysis, and threat hunting through hands-on, scenario-driven sessions built from real incidents. His research is regularly featured in leading cybersecurity publications and cited by industry peers. He speaks at security conferences and contributes open-source tooling and detection content used by security teams worldwide.
IT Security Researcher & Penetration Tester
"Hacking Consumer Drones: From Flash Dumping to Root Exploits"
Tim Schmidt is an IT security researcher and penetration tester with over a decade of experience in competitive Capture The Flag (CTF) environments. While his core expertise lies in web and application penetration testing, his technical background also spans IoT and embedded reverse engineering and smart contract audits. An avid builder, Tim frequently develops software projects and custom IoT appliances from scratch in his free time. As an educator, he has delivered specialized trainings on modern authentication technologies and cryptographic attacks for corporate clients in Germany and at international security conferences, such as HITB Amsterdam.
Security Researcher, Neodyme
"Keyless Entry: Hacking SwitchBot Smartlocks"
Kolja is a Security Researcher and Trainer at Neodyme. He specializes in Windows and Active Directory security. He has found vulnerabilities in widely used security products and has extensive exploit development, pentesting, and red teaming experience.
Head of Investigations, InfoGuard
"Deconstructing Modern macOS Initial Access Vectors"
Stephan Berger is the Head of Investigations for an Incident Response team at InfoGuard, a Swiss-based cybersecurity firm. With over a decade of experience investigating complex network compromises, he specializes in the technical intersection of offensive tradecraft and defensive forensics. Stephan is the author of the DFIR.ch technical blog and is a regular speaker at international security conferences, including FIRST, Troopers, and hack.lu. He holds a Bachelor's degree in Computer Science and a Master's degree in Engineering and is the founder of Malmium, a specialized technical training provider.
LinkedInPrincipal Detection Engineer, Elastic
"Lessons learned while building an Agentic SOC: The good, the bad, and the scary."
Aaron Jewitt is a Principal Detection Engineer on the Elastic Infosec team. A 20-year security veteran with 10 years of offensive experience at the NSA and 10 years of experience defending networks, he specializes in detection engineering and high-velocity automation. Aaron is currently leading internal efforts to integrate AI agents into daily SecOps. Aaron lives in Germany and is a two-time speaker at BSides Frankfurt, dedicated to sharing practical, real-world lessons from the front lines of defense.
LinkedIn
Owner of Wisp Security GmbH
"Rustacean Introduction to Shellcoding"
Ben Stuart is an offensive security consultant based in Wiesbaden, Germany, and a Rustacean since 1.0, back when he was doing embedded and microcontroller work at university, long before it was a fashionable choice for offensive tooling. He holds the OSCE3 (OSCP, OSEP, OSWE, OSED) and runs his own company, Wisp Security GmbH, doing penetration testing and offensive security development
LinkedIn
Security Solutions Architect at NVISO
"Defending Microsoft Entra ID: Common Attacks, Tokens, and Response Planning"
Ethan Bowen is a Security Solutions Architect at NVISO, where he helps organizations solve complex SOC challenges. He brings more than 10 years of blue team experience across consulting, financial services, federal government, and technology sectors, with a focus on detection engineering, incident response, threat hunting, and Microsoft security technologies. Before joining NVISO, Ethan worked at Deutsche Bank, the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Microsoft, Pacific Northwest National Laboratory, and the U.S. Department of Defense. Ethan holds a Bachelor of Science in Cybersecurity from Penn State University. He also holds multiple industry certifications, including GREM, GCFA, CISSP, and multiple Microsoft certifications. Outside of work, Ethan enjoys running and playing board games.
Senior Information Security Specialist @ Deutsche Boerse & Ph.D. Student @ University of L'Aquila
"Cryptography: An Evolutionary Tale"
Alessio Di Santo is a Cybersecurity Professional and Doctoral Candidate with a focus on cryptography and digital forensics. He holds both a Bachelor's Degree in Information Engineering and a Master's Degree in Computer and Automation Engineering from the Università degli Studi dell'Aquila, where his research concentrated on Cryptographic Fairness and Forensic Acquisition for IT/OT systems, respectively. Since 2020, Alessio has worked in the cybersecurity industry as a Cyber Threat Intelligence Analyst, Incident Responder, and Malware Analyst. He is currently completing his Ph.D. under the supervision of Prof. Dajana Cassioli (co-tutor Walter Tiberti) and working as a Senior Information Security Specialist at Deutsche Boerse.
Founder and Head of Research at OpenSourceMalware
"Hunting Supply Chain Attacks: Hands-on Anaysis of npm, PyPI, and VS Code Threats"
Paul is the founder and maintainer of OpenSourceMalware.com the world's only community threat intel platform for software supply chain threats. He founded SecureStack in 2017 and SourceCodeRED in 2023. Paul is a DevSecOps veteran who focuses on software supply chain research, offensive training, and engagements, including deep work in the NPM ecosystem. He's worked with organizations including NASA, Boeing, John Deere, the US military, and the Australian government, and is an active open-source contributor currently writing "Hacking NPM." He also likes to snowboard with his family and throw sick cab 360's off his toes!
LinkedIn
DFIR Specialist and Threat Researcher with the SECUINFRA
"A phishing trip with Fancy Bear - Let's analyze APT malware together!"
Marius Genheimer is a DFIR Specialist and Threat Researcher with the SECUINFRA Falcon Team. He specializes in malware analysis and defensive security training.
LinkedInBSidesFrankfurt wouldn't exist without the generous backing of our sponsors and partners.
Made possible byA BSides Frankfurt initiative supporting more women in cybersecurity - discounted tickets thanks to NVISO, plus a welcoming space for speakers, attendees, and partner communities.
Learn more →Every attendee gets a blank ID-1 (CR80) card to design however they like and keep. Here's the spec, a template, and how to get yours printed and waiting for you on conference day.
Frankfurt's biggest automotive fair and wine festival, the Rheingauer Weinmarkt, runs at the same time as BSidesFrankfurt 2026. Hotels fill up months in advance. Here's how to plan accordingly.
Limited early-bird tickets at reduced price are on sale. Student rate also available with valid university enrollment.
BSides is a community-driven framework for organizing information security conferences. Originally conceived in the US in 2009 to remove the barrier to entry and provide a more intimate atmosphere for networking and collaboration.
BSidesFrankfurt is organized by the community, for the community. Our goal is to provide a platform for knowledge sharing, networking, and collaboration among information security professionals, researchers, and enthusiasts. We believe in an open and inclusive environment where everyone is welcome to participate and contribute.
We focus solely on technical content. You won't find any vendor pitches or marketing presentations at BSidesFrankfurt. Our talks and workshops are selected based on their technical merit and relevance to the security community. We cover a wide range of topics, including offensive security, defensive strategies, forensics, reverse engineering, and more.
BSidesFrankfurt