OrangeCon
orangecon.nl
OrangeCon
@orangecon.nl
The New Dutch Cybersecurity Conference! Experience the Hackers Community in Amsterdam, on September 5th!
What if your mobile security turned against you? Lucas Carmo reveals three TMMS vulnerabilities (two confirmed by the vendor) and shows how trusted protection can be exploited.

Watch it now: youtu.be/unUVFoHetKs?...
Who Scans The Scanner? Exploiting Trend Micro Mobile Security - Lucas Carmo
youtu.be
October 24, 2025 at 10:02 AM
Jan-Jaap Korpershoek shows how linker scripting makes compiling C to shellcode surprisingly simple, SO no source changes, static-link tricks, and practical OPSEC caveats.
Rewatch on YouTube!
youtu.be/Hz-9wJ_1zQ4?...
Shellcode Compiling Without Restrictions - Jan-Jaap Korpershoek
youtu.be
October 22, 2025 at 10:02 AM
Quentin Roland shows that LLMNR and mDNS still pose real threats by demonstrating new NTLM and Kerberos relays, including how to force Windows SMB clients to fall back to WebDav HTTP authentication.
Rewatch the talk on whenever you want on YouTube:
youtu.be/G6DvRzrfS_g?...
Exploring The Hidden Relaying Capabilities Of Local Name Resolution Poisoning - Quentin Roland
youtu.be
October 20, 2025 at 10:01 AM
Too many tools slowing your red team? Roy Reinders hooked Large Language Models into infrastructure via custom Model Context Procotol servers to orchestrate ops, tying tools together, automating tasks, and revealing the limits.
Rewatch it on YouTube!
youtu.be/sZniFVRoYMc?...
Talk Nerdy To Me: Orchestrating Red Team Operations In Natural Language - Roy Reinders
youtu.be
October 17, 2025 at 10:01 AM
How do you entertain 3,500 hackers?
Thijs Bosschert shows how CTFs and the Secret Token Game at WHY2025 trained, inspired, and engaged hackers.
Check it out: youtu.be/u6IV6TbIqZ0?...
How To Entertain 3500 Hackers - Thijs Bosschert
youtu.be
October 15, 2025 at 10:01 AM
How secure is your browser really?
Offensive security engineer Riadh Bouchahoua breaks down how attackers can slip extensions into Chromium browsers, bypass protections, and what defenders can do about it.
Watch it now on Youtube --> youtu.be/DquDszi72EU?...
Silent Infiltration: Chromium Preference Attacks - Riadh Bouchahoua
youtu.be
October 14, 2025 at 10:00 AM
Smart devices often lock down their attack surface with no open ports, encrypted traffic, or logging, making security research tough. Wilco van Beijnum shows how to extract, reverse-engineer, and patch ESP32 firmware to uncover vulnerabilities.
Rewatch here: youtu.be/c5AwWOVHkEQ?...

#Orangecon
Breaking And Remaking ESP32 Devices: A Guide To Reverse Engineering And Patching - Wilco Van Beijnum
youtu.be
October 10, 2025 at 10:02 AM
Annelies Verhelst shows why digital accessibility is also cybersecurity and how making software inclusive keeps everyone safer.
Rewatch here: youtu.be/GOwRuA_nqAw?...

#Orangecon #Cybersecurity #Accessibility
The Value Of Digital Accessibility And Inclusivity In Cybersecurity - Annelies Verhelst
youtu.be
October 8, 2025 at 10:02 AM
Ellen Mok closes Orangecon with a look at digital sovereignty, why independence matters and how we can get there.
Rewatch here: youtu.be/QgV7tVLNATw?...

#Orangecon #Cybersecurity #DigitalSovereignty
Locknote: Digital Sovereignty - Ellen Mok
youtu.be
October 6, 2025 at 10:01 AM
Routers are a growing target for attackers. In this talk, Daan Keuper shows how his team built a Pwn2Own exploit chain from WAN to NAS and why SOHO devices matter for security.
Rewatch here: youtu.be/ohc8zccJAK8?...

#Orangecon #Cybersecurity #Pwn2Own
From WAN To NAS: A Pwn2Own Journey Through The SOHO Attack Surface - Daan Keuper
youtu.be
October 3, 2025 at 9:54 AM
As passwords lose ground, Token Theft is on the rise. Dr. Nestori Syynimaa explains how Entra ID’s protections work and how they work under the hood.

Rewatch here: youtu.be/MU7HPH-hnNc?...

#Orangecon #Cybersecurity #EntraID
(Deep-)Dive To Entra ID Token Theft Protection - Nestori Syynimaa
youtu.be
October 1, 2025 at 9:50 AM
Think all those MDR dashboards and glowing KPIs mean your security is under control? Think again. In this Orangecon talk, Robin Bruynseels exposes the fairytale behind surface-level metrics and shows how to focus on the numbers that actually drive protection.

Rewatch here: youtu.be/gSqljeQ98TU?...
The Fairytale Of KPI's In The World Of MDR - Robin Bruynseels
youtu.be
September 30, 2025 at 6:47 AM
Yaniv Miron (Cloud Threat Research @Proofpoint) at #OrangeCon2025! From Phishing to Persistence. A must-watch for defenders: how attackers maintain undetected access and what detection/response should look like.
Check it out --> youtu.be/TfZtL3mdtcA?...
From Phishing To Persistence: How Attackers Take Over Cloud Accounts - Yaniv Miron
youtu.be
September 26, 2025 at 10:02 AM
#OrangeCon2025 talk recording: Who Stole My Face? Generative AI, Identity Collapse, and the New Fraud Economy by Nicole van der Meulen.
From deepfakes to synthetic identities, is AI reshaping fraud and trust itself?
--> youtu.be/cRwUtAWwxw4?...
Who Stole My Face? Generative AI, Identity Collapse, And The New Fraud Economy - NS Van Der Meulen
youtu.be
September 24, 2025 at 12:04 PM
Watch the #OrangeCon2025 talk recording of Tijme Gommers: In Memory of In-Memory Detection.
Static & in-memory detection? Dead. Meet Dittobytes; truly metamorphic malware that runs everywhere, different every time.
--> youtu.be/9tCT2ItbPD4?...
In Memory Of In-Memory Detection - Tijme Gommers
youtu.be
September 22, 2025 at 10:00 AM
Huge thanks to our Gold Sponsor Fortra for making student trainings possible at #Orangecon2025! They’re leaders in cybersecurity & risk-management solutions. Learn more about what they do here: fortra.com
Homepage
Fortra provides advanced offensive and defensive security solutions that deliver comprehensive protection across the cyber kill chain.
fortra.com
September 21, 2025 at 5:00 PM
Shoutout to our Platinum Sponsor proofpoint! A global leader in cybersecurity, they protect people from advanced threats. Thanks to their support, students joined top-notch trainings at #Orangecon2025! Check them out at proofpoint.com
Enterprise Cybersecurity Solutions, Services & Training | Proofpoint US
Proofpoint helps protect people, data and brands against cyber attacks. Offering compliance and cybersecurity solutions for email, web, cloud, and more.
proofpoint.com
September 20, 2025 at 3:25 PM
RELIVE Orangecon 2025
An Gaiser explained how emotional hijack, AI bias, and misinformation can cloud critical thinking in cybersecurity.
Watch here: youtu.be/aKA8KpcV0hQ?...

#Orangecon #Cybersecurity #AI #BehavioralScience
Flooding The Zone: Emotional Hijack, AI Bias & Critical Thinking In Cybersecurity - An Gaiser
youtu.be
September 19, 2025 at 10:01 AM
Sebastiaan Groot & Frank Cozijnsen (KPN) fuzzed a Steering of Roaming component and turned a crash into remote code execution, even across operator boundaries.
Watch here: youtu.be/JxkcG7bbxGw?...

#Orangecon #TelecomSec #ExploitResearch
Exploiting Roaming Protocols From The Telco Next Door - Sebastiaan Groot and Frank Cozijnsen
youtu.be
September 17, 2025 at 10:00 AM
For those who couldn’t be there or just want to relive OrangeCon, watch Marco Balduzzi’s keynote “From Geeks to Giants: The Journey from Hacking Subculture to Modern Cybersecurity.”

Watch it here: youtu.be/4pF2kqrmUj4?...

#Orangecon #Cybersecurity #Keynote #Talk
Geeks To Giants: The Journey From Hacking Subculture To Modern Cybersecurity - Marco Balduzzi
youtu.be
September 15, 2025 at 10:01 AM
All #OrangeCon2025 talks are now online!
Watch them on our YouTube channel: www.youtube.com/@OrangeCon
OrangeCon
Community Driven Cybersecurity Conference Experience the Hackers Community in The Netherlands! OrangeCon is a community driven, non-profit Cybersecurity Conference in the heart of The Netherlands. Mee...
www.youtube.com
September 13, 2025 at 3:19 PM
Thank you so much to everyone who attended and helped! See you again next year! 🧡#OrangeCon25
September 5, 2025 at 4:16 PM
The founders back on stage for the closing. What a day it’s been. 🧡🧡🧡🧡
September 5, 2025 at 4:15 PM
Closing talk by Ellen Mok on digital sovereignty and how to achieve it. Great way to wrap up the day. #OrangeCon25
September 5, 2025 at 3:46 PM
A great talk on emotional Hijack, AI Bias & Critical Thinking in Cybersecurity by An Gaiser🧡
September 5, 2025 at 1:13 PM