Where Innovation Meets Enterprise Security
For over a decade, Nullcon has been the platform where security breakthroughs are first revealed, where adversarial research becomes public knowledge, and where enterprises prepare for the threats of tomorrow.
Where the world’s most critical vulnerabilities first come to light
Strategies for defending against the vulnerabilities are tested. From understanding sector-specific obligations to preparing for cross-border data requirements, the event helps enterprises remain aligned with industry and governmental standards while keeping innovation at the forefront.
The caliber of speakers and the themes covered make Nullcon uniquely valuable for enterprises.
Tracks span from zero-day research and cloud exploitation to SCADA security, forensic investigation, and workforce development — ensuring relevance for both technical teams and executives. Sessions from recent editions highlight the conference’s blend of cutting-edge research and executive-level strategy:
Koh Nakagawa from FFRI Security
Explored how a single flaw in macOS isolation mechanisms could expose sensitive enterprise data.
Solar Designer from Openwall
Presented Linux Kernel Runtime Guard (LKRG) 1.0, a tool now essential for enterprise Linux defense strategies.
Lukas Bernhard
Demonstrated advanced fuzzing of WebGPU shader compilers, showing how tomorrow’s enterprise graphics environments may be compromised.
Stephan Gerling
Addressed the critical, often-overlooked convergence of IT and OT systems, with direct implications for manufacturing and energy sectors.
2026 preview:
Nikhil Joshi, AI Security Researcher, offers deep insights into AI’s inner workings, highlighting methods to uncover and mitigate inherent vulnerabilities.
At-a-glance
Format:
Two-day conference with pre-event training intensives.
Audience:
CISOs, CIOs, compliance leaders, senior engineers, researchers.
Networking:
Exclusive executive roundtables, speaker receptions, and technical villages.
Deliverables:
Full access to session recordings, slides, labs, and code repositories.