CODE BLUE 2025
2025-11-18..2025-11-19
Tokyo, Japan
[CODE BLUE 2015, CODE BLUE 2016, CODE BLUE 2017, CODE BLUE 2023, CODE BLUE 2024, CODE BLUE 2025]
| title | author | length |
|---|---|---|
| Opening | 10m | |
Opening frames CODE BLUE 2025 as a mission to connect the world through cybersecurity, now in its 13th edition, stressing rapid AI acceleration, rising… | ||
| Keynote:Bend the Machine: The Hacker Path to Autonomy in the Real World | David Brumley | 41m |
DARPA's Cyber Grand Challenge builds an autonomous cyber reasoning system that must find exploits, produce patches, and avoid downtime; the winning system used… | ||
| AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor | Bing-Jhong Jheng, Pan ZhenPeng | 33m |
A bug in the GXP driver lets the caller supply a DMA direction that mismatches get_user_pages flags so the co‑processor MMU maps CPU read‑only pages as… | ||
| Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit” | Bing-Jhong Jheng, Muhammad Ramdhan, Pan ZhenPeng | 36m |
Finds 13 Exynos MPU/NPU bugs in Samsung phones (double frees, out‑of‑bounds reads/writes, arbitrary free) including CVE-2025-23095, CVE-2025-23097… | ||
| Practical Automation of Penetration Testing with Agentic AI | Hiroaki Toyota | 47m |
Claims a production-ready agentic AI orchestration that runs a planner, executor, analyst and guardian over an N8N pipeline to automate end-to-end pentests… | ||
| Don't judge an audiobook by its cover: taking over your Amazon account with a Kindle | Valentino Ricotta | 38m |
Finds a heap overflow in libaudiblexdk.so parsing AAX files via an integer overflow in the STSC atom, discovered by static reverse engineering (IDA) after… | ||
| Cache the Frames, Catch the Vulnerabilities in Kernel Streaming | Angelboy Yang | 39m |
Research uncovers more than 20 kernel‑streaming bugs and builds working exploits that reach kernel EOP on modern Windows (tested on 22H2 and 24H2). Root causes… | ||
| Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing | Dillon Franke | 44m |
Fuzzing targets Mac IPC handlers in the Core Audio stack and produces crashes by loading MIG handlers directly from the shared cache, using a direct harness… | ||
| How to Hack Any Micro-controller with a Raspberry Pi Pico… | Tongren Chen | 38m |
A cheap setup uses a Raspberry Pi Pico plus two high‑speed switches, a probe resistor and a logic analyzer/oscilloscope to perform precise voltage glitching… | ||
| PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry… | Mikhail Evdokimov | 40m |
Claim: a chained exploit against BluesDK yields universal one-click remote code execution on millions of IVI units (confirmed on Volkswagen ID4, Skoda, Audi… | ||
| Panel Discussion:The Present and Future of AI and Security | David Brumley, Evan Downing, Minwoo Baek, Tyler Nighswander | 01h 02m |
DARPA runs an AI Cyber Challenge that forces autonomous systems to find and patch real and synthetic bugs in open‑source C and Java projects; seven teams win… | ||
| Dissecting FINALDRAFT: Actionable Intel from a State-Sponsored Multi-Platform Backdoor | Salim Bitam | 32m |
Custom multiplatform backdoor named Final Draft uses Microsoft Graph API draft emails for C2, stores a refresh token in its config and reads/deletes draft… | ||
| The Deepfake Supply Chain: Weaponizing Synthetic Media into Modern Cybercrime Operation | Niladri Sekhar Hore | 41m |
Claim: synthetic-media fraud is a $40B problem with ~36% yearly growth and turnkey offerings (cloned videos $300–$800, full business-email packages $2,000)… | ||
| Cloud-Wide Contamination: Chaining SSRFs for Tenant Compromise in Azure (CVE-2025-29972) | Vladimir Eliezer Tokarev | 41m |
Finds an SSRF in Azure Storage Resource Provider that lets an attacker host a metadata URL, force ARM/SRP to request it, and leak an Azure AD token; combines… | ||
| Exploiting Blind Memory Corruption in Cloud Services | Anthony Weems, Stefan Schiller, Simon Scannell | 39m |
A full exploit chain demonstrates remote code execution against a cloud backend: attackers craft malicious container images for GCP artifact-analysis, abuse a… | ||
| Invitation Is All You Need! Invoking Gemini for Workspace Agents with a Google Calendar Invite | Or Yair, Ben Nassi, Stav Cohen | 38m |
A calendar invite with a crafted prompt can hijack Gemini-for-Workspace via context poisoning and force actions across agents (calendar, Gmail, Android… | ||
| The CCEL and the Thin Line Between Cyber Defence and Pre-emption… | Andrea Monti | 42m |
Argues that the CCEL-style laws and recent state moves reframe offensive operations as active defence, letting private firms and intelligence blur lines and… | ||
| Closing Keynote: Future Cybersecurity Strategies — Active Cyber Defense, Workforce Development and More | Kazutaka Nakamizo | 45m |
A closing keynote on future cybersecurity strategy covering proactive cyber defense and workforce development, discussing active defensive technologies and… | ||
| BOOTKITTY: Multi-OS Trust Chain compromise from Bootkit to Rootkit | Junho Lee, HyunA Seo | 28m |
A hybrid bootkit called BootKitty runs on Windows, Linux and Android and demonstrates end-to-end compromise: it bypasses Secure Boot via an out‑of‑bounds… | ||
| Bypassing Anti-Debugging: A Hybrid Real-Simulated Approach to Rootkit Analysis | Yong-Xu Yang, Heng-Ming Fan, Yu Xuan Luo | 31m |
A hybrid semi-simulated, semi-native emulator called KDENU maps registers into kernel mode, uses Unicorn C++ bindings, and injects real parameters from kernel… | ||
| TOAMI—Tōami: A Browser Extension Tool to Support Phishing Hunters | Yuichi Tsuboi | 39m |
TOAMI (投網) is a browser extension to help phishing hunters by automating and assisting analysis of phishing pages. It integrates into the browser to collect… | ||
| YAMAGoya: Open Source Threat Hunting Tool using YARA and SIGMA | Shusei Tomonaga, Tomoya Kamei | 42m |
An open source Windows endpoint hunter is built that applies YARA and SIGMA rules directly in user mode, scans virtual memory of running processes and inspects… | ||
| Digging Up the Past: Reconstructing File Operation History from Ext4 and XFS Journals | Minoru Kobayashi | 40m |
Reconstructs file operation histories by parsing filesystem journals from ext4 and XFS. Describes techniques and tooling to extract and interpret journal… | ||
| Watch the Gaps: Detecting (and Fixing!) Overlooked Windows Event Log Misses | Fukusuke Takahashi, Zach Mathis | 45m |
Examines gaps in Windows Event Log coverage that cause missed or incomplete forensic/monitoring evidence, showing how those gaps arise and demonstrating… | ||
| Introduction to CICDGuard - Orchestrating visibility and security of CICD ecosystem | Pramod Rana | 36m |
An open-source tool called CICDGuard scans CI/CD platforms with modular Python scanner modules, stores detailed metadata in a Neo4j graph model, and… | ||
| GHARF：GitHub Actions RedTeam Framework | Yusuke Kubo, Yuuki Matsumoto | 39m |
A GitHub-based framework automates red‑team cycles by treating workflows as C2: GitHub Actions as C2 uses self-hosted runners on target hosts, runs shell and… | ||
| Proposal and Implementation of a Reduced Assembly Set Compiler Enabling CPU Security Measures | Hiroaki Sakai | 38m |
Proposes and implements a Reduced Assembly Set Compiler that enables CPU-level security measures. The talk explains how the compiler reduces or constrains the… | ||
| Build Your Own Pivoting Lab: A Starting Point for Internal Network Exploration | Francisco Canteli | 38m |
Walks through a deployable pivoting lab (Docker Compose, GitHub) with about six to seven hosts and step‑by‑step walkthroughs in English and Spanish… | ||
| BIN2TL: Visualizing Program Dynamics with Perfetto | Michael Telloyan | 30m |
A toolchain captures full execution with Intel PIN, converts per-instruction and per-call events into Perfetto/Chrome trace format, and produces an interactive… | ||
| Azazel for Emergency Shelters: A Portable SOC/NOC Deployable Rapidly on Raspberry Pi | Makoto Sugita | 39m |
Presents Azazel, a portable SOC/NOC that can be rapidly deployed on Raspberry Pi devices for emergency shelters. Describes using Raspberry Pi hardware and… | ||
| nothing matches | ||