Here is the draft schedule for 44CON 2026.
We have a Google shared calendar with all the talks and workshops in and you can download an ICS file of all the talks and workshops to add to your calendar. Remember to update this ICS file nearer to the event as changes happen or you accidentally delete a talk from your calendar.
You can also download individual ICS files for the talks and workshops by clicking on the 
icon next to them.
Thursday 17th September 2026
| 08:30 | DOORS OPEN | Check-in and get your lanyards. Get coffee. |
| Time | Track 1 | Track 2 | Workshop |
|---|---|---|---|
| 9:00 | 44CON 2026 Opening | ||
| 9:10 |
Opening Keynote: Vulnerability Disclosure in the Age of AI |
||
| 10:00 |
Poisoned by Design: MCP SDK Enabled OAuth Token Theft |
||
| 10:50 | Coffee & tea break | ||
| 11:10 |
Lord Of The Ring 0 |
VibeShell: How Trusting Your AI IDE Costs You Your Machine |
Introduction to Cobalt Strike: Command & Control and Code Execution Fundamentals Jasmine Zaker |
| 12:00 | Inside Linux GoGra backdoor Axelle Apvrille |
Thin Client? Thin Crypto Darren McDonald |
|
| 12:50 | Lunch | Lunch | Lunch |
| 14:00 |
The Agent’s Inner Monologue: Catching Compromise in the Reasoning Trace |
Red Teaming LLM Web Apps with Promptfoo: Building a Custom Provider for Real-World Pentesting Adrian Tiron |
Reversing with AI Axelle Apvrille |
| 14:50 | Kubernetes Multi-Tenant Blues Rory McCune |
||
| 15:40 | Coffee & tea break | Coffee & tea break | Coffee & tea break |
| 16:00 | What Trading Systems Taught Me About Breaking (and Defending) Production Infrastructure Mert Satilmaz |
The Agent’s Inner Monologue: Catching Compromise in the Reasoning Trace (Workshop) Max Corbridge, Sunny Chau |
|
| 16:50 | A Windows Smorgasbord James Forshaw |
||
| 17:40 | Day session ends |
| 17:40 | BREAK | ||
| 19:20 | DOORS OPEN |
|
Time |
Track 1 |
Track 2 |
Workshop |
| 19:30 | 44CON 26 Pub Quiz by 1Password & EPSD | ||
| 23:00 | Evening Session ends |
| Bar open all evening until late |
Friday 18th September 2026
| 08:30 | DOORS OPEN | Check-in and get your lanyards (if necessary). COFFEE! |
| Time | Track 1 | Track 2 | Workshop |
|---|---|---|---|
| 9:05 | 44CON 2026 Day 2 Opening | ||
| 9:10 | Automating Attack TTPs for Fun Adhokshaj Mishra |
||
| 10:00 |
Reversing Undocumented AVL Trees to Bypass Kernel Callback Integrity |
Trust, Treachery, and Your Digital Assistant – DAMSE: A New Framework for Measuring Social Engineering Risk Salvatore Gariuolo |
Defense Evasion for Red Team Adhokshaj Mishra |
| 10:50 | Coffee & tea break | Coffee & tea break | Coffee & tea break |
| 11:10 | A New Approach in Cryptanalysis Through Combinatorial Equivalence of Cryptosystems Eric Filiol, Jaagup Sepp |
Would You Let AI Look After Your Dog? What attack paths teach us about trust, visibility, and exposure Andrew Woodford |
|
| 12:00 |
Friday Keynote: What We Do In the Shadows: An IT Story |
||
| 12:50 | Lunch | Lunch | Lunch |
| 13:50 | Inside the First 24 Hours of a Ransomware Incident Johnny Chiu |
Poisoned by Design: MCP SDK Enabled OAuth Token Theft (Workshop) |
Implementing Secure Cryptography – Avoid and detect flaws and backdoors |
| 14:40 | The Wrong Trousers Problem: Supervising Agentic Cyber Engineers Chris Cooper |
||
| 15:30 | Closing Keynote G Mark Hardy |
||
| 16:20 | CLOSE – Closing and prize giveaways | ||
| ASAP | Closing tea break and THE END |