https://media.ccc.de/c/god2026 This feed contains all events from god2026 as opus see video outro Thu, 24 Sep 2026 10:38:23 -0000 https://static.media.ccc.de/media/events/god/2026/logo.png https://media.ccc.de/c/god2026 https://media.ccc.de/v/god2026-110752-hackbots-under-control-me Autonomous pentesting tools have matured to the point where they can reliably find vulnerabilities, but finding vulnerabilities is not the same as doing a professional pentest. Bug bounty hunting optimizes for high-severity impact while a client engagement requires systematic coverage against a framework, with every control checked. In this talk we will explore how we designed an internal solution that layers the OWASP ASVS framework on top of existing agentic testing products. We will cover what we put in place to get reliable results, the guardrails we designed to ensure safe behavior in client environments, and how our harness improves the coverage of agentic testing solutions. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 24 Sep 2026 10:20:00 +0200 https://cdn.media.ccc.de/events/god/2026/opus/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_opus.opus?1790243150 89354a50-d435-4899-ab5d-eb6e4a37150e 2026-09-24T10:20:00+02:00 Tanguy Snoeck No 110752, 2026, god2026, Saal Baden, god2026-eng, god2026, Day 1 Autonomous pentesting tools have matured to the point where they can reliably find vulnerabilities, but finding vulnerabilities is not the same as doing a professional pentest. Bug bounty hunting optimizes for high-severity impact while a client engagement requires systematic coverage against a framework, with every control checked. In this talk we will explore how we designed an internal solution that layers the OWASP ASVS framework on top of existing agentic testing products. We will cover what we put in place to get reliable results, the guardrails we designed to ensure safe behavior in client environments, and how our harness improves the coverage of agentic testing solutions. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:18:38 https://media.ccc.de/v/god2026-110751-agentic-ai-gateway-enforc The OWASP Top 10 for Agentic Applications 2026 clearly outlines risks like prompt injection, tool misuse, excessive agency, rogue and compromised agents, and untraceable actions. This talk shows how an open source tool addresses the risks as a control platform, a switchboard between the model and its actions. The separation means any hostile or compromised model is bound and can't reach or bypass these controls. Tool misuse and excessive agency hit per-action permission tiers that auto-allow, require human approval, or block. Compromised and rogue agents hit a gate so an "evil model" can't elevate. Untraceable action hits an append-only, hash-chained, signed audit log. Skill supply chain hits a signature verification at load. A live agent demo shows the risks, controls, source code, and design architecture. The reference implementation maps to the sovereignty posture the EU formalized in its June 2026 tech package. Documentation and source: https://wirken.ai Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 24 Sep 2026 10:15:00 +0200 https://cdn.media.ccc.de/events/god/2026/opus/god2026-110751-eng-Agentic_AI_Gateway_Enforcement_of_the_OWASP_Top_10_opus.opus?1790242130 dfb213c8-cf0b-4ff1-a932-76dba9b66521 2026-09-24T10:15:00+02:00 Davi Ottenheimer No 110751, 2026, god2026, Saal Baden, god2026-eng, god2026, Day 1 The OWASP Top 10 for Agentic Applications 2026 clearly outlines risks like prompt injection, tool misuse, excessive agency, rogue and compromised agents, and untraceable actions. This talk shows how an open source tool addresses the risks as a control platform, a switchboard between the model and its actions. The separation means any hostile or compromised model is bound and can't reach or bypass these controls. Tool misuse and excessive agency hit per-action permission tiers that auto-allow, require human approval, or block. Compromised and rogue agents hit a gate so an "evil model" can't elevate. Untraceable action hits an append-only, hash-chained, signed audit log. Skill supply chain hits a signature verification at load. A live agent demo shows the risks, controls, source code, and design architecture. The reference implementation maps to the sovereignty posture the EU formalized in its June 2026 tech package. Documentation and source: https://wirken.ai Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:26:28 https://media.ccc.de/v/god2026-110762-understanding-the-map-of Threat models usually go out of date as soon as they are created. They reside on the tool used to create the threat model. So a developer without access to the threat modeling tool does not even open the threat model. On the other hand, threat models that are interoperable come with several advantages. It's easier to share them with team members. Vendors can be asked to provide their threat models in a ready-to-consume format by purchasers in sensitive industries like healthcare. With the advent of agentic systems, LLMs can even consume raw threat models in JSON format and generate threat models that can be viewed and deliberated upon by human reviewers. The CycloneDX project is pushing to release the TM-BOM (Threat Modeling Bill of Materials) and is targeting general availability later this year. This session discusses the nuts and bolts of the TM-BOM format. Participants will understand how various pieces like blueprints, business objectives, behaviors, threats, risks, use cases, and controls interact with each other. To ground this standard in reality, I will share insights from integrating this pre-release schema into an open-source threat modeling platform, exploring the friction points of translating complex data structures into human-centric visualizations. Outline (20 Minutes) The Interoperability Problem (3 mins): Why siloed threat models fail developers and compliance teams. Deconstructing the TM-BOM (7 mins): A focused look at the CycloneDX 2.0 schema and how its core components (Blueprints, Behaviors, Threats, Risks, Controls) interlock. Agents and the TM-BOM (5 mins): How standardizing into JSON unlocks the ability for agentic systems to reliably consume and generate models for human review. Implementation Realities (3 mins): Engineering lessons learned mapping a complex JSON standard to visual diagrams. Q&A (2 mins) Attendees will leave with a functional understanding of the upcoming CycloneDX 2.0 standard, the operational benefits of interoperable threat models, and how to prepare their security pipelines to generate and consume TM-BOMs. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 24 Sep 2026 09:55:00 +0200 https://cdn.media.ccc.de/events/god/2026/opus/god2026-110762-eng-Understanding_the_Map_of_Threat_Modeling_Through_the_Lens_of_the_TM-BOM_opus.opus?1790241451 f3cc36ee-f906-4095-a5bb-709c9bfc1c6a 2026-09-24T09:55:00+02:00 Vikramaditya Narayan No 110762, 2026, god2026, Saal Fidelitas, god2026-eng, god2026, Day 1 Threat models usually go out of date as soon as they are created. They reside on the tool used to create the threat model. So a developer without access to the threat modeling tool does not even open the threat model. On the other hand, threat models that are interoperable come with several advantages. It's easier to share them with team members. Vendors can be asked to provide their threat models in a ready-to-consume format by purchasers in sensitive industries like healthcare. With the advent of agentic systems, LLMs can even consume raw threat models in JSON format and generate threat models that can be viewed and deliberated upon by human reviewers. The CycloneDX project is pushing to release the TM-BOM (Threat Modeling Bill of Materials) and is targeting general availability later this year. This session discusses the nuts and bolts of the TM-BOM format. Participants will understand how various pieces like blueprints, business objectives, behaviors, threats, risks, use cases, and controls interact with each other. To ground this standard in reality, I will share insights from integrating this pre-release schema into an open-source threat modeling platform, exploring the friction points of translating complex data structures into human-centric visualizations. Outline (20 Minutes) The Interoperability Problem (3 mins): Why siloed threat models fail developers and compliance teams. Deconstructing the TM-BOM (7 mins): A focused look at the CycloneDX 2.0 schema and how its core components (Blueprints, Behaviors, Threats, Risks, Controls) interlock. Agents and the TM-BOM (5 mins): How standardizing into JSON unlocks the ability for agentic systems to reliably consume and generate models for human review. Implementation Realities (3 mins): Engineering lessons learned mapping a complex JSON standard to visual diagrams. Q&A (2 mins) Attendees will leave with a functional understanding of the upcoming CycloneDX 2.0 standard, the operational benefits of interoperable threat models, and how to prepare their security pipelines to generate and consume TM-BOMs. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:23:21 https://media.ccc.de/v/god2026-110750-keynote AI is creating real breakthroughs, but also an ocean of slop, hype, fear, and confusion. Engineers are declared obsolete. Agentic AI is treated as magic. Security teams are asked to protect systems that are changing faster than their risk models. No wonder many of us feel dazed. This keynote offers a free therapy session for the AI-overwhelmed, including a grounded path through the chaos from your therapist. What are the truths we can rely on? Which AI risks matter most? How do we scope security concerns without drowning in them? And what about our careers? Bring your questions. There will be tissues. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de Thu, 24 Sep 2026 09:05:00 +0200 https://cdn.media.ccc.de/events/god/2026/opus/god2026-110750-eng-Keynote_opus.opus?1790239563 5f4583b8-b579-4c38-9771-e4e2e0eb9ac4 2026-09-24T09:05:00+02:00 Rob van der Veer No 110750, 2026, god2026, Saal Baden, god2026-eng, god2026, Day 1 AI is creating real breakthroughs, but also an ocean of slop, hype, fear, and confusion. Engineers are declared obsolete. Agentic AI is treated as magic. Security teams are asked to protect systems that are changing faster than their risk models. No wonder many of us feel dazed. This keynote offers a free therapy session for the AI-overwhelmed, including a grounded path through the chaos from your therapist. What are the truths we can rely on? Which AI risks matter most? How do we scope security concerns without drowning in them? And what about our careers? Bring your questions. There will be tissues. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de 00:47:15 media.ccc.de / RSS 0.3.3 CCC media team media@c3voc.de CCC media team No CCC Congress Hacking Security Netzpolitik A wide variety of video material distributed by the CCC. All content is taken from cdn.media.ccc.de and media.ccc.de A wide variety of video material distributed by the Chaos Computer Club. This feed contains all events from god2026 as opus