| 2nd December, 2026, Wednesday |
| 16:00 – 18:00 | Registration |
| 19:00 | Welcome drinks reception |
| Conference Day 1: 3rd December, 2026, Thursday |
| 09:00 – 09:30 | Registration | ||||||
| 09:30 – 09:40 | Welcome Address: Kesavardhanan J, CEO, AVAR Conference Opening: Righard Zwienenberg, Chairman, AVAR |
||||||
| 09:40 – 10:40 | Keynote Addresses | ||||||
| 10:40 – 11:00 | Break | ||||||
| Track 1 | Track 2 | CISO Workshop | |||||
| 11:00 – 11:30 | Bundled and Under the Radar: Malware Abuse of Bun and Deno Jaromir Horejsi, Check Point |
11:00 – 11:30 | Garbage In, Verdict Out: AI-Driven Malware Triage and the Disassembler It Never Questions Jagadeesh Chandraiah, Sophos |
11:00 – 11:05 | Introduction to CISO workshop | ||
| 11:30 – 12:00 | mrhOTshOT: Replaying the World’s Deadliest ICS Attacks — Complete IT+OT Kill Chains for 12 Real Malware Families Malav Vyas, Asher Loranca, Palo Alto Networks |
11:30 – 12:00 | Harmonizing AI Agents and Human Analysts in CTI – Are CTI Agents Friends or Rivals to Junior Analysts Takahiro Kakumaru, NEC Corporation |
11:05 – 11:55 | DPDP Act, CERT-In Directives & Sector Rules (RBI/SEBI/IRDAI) (Panel Discussion) | ||
| 12:00 – 12:30 | The Phone Bill You Never Made: Six Years of VoIP Toll Fraud Operations Abhinav Thakur, Cyble |
12:00 – 12:30 | HijackLoader: Polymorphic DLL Injection as a Vector for Multi-Stage Attacks Oleg Gayduk, Maxim Demidenko, Doctor Web |
11:55 – 12:15 | Anatomy of a Software Supply Chain Incident Vinothkumar R, Aravind Baskaran, Freshworks |
||
| 12:30 – 13:00 | npm install –dprk: DeceptiveDevelopment’s Supply-Chain Playbooks Against Developers Ettore Bordoni, ESET |
12:30 – 13:00 | Diffing for Intent: Stopping Supply-Chain Malware at the Code-Signing Gate Rishal Dwivedi, Kushal Rajput Lilhare, Adobe |
12:15 – 13:00 | Managing Global Cyber Risk Across Distributed Enterprises (Panel Discussion) | ||
| 13:00 – 14:00 | Lunch | ||||||
| 14:00 – 14:30 | Breaking Boundaries: Infostealer Strategies in the App-Bound Encryption Era Vojtěch Krejsa, Jan Rubín, Gen Digital |
14:00 – 14:30 | A Familiar Face: Analysis of a new Sharp Panda attack campaign Doan Minh Long, Nguyen Duc Kiem, Viettel Cyber Security |
14:00 – 14:20 | Six Groups, Ten Citations: The South Asian Blind Spot in MITRE ATT&CK Joshuva A, Gowdhaman Jothilingam, LatentView Analytics |
||
| 14:30 – 15:00 | Hidden in the Overlay ～Analysis of Backdoor Leveraging Encrypted Overlay Communications for ORB ～ Yuma Masubuchi, JPCERT/CC |
14:30 – 15:00 | From Function Centric AI to Cyber Resilience Exploring Agentic AI for Adaptive and Quantum Ready Cybersecurity Felissa Mariz Marasigan, Mark Gabriel Rizare, KPMG R.G. Manabat & Co. |
14:20 – 15:10 | AI-Augmented Defense, Automation & Analyst Burnout: How AI Reshapes Detection, Triage & the Human Role (Panel Discussion) | ||
| 15:00 – 15:30 | Automated Payload Recovery and Tactic Detection Across macOS Active Families Rajesh Krishna Nikam, CrowdStrike |
15:00 – 15:30 | Beyond the Implant: Reverse Engineering Native AOT Malware and Exposing a 30,000-Agent Operator Ecosystem Baskar M, Rahul Ramesh, Cyderes |
15:10 – 15:30 | TBD | ||
| 15:30 – 15:50 | Break | ||||||
| 15:50 – 16:20 | Transparency Wars: Exposing Hidden Biases in Testing Righard Zwienenberg, ESET Luis Corrons, Gen Digital |
15:50 – 16:20 | Weaponizing Trust: An Analysis of TeamPCP’s Cross-Platform Multi-Wave Supply Chain Attacks Praveen Babu D, Srinivasan E, K7 Computing |
15:50 – 16:40 | Beyond the Buzzword: Practical Maturity Conversation (Panel Discussion) | ||
| 16:20 – 16:50 | Masks, Monsters, and Drivers : Inside the Chaos, Kraken, and DeadLock Ransomware Operations Chetan Raghuprasad, Cisco Talos |
16:20 – 16:50 | From Compiler to Concealment: Why Zig Is Becoming the Language of Choice for Linux Threat Actors Tejaswini Sandapolla, Sentinelone |
16:40 – 17:00 | Evolution of Zero Trust: Adapting and Utilising CISA’s Zero Trust Maturity Model in an AI World Mithilesh Kumar, Netskope |
||
| 16:50 – 17:10 | Maritime Cyber Security Akash Saksena |
16:50 – 17:10 | Cybersecurity Assurance for Drone & UAV Infrastructure Gopinath Lakshmanan, Sify Technologies |
17:00 – 17:10 | Closing remarks | ||
| 19:00 – 19:30 | Pre-dinner Drinks | ||||||
| 19:30 – 22:00 | Gala Dinner | ||||||
| Conference Day 2: 4th December, 2026, Friday |
| 5th December, 2026, Saturday |
| 8:30 – 19:00 | Hyderabad Tour |
| Click here for more details. | |
| Reserve Papers |
| Good Vibes, Shady Scripts :: Vow to Protect, Woe to Detect Kaarthik R Muthukrishnan, K7 Computing |
| Beyond Prompt Injection – Detecting Persistent Memory Poisoning in AI Agents Jyotika A. Singh, Prashant Kumar, Forcepoint |
| Install. Execute. Persist. Repeat : LLM-Assisted Reverse Engineering of Execution Paths in Malicious Packages Satyam Singh, Avinash Kumar, Nirmal Singh, Zscaler Inc. |
| STIX in Action: DigSig Metadata Sharing to Complement CRLs Samir Mody, K7 Computing |
| Poisoning the Well: Deconstructing Next-Gen Supply Chain Attacks and the Myth of Code Trust Meghna S Reddy, Dell technologies |
| Zero CVEs: One Risk Graph for a Unified Supplier, Hardware, and Software Pradeep Sekar, Vobis ARC |