Dear community!

Its Easter, and the Easter rabbit always brings Easter eggs.

We found a friendly Easter-egg sponsor, so #BSidesLuxembourg tickets are 80% OFF while the supply lasts (80% off, 10 euro tickets right now for 3 days of Cybersecurity goodness!).

10 euro tickets. Grab yours before the Easter promo runs out!

๐Ÿ’ก Security isnโ€™t a collective fear - itโ€™s a shared competence โœ…

๐ŸŽฏ ๐——๐—œ๐—š๐—œ๐—ง๐—”๐—Ÿ ๐—ฅ๐—œ๐—ฆ๐—ž๐—ฆ, ๐—ง๐—›๐—ฅ๐—˜๐—”๐—ง ๐— ๐—ข๐——๐—˜๐—Ÿ๐—ฆ, ๐—”๐—ก๐—— ๐—˜๐— ๐—ฃ๐—”๐—ง๐—›๐—ฌ: ๐—ง๐—ฅ๐—”๐—œ๐—ก๐—œ๐—ก๐—š๐—ฆ ๐—ง๐—›๐—”๐—ง ๐—˜๐— ๐—ฃ๐—ข๐—ช๐—˜๐—ฅ - ลukasz Krรณl โœจ๐Ÿ”ฅ

Digital and cyber risks donโ€™t always fit into standard risk assessment models. They use different language, involve complex causes, and depend on interlinked systems.

In this talk, ลukasz Krรณl shares how to make digital security feel real, relatable and doable, even for non-technical audiences. Heโ€™ll show how to compare digital risks to physical, financial, and legal threats using simple analogies, how to break down the myth of omnipresent surveillance, and how to use storytelling to make threat modelling feel less abstract.

With real examples heโ€™ll prove that empathy, clarity, and simple frameworks can turn fear into action.

ลukasz Krรณl https://pretalx.com/bsidesluxembourg-2026/speaker/NLVVCF/ is a digital security trainer at the ICRC Global Cyber Hub in Luxembourg. He has a background in politics, technology, and international relations. He is particularly interested in digital security pedagogies, selecting secure and sustainable digital tools, and effectively supporting at-risk groups and individuals.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #DigitalSecurity #RiskAssessment #CyberTraining #OSINT #HackerLife #SecurityEducation

โšกโšกโšก Lightning Talk Announcement! โšกโšกโšก

๐Ÿ“ง๐Ÿ’ป ๐—ฆ๐—–๐—”๐—Ÿ๐—œ๐—ก๐—š ๐——๐—˜๐—™๐—˜๐—ก๐—–๐—˜ - ๐—™๐—œ๐—ก๐——๐—œ๐—ก๐—š ๐—ฅ๐—˜๐——๐—ฉ๐——๐—ฆ ๐—™๐—ฅ๐—ข๐—  ๐—” ๐—ฃ๐—›๐—œ๐—ฆ๐—›๐—œ๐—ก๐—š ๐—˜๐— ๐—”๐—œ๐—Ÿ - ๐—˜๐—Ÿ๐—Ÿ๐—œ๐—ข๐—ง ๐—ฃ๐—”๐—ฅ๐—ฆ๐—ข๐—ก๐—ฆ ๐Ÿ”๐Ÿ”ฅ

A phishing email isnโ€™t just a threat, itโ€™s a starting point. In this 5-minute lightning talk, Elliot Parsons shows how to turn a single report into a chain of attacks, tracking attackers across domains, IPs, certificates, and links.

Elliot Parsons https://www.linkedin.com/in/elliot-parsons-4ba72140 is a cyber threat intelligence consultant at AmeXio. He is from New Zealand with a background in Financial Services, Technology Services and Government organisations. His expertise is in threat intelligence, threat hunting, reverse engineering, malware analysis, and incident response.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #Phishing #CyberDefense #ThreatIntelligence #OSINT #RedTeam

๐Ÿง Turn your team into threat hunters, one dice roll at a time ๐Ÿ’ฅ

๐ŸŽฒ ๐——๐—จ๐—ก๐—š๐—˜๐—ข๐—ก๐—ฆ & ๐——๐—ฅ๐—”๐—š๐—ข๐—ก๐—ฆ: ๐—ง๐—›๐—˜ ๐—ฆ๐—˜๐—–๐—จ๐—ฅ๐—œ๐—ง๐—ฌ ๐—ฃ๐—ข๐—ช๐—˜๐—ฅ ๐—ง๐—ข๐—ข๐—Ÿ ๐—ฌ๐—ข๐—จ ๐——๐—œ๐——๐—กโ€™๐—ง ๐—ž๐—ก๐—ข๐—ช ๐—ฌ๐—ข๐—จ ๐—ก๐—˜๐—˜๐——๐—˜๐—— - Klaus Agnoletti ( @klausagnoletti ) & Glen Sorensen ๐Ÿ›ก๏ธ

Roleplaying isnโ€™t just for nerds, itโ€™s a proven method for building real security muscle. This talk reveals how structured tabletop roleplaying games unlock deeper learning, improve team cohesion, and turn abstract security concepts into lived experience. By simulating incident response, threat modeling, and zero-trust design through narrative-driven play, teams develop adaptive thinking, shared mental models, and faster decision-making under pressure.

Klaus Agnoletti https://www.linkedin.com/in/agnoletti/ is a freelance storytelling cyber security advisor, co-founder of BSides Kรธbenhavn, neurodiversity advocate, and architect of playful security transformation through narrative and gamification.

Glen Sorensen https://pretalx.com/bsidesluxembourg-2026/speaker/J3PRCC/ is a Solutions Engineer at DeleteMe, former vCISO, and incident master for HackBack Gaming. 20+ years in security engineering, GRC, and operations. Passionate about OSINT, AI-powered social engineering, and using tabletop games to train real-world response.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule Link: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #GamifiedSecurity #CyberTraining #IncidentResponse #RolePlaying #SecurityLeadership #InfosecEducation #PlayToLearn

โšกโšกโšก Lightning Talk Announcement! โšกโšกโšก

โœจ ๐— ๐—”๐—š๐—œ๐—–-๐—ฅ๐—ฆ: ๐—” ๐— ๐—˜๐— ๐—ข๐—ฅ๐—ฌ-๐—ฆ๐—”๐—™๐—˜, ๐—Ÿ๐—œ๐—•๐— ๐—”๐—š๐—œ๐—–-๐—–๐—ข๐— ๐—ฃ๐—”๐—ง๐—œ๐—•๐—Ÿ๐—˜ ๐—™๐—œ๐—Ÿ๐—˜ ๐—ง๐—ฌ๐—ฃ๐—˜ ๐——๐—˜๐—ง๐—˜๐—–๐—ง๐—œ๐—ข๐—ก ๐—˜๐—–๐—ข๐—ฆ๐—ฌ๐—ฆ๐—ง๐—˜๐—  - Quentin Jerome ๐Ÿงฉ (@qjerome)

File type detection just got a memory-safe upgrade โ€” in Rust. In this talk, Quentin Jerome shows how Magic-rs brings libmagicโ€™s power to modern, safe code โ€” with Python bindings, a CLI tool called wiza, and real-world compatibility.

Quentin Jerome https://www.linkedin.com/in/quentin-jerome-00a8a074 is a Rust developer at CIRCL. Inspired by his background in incident response and threat detection, he builds open-source security tools to solve practical problems. His main interests include threat detection, bug hunting, and building tools that help the security community.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #Rust #FileDetection #MemorySafety #OpenSource #CyberSecurity

โšกโšกโšก Lightning Talk! โšกโšกโšก
๐Ÿชฆ๐Ÿ”๐—ช๐—›๐—”๐—ง ๐—œ๐—ฆ ๐—ง๐—›๐—˜ ๐——๐—”๐—ฅ๐—ž ๐—ช๐—˜๐—• ๐—ง๐—”๐—Ÿ๐—ž๐—œ๐—ก๐—š ๐—”๐—•๐—ข๐—จ๐—ง? - ๐——๐—”๐—ฅ๐—ž ๐—๐—”๐—ฅ๐—š๐—ข๐—ก ๐——๐—˜๐—ง๐—˜๐—–๐—ง๐—œ๐—ข๐—ก ๐—”๐—ก๐—— ๐—œ๐——๐—˜๐—ก๐—ง๐—œ๐—™๐—œ๐—–๐—”๐—ง๐—œ๐—ข๐—ก - Laura Bernardy ๐Ÿ”๐Ÿ•ต๏ธโ€โ™‚๏ธ
The dark web hides in code, and its language is built to confuse. In this talk, Laura Bernardy shows how NLP can decode the slang, jargon, and encrypted phrases used by cybercriminals

Laura Bernardy https://lu.linkedin.com/in/laura-bernardy-a95315177 is a PhD candidate at SnT Luxembourg, researching dark web content and cyber threat intelligence using natural language processing. She holds a masterโ€™s in computational linguistics and has worked on low-resource language NLP. Her work combines linguistics, cybersecurity, and AI to decode whatโ€™s being said and whoโ€™s saying it.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule Link: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #DarkWeb #NLP #CyberThreatIntelligence #OSINT #Linguistics

โšกโšกโšก Lightning Talk Announcement! โšกโšกโšก

๐Ÿ‘€ โš–๏ธ ๐—›๐—ข๐—ช ๐—ง๐—ข ๐—•๐—˜ ๐—๐—จ๐—ฆ๐—ง ๐—ง๐—›๐—˜ ๐—ฅ๐—œ๐—š๐—›๐—ง ๐—”๐— ๐—ข๐—จ๐—ก๐—ง ๐—ข๐—™ ๐—ฃ๐—”๐—ฅ๐—”๐—ก๐—ข๐—œ๐—— (๐—–๐—ฌ๐—•๐—˜๐—ฅ๐—ฆ๐—˜๐—–๐—จ๐—ฅ๐—œ๐—ง๐—ฌ ๐—˜๐——๐—œ๐—ง๐—œ๐—ข๐—ก) - ๐——๐—˜๐—ก๐—œ๐—  ๐—Ÿ๐—”๐—ง๐—œฤ‡ ๐Ÿง ๐Ÿ˜Ž

Are you too relaxed? Or too paranoid? In this talk, Denim shares how to find the sweet spot where awareness protects without paralyzing. Find a perspective to to measure your security mindset.

Denim Latiฤ‡ https://pretalx.com/bsidesluxembourg-2026/speaker/9GTVXC/ is a security analyst and part of the CSIRT for Fondation Restena, the NREN of Luxembourg. He is passionate about raising awareness on cybersecurity issues to both small and large audiences.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #CyberSecurity #Mindset #SecurityAwareness

Here is another announcement for BSides Luxembourg!

๐Ÿ› ๏ธ ๐—ฅ๐—œ๐—ข๐—ง โ€“ ๐—” ๐—ฅ๐—”๐—ฆ๐—ฃ๐—•๐—˜๐—ฅ๐—ฅ๐—ฌ-๐—•๐—”๐—ฆ๐—˜๐—— ๐—ก๐—˜๐—ง๐—ช๐—ข๐—ฅ๐—ž ๐—œ๐— ๐—ฃ๐—Ÿ๐—”๐—ก๐—ง ๐—™๐—ข๐—ฅ ๐—ฅ๐—˜๐—— ๐—ง๐—˜๐—”๐—  ๐—ข๐—ฃ๐—˜๐—ฅ๐—”๐—ง๐—œ๐—ข๐—ก๐—ฆ - ๐—ข๐—Ÿ๐—œ๐—ฉ๐—œ๐—˜๐—ฅ ๐— รฉ๐——๐—ข๐—– ๐Ÿ•๐Ÿฅง

A Raspberry Pi isnโ€™t just a toy. In this talk, Olivier Mรฉdoc shows how it became a stealthy, modular network implant used in real-world red team operations, turning physical access into long-term access, bypassing MFA, and quietly exfiltrating secrets, even when the victim is unaware.

Olivier Mรฉdoc https://pretalx.com/bsidesluxembourg-2026/speaker/TGY8UJ/ is a member of the POST Cyberforce Offensive Security team. He has led offensive security missions across telecom, banking, payment systems, and ATMs. He specializes in vulnerability research, mobile and web app penetration testing, and red team operations. He also contributes to in-house security tooling and forensic investigations.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #RedTeam #RaspberryPi #NetworkImplant #AdversarySimulation #CyberSecurity

๐Ÿ•ต๏ธโ€โ™‚๏ธ Trust can break Anonymity โœ…๐Ÿ”

๐ŸŽฏ ๐—ฃ๐—›๐—œ๐—ก๐——๐—œ๐—ก๐—š ๐—” ๐—ฃ๐—›๐—œ๐—ฆ๐—›๐—˜๐—ฅ: ๐——๐—ข๐—กโ€™๐—ง ๐—Ÿ๐—˜๐—ง ๐—ฅ๐—˜๐—ฃ ๐—š๐—˜๐—ง ๐—ฌ๐—ข๐—จ ๐—ฅ๐—˜๐—ž๐—ง - ๐—˜๐—Ÿ๐—Ÿ๐—œ๐—ข๐—ง ๐—ฃ๐—”๐—ฅ๐—ฆ๐—ข๐—ก๐—ฆ โœจ๐Ÿ”ฅ

The โ€œas-a-service modelโ€ has become ubiquitous across the cybercrime ecosystem. Previously dominated by tight-knit, exclusive groups, cybercrime is now a distributed international marketplace of service providers and consumers. As a result, it is more resilient than ever, with the gaps left by law enforcement takedowns quickly filled by the next opportunistic teenager.

However, to operate effectively in this anonymous distributed economy, threat actors need to build a reputation to gain trust. Does this give us an opportunity?

In this presentation, Elliot Parsons discusses the importance of trust in the cybercrime ecosystem and walks through a real-world investigation involving a prominent phishing-as-a-service (PhaaS) provider. The case study illustrates that trust and OpSec do not mix, exposing threat actors to identification.

Elliot Parsons https://www.linkedin.com/in/elliot-parsons-4ba72140 is a cyber threat intelligence consultant at AmeXio. He is from New Zealand with a background in Financial Services, Technology Services and Government organisations. His expertise is in threat intelligence, threat hunting, reverse engineering, malware analysis, and incident response.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #Phishing #CyberCrime #OSINT #ThreatIntelligence #PhaaS #HackerLife

Here is another BSides Luxembourg 2026 announcement!

๐Ÿ’ป ๐—ฆ๐—˜๐—–๐—จ๐—ฅ๐—œ๐—ง๐—ฌ ๐—œ๐— ๐—ฃ๐—ฅ๐—˜๐—ฆ๐—ฆ ๐—ž๐—”๐—ฅ๐—”๐—ข๐—ž๐—˜๐ŸŽฏ๐Ÿ”ฅโœจ - Kirils Solovjovs ( @k )

Think you can bluff your way through a security talk with zero prep? Now is your chance! At Security Impress Karaoke, you'll be handed a totally random, security-themed slide deck youโ€™ve never seen before and have just 3 minutes to present it like a pro. This is all about having fun, thinking fast, and impressing the crowd with your creativity and/or chaos. Come take the podium and letโ€™s see what youโ€™ve got!

Kirils Solovjovs https://www.linkedin.com/in/kirilssolovjovs/ is Latviaโ€™s top white-hat hacker and IT policy activist with 10+ years in offensive security and command-line mastery.

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets/
๐Ÿ“… Schedule Link: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #SecurityKaraoke #CyberHumor #PublicSpeaking #HackerLife