Nullcon Security Conference and Training — Berlin 2026

Nullcon's fifth Berlin edition runs five days: three days of hands-on training from 2 to 4 November, then a two-day conference on 5 and 6 November, alongside CTFs in the Flag Arena and topic villages.

The programme is research-led rather than vendor-led. Confirmed sessions include Lukas Maar on exploiting a stale IOMMU TLB for privilege escalation on Qualcomm-based mobile devices, Emanuele Barbeno on breaking Home Assistant at Pwn2Own, Nick Aleks on compromised autonomous drones attacking ground control stations, and Lindsay Kaye of HUMAN Security on industrialised abuse at mobile scale. Benjamin Bannier and Christian Kreibich present the Zeek open-source network monitor.

Paid: student pass EUR 249, individual conference pass EUR 649 at the standard rate, three-day training pass EUR 2,399. Venue: Maritim proArte Hotel Berlin, Friedrichstrasse 151.

Why go: it is the most technical security room in Berlin this autumn, built on original exploitation research rather than conference-circuit keynotes. Best for security engineers, red teamers and researchers who want to see the work before it is published.