RomHack Camp 2026

Version 1.0.1 Sept. 5, 2026

Closing update

We have moved a session around: “RomHack Camp Closing” by Cyber Saiyan (Oct. 4, 2026, 12:30 p.m. → Oct. 4, 2026, noon)

Version 1.0.0 Sept. 4, 2026

Talks schedule released. Version 1.0.0

We have new sessions!

• “Living Off Trusted Cloud: Provider Infrastructure as Phishing Delivery Channel” by Rahul Vashisht
• “When Even AI Writes the CVE” by Luis Rubiera
• “Why I've to waste my (precious) time on cryptography?” by Andrea Pompili
• “Chain Reaction - From Isolated Vulnerabilities to Full System Compromise” by Rana
• “You Don't Need a Security Solution” by Max Derkach
• “Shells Without Phish” by Mohamed Elsayed, Abdulrahman Nour
• “Last Night a DJ Erased My Drive” by Mathew Caplan
• “Incontro con la gang ransomware Schrodingercat.” by Davide Baraldi, Chiara Ciccia Romito
• “Ghost in the SIM: Silent, Zero-Click, Over-the-Air Exploitation of a Pixel 9 Baseband OOB Read” by Lorenzo Valeriani, Pasquale Caporaso
• “Command-Line Alchemy: Turning Scripts into Superpower” by Kirils Solovjovs
• “The Commodore 65: the dream that never arrived” by Dr. Commodore 65
• “automated vulnerability scanning in software development” by mc.fly
• “Just one proof away: the cryptography behind private payments” by Giorgio Dell'Immagine
• “State Trojan: The Malware with a Warrant” by Pietro Boccaletto, Francesco Infantini
• “When IaC goes wrong” by Sean Juroviesky
• “VibeShell: How Trusting Your AI IDE Costs You Your Machine” by Etizaz Mohsin
• “Cash, Card or Root? Security Archaeology of a Fiscal Cash Register” by Jacopo Jannone, Jacopo Moioli
• “Secret scanning in open source at scale (in-depth)” by Hassan Khan Yusufzai
• “macOS Malware Development: An Introduction” by [kuom]
• “Linux-IpFire hardening lan with suricata/IPS” by fabio carletti aka Ryuw
• “GNOME and Beyond Dream Tour: Discover Linux desktop sandboxing and more through its vulnerabilities” by b0n0b0
• “Imagine: pwning your favourite Nintendo DS game!” by daisy
• “MXMap Italia: National Observatory for Digital Sovereignty” by Fabio Pietrosanti (naif)
• “Argus SBOM Guard: gestione delle vulnerabilità a partire dagli SBOM” by Matteo Vitali (trotto)
• “A call for collective action on cyber defense” by Andrea Cappa, Abdel Adim `smaury` Oisfi, gdg
• “Codice Python Sicuro: Buone Pratiche e Strumenti di Analisi” by Matteo Vitali (trotto)
• “Growing a (nearly) self-sufficient vegetable garden” by merlos
• “2038: The Next Epochalypse — Breaking time before it breaks us” by Lorenzo Dina (joecondo)
• “Stupid Sexy Bearer Tokens: a deep dive into exploding OIDC sessions and hardening with DPoP” by jiraky, reymerk, Giuseppe, toctou, Stefano Maistri
• “How to poison a skill, and why nobody reviews it twice” by Pietro Virgillito
• “Guerra Profonda. Hacker, bugie e l'architettura segreta dei nuovi conflitti” by Arturo Di Corinto
• “The miracle of Plane and Sprite Multiplication” by Andrea Pompili
• “Anatomia di un DRM editoriale” by Fabio Fabrizi
• “A review bot that just works” by Andrea Cappa
• “Stop Injecting, Start Blending: A KISS Approach to Malware Development” by Julien Bedel
• “The state of systemd security sandboxing in Debian” by Marco d'Itri
• “Command and Collusion: Flipping the C2 Model for No-Egress Environments” by Hatem Mohamed, Moataz Moustafa
• “Developers under attack - how to protect yourself” by Christian <cy> Kühn
• “From Hero to Zero: The FatalNoise neverending story” by Andrea Pompili
• “SBOM SBAM: Who Put This in My Code? Enterprise-Grade Supply Chain Security on a Zero Budget” by Maurizio Argoneto
• “The Trojan Pop-Up; Modern Threat Actor Uses of Advertising” by Sean Juroviesky
• “From Discovery to Automated Windows Malware Analysis” by Pizzamarinarasadd
• “GULP: See the Attack. Understand the Story. Prove the Facts” by Davide Inzerillo
• “Using Temporal‑Spatial 3D CNN Features to Enhance OSINT‑Based Profiling and Individual Traceability” by Reza
• “Breaking the Charge: Security Analysis of the Phoenix Contact CHARX SEC-3000 EV Charging Controller” by Piotr Ptaszek, Matthew
• “MovementHound: You might be missing something, move it!” by Umberto Micillo (polair)

We have moved a session around: “Presentazione "Manualetto di sicurezza digitale per giornalisti e attivisti"” by Guerre di Rete (Oct. 2, 2026, 5 p.m. → Oct. 2, 2026, 6:20 p.m.)

Version 0.9.0 Sept. 3, 2026

Pizza added

We have new sessions!

• “🍕 Pizza Truck — Wood-Fired Dinner” by Pizza Truck
• “🍕 Pizza Truck — Wood-Fired Dinner” by Pizza Truck

Version 0.8.7 Sept. 3, 2026

Anticipate opening

We have moved a session around: “RomHack Camp Opening” by Cyber Saiyan (Oct. 2, 2026, 11 a.m. → Oct. 2, 2026, 10:30 a.m.)

Version 0.8.5 Sept. 3, 2026

one more confirmed workshop added

We have a new session: “From IOC to Detection: Turning Threat Intelligence Into Something Your SOC Can Actually Use” by Sanjay Kumar.

Version 0.8.3 Sept. 3, 2026

Fixed tesla coil show

We have a new session: “Tesla Coil Live Show” by michele pietravalle aka PHCV.

Version 0.8.1 Sept. 2, 2026

Add fibonhack food slot

We have a new session: “Bada home la fuma - gnocco fritto by fibonhack” by fibonhack.

Version 0.7 Sept. 2, 2026

All workshops added to the schedule

We have new sessions!

• “ZeroSOC Framework Working Session: Building the Open Standard for Human & Agentic SecOps” by Berghem-in-the-Middle
• “Zero to podcaster, start today your show with AI!” by Nicola Guglielmi
• “Zero to podcaster, start today your show with AI!” by Nicola Guglielmi
• “"Don't crash" challenges walkthrough” by Max 'Sparrrgh' Bellia
• “Prove It Without Telling Me Who You Are” by Carmela Occhipinti e Marco Pratesi, Marco Pratesi
• “Pwn the Pipeline: A Hands-On Tour of CI/CD Security Risks” by m3ssap0, Mattia Brollo, Fleeenz, IadRabbit
• “Keep caLLM and Let It Block: Agentic SOAR with n8n + Splunk” by Doc, aserpi, Ric, Francesco Viscardi
• “So you're interested in social engineering? The very first steps” by Kirils Solovjovs
• “Hands-On Forensic Imaging and Data Extraction from Windows and macOS Using Free and Open Source Tools” by Alessandro Farina
• “[Sponsor workshop] Introduction to Cobalt Strike: Command & Control and Code Execution Fundamentals” by Fortra
• “Trusting Trust, Hands On: Building a Self-Reproducing Compiler Backdoor” by Leonardo Tamiano
• “IRC is not dead: self-hosting real-time chat like it's 1996 (but with TLS)” by Myfox

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “PhySec Lab Part 1: Lockpicking 101” by CYBERANTANI (Oct. 3, 2026, 11 a.m., UNUSED → Oct. 3, 2026, 11:30 a.m., WORKSHOP 1 (Neon Genesis Exploitation))
• “PhySec Lab Part 2: Hacking Physical Access Control Systems” by CYBERANTANI (Oct. 3, 2026, 3 p.m., UNUSED → Oct. 3, 2026, 6 p.m., WORKSHOP 2 (GetRoot no Jutsu))
• “Braccialetti DIY” by Lucrezia (Oct. 2, 2026, 6 p.m. → Oct. 2, 2026, 2 p.m.)

Version 0.6.1 Sept. 2, 2026

Kids update

We have a new session: “Il bullismo non va in vacanza” by Bullismo No Grazie.

We have moved a session around: “Braccialetti DIY” by Lucrezia (Oct. 2, 2026, noon → Oct. 2, 2026, 6 p.m.)

Version 0.5 Sept. 1, 2026

The first talks/workshops are scheduled

We have new sessions!

• “AI4KIDS laboratorio di introduzione all'intelligenza artificiale” by Agnese
• “Braccialetti DIY” by Lucrezia
• “Tesla Coil by VoltagePyromania” by michele pietravalle aka PHCV
• “PhySec Lab Part 1: Lockpicking 101” by CYBERANTANI
• “"tradizionale" polenta taragna di Berghem-in-the-Middle” by Berghem-in-the-Middle
• “Il bullismo non va in vacanza” by Bullismo No Grazie
• “Brain Arena” by Italmaker
• “PhySec Lab Part 2: Hacking Physical Access Control Systems” by CYBERANTANI

Version 0.4.7 Sept. 1, 2026

We released a new schedule version!

Version 0.4.6 Sept. 1, 2026

We released a new schedule version!

Version 0.4.5 Aug. 7, 2026

New session types added

Version 0.4.3 Aug. 6, 2026

Remove a session present by error

Sadly, we had to cancel a session: “Tesla Coil by VoltagePyromania” by michele pietravalle aka PHCV

Version 0.4.1 Aug. 6, 2026

Film titles added

Version 0.3 Aug. 5, 2026

Film and Music slots added

We have new sessions!

• “After Dark - Saturday Music Session” by Cyber Saiyan
• “Hacker Cinema Night - Sneakers (1992)” by Cyber Saiyan
• “After Dark - Friday Music Session” by Cyber Saiyan
• “Hacker Cinema Night - The Hitchhiker's Guide to the Galaxy (2005)” by Cyber Saiyan

Version 0.2.1 Aug. 5, 2026

We released a new schedule version!

We have new sessions!

• “Presentazione "Manualetto di sicurezza digitale per giornalisti e attivisti"” by Guerre di Rete
• “Presentazione libro "L'inganno dell'Automa" di Carola Frediani” by Guerre di Rete

We have moved a session around: “RomHack Camp Closing” by Cyber Saiyan (Oct. 4, 2026, noon → Oct. 4, 2026, 12:30 p.m.)

Version 0.2 Aug. 2, 2026

We released a new schedule version!

Version 0.1 Aug. 2, 2026

First schedule of RomHack Camp activities - work in progress!