RomHack Camp 2026

Abdel Adim 'smaury' Oisfi is co-founder of Shielder, an Italian offensive security boutique. His research interests center on web and application security, browser internals, and the long tail of "old" bug classes that refuse to die. He has discovered and coordinated the disclosure of vulnerabilities in widely used software, won live hacking events, and spoken at international conferences. He also co-organizes TumpiCon and is a retired CTF player with JBZ.

Gen C64
Armed with a Master’s in Statistics and a background in Mathematics to uncover when things are not what they seem.
Proud mother of two, committed to a safer and fairer world, actively supporting environmental sustainability, digital rights, and advocacy against gender-based gap and violence

So, who actually is Alessandro? Catch him on a weekend and you'll probably find him knee-deep in malt and hops, brewing his own craft beer, or hunting for the perfect shot with his camera. But don't let the chill vibes fool you — in his spare time he moonlights as an information systems designer and developer, with a quiet but serious streak in cybersecurity and digital forensics.

A true veteran of the digital world (let's just say he's been around the block), his experience is anything but textbook. He's spent years "in the trenches," digitizing business processes and leading complex projects for both small and medium-sized companies and public sector organizations.

He's played around with pretty much everything — classic Client/Server architectures, cloud setups on Azure and AWS, all the way to high-availability (HA) configurations.

He's also been spotted hanging out with the LE on more than one occasion — but somehow always made it home perfectly fine. Rumor has it he's committed every cybercrime you can think of (and some you can't).

Oh, and fair warning — his passion for digital forensics is contagious. Once he starts "playing," he has a way of dragging even complete strangers along into his world of bits and investigations.

Andrea Cappa (zi0Black) is Security Lead at Aptos Labs, where he oversees all things security. A former penetration tester at Shielder, he now spends his time exploring how AI can be applied to security in real-world environments, as well as the human factors behind security incidents and system failures.

Andrea Pompili is an information technology specialist that takes care of security. He joined the computer's world with one of the most famous Italian games based on the C64 platform. Once graduated, he started working first in the software development market, and then in computer security, following security threats and solutions on strategic projects. Currently Andrea is a strategy advisor in Cyber Security, and aims to discover and integrate innovative solutions for this connected world

Researcher and teacher in cognitive and communication psychology, graduated in Rome, he specialized in persuasion technologies at Stanford University, California.

Author at Treccani, journalist specialized in innovation and cybersecurity, he has published 2300 journalistic articles for national newspapers working for Il Sole24Ore, Wired and L'Espresso, Il Manifesto and La Repubblica. Reporter for the Rai Uno television program “Codice. All life is digital”, he is also an author and television presenter.

Arturo Di Corinto has written many publications with ISBN and several books, including Hacktivism (2002, Manifestolibri), Revolution OS II (2006, Apogeo/Feltrinelli), I nemici della rete (2010, Rizzoli), Un dizionario hacker (2014, Manni), Il futuro Trent’anni fa (2017), Riprendiamoci la rete! Piccolo manuale di autodifesa digitale per giovani generazioni (Eurilink, 2019).

Professor of Digital Identity, Privacy and Cybersecurity in the faculty of Political Science, Sociology and Communication at the Sapienza University of Rome, he is currently advisor at the National Cybersecurity Agency in charge of its special projects.

Berghem-in-the-Middle (BITM) is a non-profit founded by information security enthusiasts and professionals in northern Italy, in an open and friendly environment fostering technical development and knowledge sharing. Since 2019 it hosts No Hat, an international security conference gathering researchers and specialists in Bergamo.

You can find BITM in the Community Area.

Bullismo No Grazie è un'associazione no profit fondata nel settembre 2021. Nata da un incontro e da una visione condivisa, l'associazione riunisce professionisti di diversi settori con l'obiettivo comune di contrastare il bullismo, il cyberbullismo e il revenge porn attraverso formazione, informazione e prevenzione rivolte a giovani, genitori e insegnanti.

Dal 2021 a oggi l'associazione ha incontrato oltre 18.000 docenti, 90.000 adulti e circa 200.000 ragazzi in più di 100 località, percorrendo oltre 150.000 km in tutta Italia per portare la propria testimonianza nelle scuole di ogni ordine e grado.

Tra le attività principali figura la campagna "Il Bullismo Non Va in Vacanza", realizzata nelle estati dal 2022 al 2026 in collaborazione con il tour operator Fruit Viaggi, prima e unica campagna contro il bullismo condotta in presenza nei villaggi turistici italiani. L'associazione ha inoltre prodotto il cortometraggio "Non Vi Lasceremo Soli" e diretto "Il Coraggio di Parlare", presentato nel maggio 2025 e interpretato da 27 studenti dell'Istituto Comprensivo di Borgaro Torinese.

Bullismo No Grazie è stata presente alla Camera del Senato, ha partecipato a convegni organizzati dal CSI Piemonte con la Città Metropolitana di Torino e dalla Regione Veneto, ha curato la mostra fotografica "Combattere il Bullismo" nel 2024 e ha preso parte a più edizioni di Fiera Didacta Italia. Ha collaborato con il Parlamento Europeo in Italia e con numerose istituzioni locali e aziende su tutto il territorio nazionale.
https://www.bullismonograzie.it/

Luca Bongiorni (@CyberAntani) is working as Director of a CyberSecurity Lab and is Founder of WHID - We Hack In Disguise ( www.whid.ninja ): a cybersecurity boutique focused on R&D offensive hardware implants and IIoT Security. Luca is also actively involved in InfoSec where his main fields of research are: Radio Networks, Hardware Hacking, Internet of Things, and Physical Security. He also loves to share his knowledge and present some cool projects at security conferences around the globe: BlackHat Europe & USA, TROOPERS, HackInParis, DEFCON, HackInBo, Defcon Moscow, OWASP Chapters, Security Analyst Summit, etc. At the moment, he is focusing his researches on bypassing biometric access control systems, IIoT Security & Forensics, Air-Gapped Environments and IoOT (Internet of Offensive Things).

Carmela Occhipinti: cofondatrice e Managing Director di Cyberethics Lab. è laureata in Scienze politiche, ricercatrice ed esperta di innovazione. Ha lavorato per 24 anni come responsabile del Security and Privacy Lab in una grande azienda ICT italiana. Ha conseguito certificazioni PMP, ITIL Expert, PRINCE2 e SCRUM Master ed è membro dell’Italian Chapter of the International Information Security System Certification Consortium (ISC)2. Grazie al suo background professionale, è esperta di impatti sociali delle nuove tecnologie, soprattutto nel campo etico e sociale. Insegna Diritto della privacy in numerosi corsi di Project e Service Management per aziende private e pubbliche. È ricercatrice in diversi progetti europei, soprattutto nel campo della sicurezza, in cui ricopre ruoli come Coordinatrice di progetto, Direttrice tecnica, Innovation Manager, Dissemination Manager ed Ethical Manager. Negli ultimi anni, i suoi interessi di ricerca si sono spostati su problemi di privacy e protezione dei dati. Ha collaborato con uno studio legale italiano e partecipa a commissioni europee per i progetti Horizon 2020, supportando i partner per la gestione dei problemi etici e di privacy.

Christian has worked in most fields in IT. From yawning in the Datacenter swapping hard drives at 03:00 in the night, through administrating and consulting on large-scale networks he rode the devops-wave over into development. While infosec had been a sidetrack for many years, he is now fully engaging in security engineering and consulting, helping secure one of Europe's largest retail companies.

Cyber Saiyan is a non-profit cultural association founded in 2017. Our goal is simple: raising awareness and providing education in the field of cyber security.

We are the proud organizers of RomHack, an initiative built by the community, for the community. What started as a yearly technical conference has evolved to include intensive, hands-on Training sessions and an immersive three-day Hacker Camp in Rome.

Beyond our core events, we actively promote independent projects and collaborations, such as the editorial initiative "Guerre di Rete".

Involving the community is very important to us. We strive to foster curiosity, sharpen skills, and create welcoming spaces where enthusiasts, researchers, and professionals can connect and share their knowledge.

More info: https://cybersaiyan.it/

Hacker | Master Chief at CR1PT0 | Cyber Security Researcher | Cyberwarfare Specialist Consultant | Cryptographer | Bitcoiner | Veteran.

Ex operatore Militare e di Polizia Militare. Operatore presso N.E.D. e altre infrastrutture distaccate. C.S.O., C.I.S.O., docente presso Plan B Network e Security Cert, speakers a LUGMan, Satoshi Spritz ed eventi Bitcoin.

With 15 years of experience in the software industry, I have transitioned from test automation to full-stack development, always maintaining a strong focus on secure coding practices and authentication protocols. Currently, I am a developer at Mentat, where I build solutions tailored for SOC analysts, blue teams, incident responders, and digital forensics experts. I work on Gulp, a tool we utilize to streamline incident response workflows. Outside of my professional role, I am a contributor to the Security Cert community.

Mattia — "Doc" to most people — is a Senior Defense Security Engineer at Satispay, where he works across the full defensive stack: detection engineering, monitoring, incident response and security automation for a European fintech. Splunk and n8n are two of his everyday tools, but the job spans the whole blue-team surface — building the systems that catch attacks and the automation that responds to them safely. He's spent years turning noisy signals into actions a SOC can trust, and is increasingly focused on where AI fits into that loop: genuinely useful for triage, dangerous without guardrails. Doc believes the hard problem in security automation isn't automating the response, but automating it safely — and would rather prove it with a working lab than a deck. This is his first time on the RomHack stage.

Edoardo is a security analyst at Codean Labs, where he focuses on application security assessments and research.
In his free time, he plays CTFs with the Fibonhack team, focusing mainly on web and Android challenges.

Security aside, he likes to read tons of books and sci-fi comics, and yaps about them.

Emanuela Tangari holds a PhD in Moral Philosophy from University of Rome Tor Vergata, where she is currently adjunct professor of Philosophy of Technique at the Course of Computer Engineering of the University of Rome Tor Vergata and of Philosophical Anthropology at the Department of Literary, Philosophical and Art History Studies of the same University. She spent periods of study in Paris (Collège de France) and Toulouse (IC). She collaborated in developing of writing system Potest.org (user interface, extensions). She is editor of the philosophical journal Dialegesthai, member of the Editorial board of the European Society for Moral Philosophy, member of the Research Team Métaphysique, histoire, concepts, actualité at the Catholique Institute of Toulouse and director of the cultural Association MondoDomani. She is a member of the steering committee of the degree course in Electronic Engineering at the University of Rome Tor Vergata. Her research focuses on the themes of 20th century metaphysics and philosophical anthropology, the philosophical foundations of technology and the ethical, social, psychological and pedagogical implications of new technologies

Software architect freelance, progetto e sviluppo soluzioni digitali per aziende, cercando di trasformare problemi complessi in strumenti semplici e utili. Negli ultimi anni seguo lo sviluppo IA, automazione e nuovi modi di interagire con la tecnologia.

Fabio Pietrosanti has been part of the digital underground with the nickname “naif” since 1995, while he’s been a professional working in digital security since 1998. President and co-founder of the Hermes Center for Transparency and Digital Human Rights, he is active in many projects to create and spread the use of opensource tools in support of freedom of expression and government transparency.

He is among the founders of the anonymous whistleblowing GlobaLeaks project, nowadays used by investigative journalists, citizen activists and the public administration for anti-corruption purposes. Expert in technological innovation in the field of whistleblowing, transparency, communication encryption and digital anonymity.

Like to engage in techno-activistic initiatives where technology intertwined with administrative laws and a bit of trolling, bring a benefit for the public good, like with MonitoraPA that in 2022 eradicated Google Analytics from most of Italian Public Agencies with more than 100.000 PEC sent in an activistic campaign ;)

Fortra builds data-centric cybersecurity — and hackers know them best for their offensive security tooling: Cobalt Strike, Core Impact and Outflank, for adversary simulation, pentesting and red teaming.

My interest in technology started with a curiosity about how systems work and how they break. That curiosity eventually led me into infrastructure administration, where I spent several years managing enterprise environments and supporting critical systems.

Over time, I became increasingly interested in cybersecurity, particularly offensive security and adversary tradecraft. Today, I work as a penetration tester, conducting security assessments and red team engagements focused on identifying realistic attack paths and helping organizations strengthen their security posture.

My areas of interest include Active Directory security, Windows internals, command and control frameworks, and detection evasion. I hold the CRTO certification and continue to focus on developing practical offensive security skills through research, training, and real-world engagements.

Francesco is a Cybersecurity Engineer at Satispay. Focused on Blue Team operations, he specializes in building advanced threat detection logic, Fraud & AML monitoring, and risk-based alerting pipelines using Splunk

Giorgio Dell'Immagine is a cryptography engineer and security researcher at zkSecurity, where he focuses on the security of modern cryptographic systems. He has conducted numerous audits for industry-leading projects, spanning cryptographic protocols, zero-knowledge proof constructions, and smart contracts. He also has extensive experience competing and organizing CTFs with the team "fibonhack" based in Pisa.

Giorgio holds an MSc from the University of Pisa, where he graduated with a thesis on the construction of a post-quantum signature scheme. More information can be found at his website daltron.de

Guerre di rete è un progetto editoriale frutto dell'impegno di due associazioni culturali: l’omonima Guerre di Rete, che per anni ha pubblicato una newsletter settimanale dedicata alla cybersicurezza a firma Carola Frediani (venuta a mancare il 3 Giugno 2026) e [Cyber Saiyan](url, una community indipendente di professionisti del settore della cybersicurezza.

https://www.guerredirete.it/il-progetto/

Hatem is a Principal Red Team Consultant at Google Cloud, in the META region, with extensive experience in various domains of cybersecurity. He excels in planning and executing red team operations, identifying flaws and weaknesses in systems, and leveraging his experiences to identify and exploit hard-to-find vulnerabilities. His broad expertise in providing offensive security services enables him to quickly identify viable attack paths, assess their real risks, and devise effective mitigations at strategic, operational, and tactical levels. Currently, his focus is on performing Red Team operations and adversary simulations, emphasizing adversary strategy, operational design ,and enterprise post-exploitation.

Emiliano Gatti è professionista nel settore della formazione STEM e progettista di esperienze educative innovative dedicate a coding, robotica, making e nuove tecnologie.

Opera professionalmente con Italmaker, sviluppando percorsi, laboratori e format rivolti a bambini, ragazzi, scuole e docenti, con l’obiettivo di trasformare la tecnologia in uno strumento per allenare logica, creatività, problem solving, pensiero computazionale e capacità di collaborazione.

È inoltre Presidente di Italmaker – Accademia dell’Inventore, realtà impegnata nella diffusione della cultura maker e dell’educazione tecnologica.

Negli anni ha ideato e realizzato workshop, percorsi didattici, competizioni ed esperienze STEM basate sull’apprendimento attraverso il fare, la sperimentazione, la robotica educativa e la prototipazione.

Ha partecipato a Maker Faire Rome con progetti dedicati all’innovazione educativa, ottenendo nel 2025 il riconoscimento Maker of Merit.

A Rome Hack presenta in anteprima Brain Arena, il nuovo format educativo che trasforma coding e robotica in un vero allenamento della mente attraverso missioni, strategia, sfide e problem solving.

Jacopo Jannone is a computer engineer specialized in offensive cybersecurity. He has a strong passion for reverse engineering, which as an information security professional he mainly applies to the analysis of mobile, web and native applications. His interests extend to identification systems, radio frequency communications, embedded systems, and electronics. In his daily job he manages the offensive security team at Satispay, while in his free time he performs security research, develops open source projects, plays CTF competitions, and reverse engineers anything he finds interesting.

Jacopo Moioli is an Offensive Security Engineer at Satispay, trying to break things before others do. Before that, he spent two years in consultancy as a penetration tester and red teamer.

This is his first talk at a security conference. Outside cybersecurity, he is interested in space, aviation and other technical rabbit holes.

Julien is a French security researcher and red team operator at Orange Cyberdefense, where he conducts offensive security assessments and develops tradecraft for adversary emulation.

With a background in software development, his research focuses on offensive security, ranging from password manager security to DCOM abuse. He is also a contributor to open-source security projects including Scapy, Metasploit, Impacket, CrackMapExec, and KeePwn.

His research has been presented at conferences including Black Hat MEA, BruCON, hack.lu and leHACK.

Kirils Solovjovs is Latvia's leading white-hat hacker and IT policy activist. He began programming at age 7, and by grade 9 was already writing machine code directly in a hex editor during lunch breaks. Renowned for uncovering and responsibly disclosing critical vulnerabilities in national and international systems, he is an expert in network flow a
Kirils Solovjovs is Latvia's leading white-hat hacker and IT policy activist. He began programming at age 7, and by grade 9 was already writing machine code directly in a hex editor during lunch breaks. Renowned for uncovering and responsibly disclosing critical vulnerabilities in national and international systems, he is an expert in network flow analysis, reverse engineering, and social engineering. A lifelong command-line enthusiast, he uses bash daily for hacking, automation, and large-scale data processing.
He is the author of the jailbreak tool for MikroTik RouterOS and played a pivotal role in developing e-Saeima, the world's first fully remote legislative system used by the Latvian Parliament. Today, Kirils serves as lead researcher at Possible Securitynalysis, reverse engineering, and social engineering. A lifelong command-line enthusiast, he uses bash daily for hacking, automation, and large-scale data processing.
He is the author of the jailbreak tool for MikroTik RouterOS and played a pivotal role in developing e-Saeima, the world's first fully remote legislative system used by the Latvian Parliament. Today, Kirils serves as lead researcher at Possible Security

I've discovered the beauty of Computer Science by reading "The Universal Computer - The Road from Leibniz to Turing" By Martin H. Davis and "Gödel, Escher, Bach: an Eternal Golden Braid
" by Douglas Hofstadter. Since then, I've been deeply fascinated by the subject. I went to university to study the theory behind computation, algorithms and programming languages, and it is during university that I also met the technicalities behind the beautiful world of computer hacking.

After university I worked as a penetration tester and cybersecurity trainer where I was able to learn the practical challenges that many business have to face when dealing with security from a management point of view as well as from a technical point of view.

Recently I've become a freelance trainer in Italy, helping companies on cybersecurity related topics such as secure coding and threat modeling, and I've started an independent educational project called Esadecimale, which aims to become one of the best places in Italy to learn about Computer Science, programming and Hacking.

Lorenzo Dina is a serial tinkerer, explorer, and cybersecurity enthusiast who has been passionate about networks and information security since a young age. About twenty years ago, he took a step in what he likes to call the “right” direction, turning that passion into a professional career across cybersecurity, digital forensics, and information security management.

He works also as a trainer for companies and universities, regularly contributes as a panelist at corporate events, and speaks at conferences within the cybersecurity community.

As a CNIT mobile security researcher, Lorenzo Valeriani spends his time breaking phones (ethically, of course) and working towards a Ph.D. at the University of Rome Tor Vergata, where he also holds a Master's degree in Computer Engineering. His research focuses on the behavioural analysis of Android malware, new attack and defence strategies and the study of emerging protocol technologies such as eSIMs.

Cresciuto nella golden age dell’informatica pionieristica, il mio percorso è iniziato la sera dell’antivigilia di Natale, quando ho ricevuto in regalo il mio primo Commodore 64. Il pomeriggio di S. Stefano mi sono presentato dai miei genitori con il manuale avanzato di BASIC in mano: «Questo l’ho finito, dove compriamo quello dopo?». Scoprire che "quello dopo" non esisteva è stato il mio primo out-of-bounds: mi ha spinto a imparare l'inglese da autodidatta — mentre a scuola si insegnava solo francese — pur di continuare l'esplorazione.

Nerd per definizione e profonda consapevolezza, vivo di tecnologia, aeronautica, esplorazione spaziale e cultura giapponese, con un solido punto fermo nella Cyber Security e nella vera cultura hacker. Quando stacco dalla tastiera mi trovi attorno a un tavolo da gioco di ruolo: che sia da Master o da giocatore, applico lo stesso approccio da infosec — threat modeling, pensiero strategico, improvvisazione e lavoro di squadra per superare qualsiasi encounter.

I'm Lucrezia and I've been in the RomHack staff since the beginning. During past RomHack's conferences I've helped with the Kids' workshops. I'm 17 and I'm on my last year of high school and I plan to study aerophysics when I go to university.

CTO, open source believer, and full time challenger of "that's how it's always been done." I'm fascinated by how the past explains the present, and how technology quietly rewrites both. For years I've been trading ideas about SaaS, security, and open source from stages and classrooms, nudging people to rethink how we build and who we build with. I run a cybersecurity company with one foot planted firmly in the future, still convinced AI can be a force for good.

Marco Pratesi is a software engineer with a multidisciplinary background in both music and technology. After earning a degree from the “Alfredo Casella” Conservatory in L’Aquila, he pursued his academic path in Computer Engineering at the University of Rome Tor Vergata. He is skilled in operating systems, process management, and software architecture design. Marco has developed expertise in the analysis and development of complex systems, with a particular focus on performance optimization and process efficiency. He collaborates on multidisciplinary projects that combine creativity and technological innovation, contributing with an integrated perspective that bridges art and engineering.

Marco d'Itri has been involved with Internet operations and policy in Italy since the late '90s, and has been a Debian Developer for almost 30 years.
In Debian, he likes to maintain system packages like netbase, kmod, udev and ppp, Vinyl Cache, the BGP RPKI ecosystem and much more.

Mathew Caplan has spent more than 25 years helping organisations navigate cybersecurity challenges and build resilience in an increasingly complex world.

As Director of Professional Services at Orange Cyberdefense⁠, he advises organisations around the world on how to strengthen resilience, manage cyber risk and build trust.

Alongside his leadership role, he is an international cybersecurity speaker and storyteller who turns complex security problems into memorable tales.

Known for blending music, movies and real-world experience, Mathew makes complex cybersecurity concepts understandable, memorable and engaging.

Python backend developer and DevOps
Sociologist by training and passionate about computer science.
Gnu/Linux user, free and open-source software advocate.
Develop in Python and Django is my favorite way to build things.
Python Marche founder and co-organizer

Mateusz Wójcik, an independent security researcher, red team operator, and former programmer specializing in IoT security, loves to find new vulnerabilities in IoT devices, especially those based on architectures like ARM and MIPS.

AWS HERO | Senior Engineering Manager | IT Strategy & AI Governance | Infrastructure Architect | Bridging Tech & Business Goals

Trasformo la visione di business in infrastrutture tecnologiche scalabili e performanti. Con oltre 15 anni di esperienza, di cui 10+ focalizzati su architetture Cloud-native e governance di programmi complessi, guido la digitalizzazione della Pubblica Amministrazione e delle imprese con un approccio "hands-on" che garantisce concretezza e velocità di delivery.

Perché collaborare con me:

• Governance su larga scala: Ho gestito portafogli progetti >4M€, coordinando team multi-vendor di 50+ persone con piena responsabilità su budget e KPI.
• Efficienza operativa: Ho ridotto i cicli di release del 60% attraverso l'adozione di pratiche DevOps, CI/CD e Infrastructure as Code (Terraform).
• Visione Architetturale: Guido migrazioni cloud end-to-end (AWS) e modernizzazione di sistemi legacy tramite API-first design e microservizi.
• Leadership & Community: Founder di GDG e AWS User Group Basilicata, credo nel valore dell'evangelismo tecnologico e della formazione come motori di crescita aziendale.

Specializzato nel "bridging" tra stakeholder C-level e team di sviluppo, garantisco che ogni scelta tecnologica sia un investimento orientato al valore.

Security researcher with experience in offensive security in various contexts, mainly web and binary exploitation.

They have a passion for optimizing vulnerability research processes, making finding bugs easier and faster. They do this mainly by developing custom SAST and DAST tooling. Currently working as a security engineer at Secure Network, in Milan.

I'm a cybersecurity Pre-Sales Engineer and Security Architect with over 12 years of experience designing, implementing, and integrating enterprise security solutions across organizations of every size and scale.
In my spare time, you'll probably find me reversing binaries, solving CTF challenges, building random lab environments, or disappearing down a rabbit hole of some new technology that caught my attention. I enjoy taking things apart, understanding the details, and putting them back together, ideally better than before.

Milliways is a group of information security specialists, which has appeared at several hacker camps in Europe and North America since 2003. We plan and build large installations and infrastructure, where we feed and host hundreds of hackers, providing a space for discussions and networking.

See our CCCamp23 talk

Moataz is a cybersecurity expert with over a decade of extensive experience specialising in offensive security. Presently working as a Senior Consultant at Google APT66 advanced offensive security services. Moataz focus lies within the realms of red teaming and intelligence analysis.

Mohamed is a senior Red team consultant at Google Cloud Security - Mandiant team with more than 15 years of expertise in offensive security. He has led and executed dozens of high-impact offensive security services for Fortune 500 companies, financial institutions, government entities, and critical national infrastructure. With a proven track record of identifying and exploiting challenging vulnerabilities in complex environments, Mohamed focuses on diverse initial access vectors and post-exploitation strategies in red team operations. He has also contributed to the security community by publishing tools and researches in various offensive security topics.

A senior security researcher and consultant with over 15 years of field experience in penetration testing, digital forensics, and incident response. Founder of CyberSartoria, a boutique cybersecurity firm focused on offensive security and NIS2/DORA compliance for enterprise clients, and co-founder/CTO of TeamBit, a blockchain and AI software house. Active in 0-day research and responsible disclosure. CEH and ISO 27001 Lead Auditor certified. Community roots going back to Hackmeeting and the Italian underground scene of the late 90s, when IRC was the internet. Regular speaker and participant at security events including Security Summit and RomaHack. Outside the terminal: co-founder of an anti-bullying nonprofit and two-time Olympic torchbearer.

I operate at the intersection of bold vision and brilliant teams. As a Principal Cloud & AI Strategist and Fractional CTO, I partner with companies to architect future-proof cloud solutions and build the high-performing engineering teams needed to execute them.

With over a decade of hands-on experience in Digital Transformation, I specialize in Google Cloud Platform, Generative AI (Vertex AI), and complex multi-cloud architectures. I don't just talk theory, I have built Cloud Business Units from scratch and led mission-critical migrations in fast-paced sectors like Oil & Gas.
My philosophy is simple: an elite strategy is useless without an elite team to execute it, so I build the team first, knowing that the results will follow.
As a passionate advocate for open knowledge, I am a Google Cloud Authorized Trainer, a Google Developer Expert (GDE) for Cloud, and the Community Lead for GDG Campobasso.
Whether I am live-coding a Gen AI agent or sharing insights on the dynamics of engineering leadership, I bring energy, clarity, and deep real-world experience to the stage. I love connecting with people who are eager to challenge the status quo and push the boundaries of what technology can solve.

Pasquale Caporaso is a security researcher for the CNIT NAM National laboratory. His research focuses on computer security and operating systems, general purpose and embedded. Over the years, he has accumulated extensive experience in the world of security. He worked as a Cybersecurity Specialist for the multinational Leonardo spa where he experienced first-hand the attack and defence of Linux operating systems and, as a member of the Italian ethical hacker team mhackeroni, he has participated in numerous Italian and international competitions, including the finals of DEFCON and HackASat CTF in Las Vegas, among the world's biggest hacking competitions.

My journey started with technology. As a self-taught and curious teenager, I spent countless late-night hours exploring the emerging Internet, dismantling computers, and learning to program. That early hacker mindset shaped my long-term interest in complex systems, software, and security.

At a time when cybersecurity was not yet the established professional field it is today, I first applied this mindset in the life sciences, developing a background in molecular biology, marine biology, functional proteomics, and later bioinformatics. As a Senior Bioinformatician at the International Institute of Molecular and Cell Biology in Warsaw, I led the development of scientific tools and databases, while completing a PhD focused on computational biology and data analysis.

Over time, my focus moved decisively toward cybersecurity, where my experience in software engineering, data analysis, and complex-system modelling became directly applicable to digital defence. Today, I serve as CTO at AptGetDefence, leading Incident Response operations, R&D, and secure product development. I also advise organizations on NIS2 compliance, cyber resilience, and strategic security governance.

Recently, I was appointed Adjunct Professor at the University of Padua, where I teach “Internet Security”, combining academic rigor with real-world cybersecurity practice.

My work now focuses on threat mitigation, incident response, secure architectures, and regulatory readiness, helping organizations strengthen their security posture in an increasingly complex threat landscape.

Pietro is CTO and co-founder of MiniMako, where he builds kernel-level runtime security for Linux servers running autonomous AI agents.

Before MiniMako he spent fifteen years in operational cybersecurity: hardening critical infrastructure, reverse engineering, live incident response. Through 2024 and 2025, while claimed DDoS waves hit Italian banks, airports and ports, the systems he had hardened held, not because they reacted faster, but because there was no surface left to hit.

That is where his current work comes from. AI agents in production emit syscalls like any other process, but nobody watches them at that level: application logs capture prompts, not kernel calls. Pietro works on eBPF and LSM hooks to make what an agent actually does observable and stoppable, not what it claims to do.

Senior Purple Teamer @ Tier-1 Global Bank, specializing in adversary simulation, red team operations, and offensive tooling development. Experienced in penetration testing across banking and energy sectors, including Web/Mobile/AD/OT-ICS/Embedded systems in critical infrastructure. Conducts independent hardware security research, holds multiple CVE/ZDI vulnerability disclosures. Co-author of "Introduction to IT Security" (Metasploit chapter) and leads hands-on security training.

Straight from Rieti, in the green heart of northern Lazio, our Pizza Truck crew are professional pizza makers who have spent years perfecting one craft: turning flour, water, and fire into something worth queuing for.

Long before they rolled onto the RomHack Camp grounds, they were feeding hungry crowds at festivals, markets, and events across the region — always with the same wood-fired oven riding along with them. Their approach is refreshingly low-tech in a field full of gadgets: a real wood fire, dough left to rise the slow way, quality local ingredients, and the kind of instinct that only comes from making thousands of pizzas by hand.

For them, a good pizza is not just food — it is a moment where people stop, sit down together, and take a break from whatever they were focused on. That makes them a perfect fit for a hacker camp, where the best conversations often happen around a shared meal after a long day of tinkering.

This weekend they bring their oven, their skills, and their Rieti pride to the woods of Flaminio Village. Come say hello, watch the flames, and grab a slice hot off the peel. 🍕🔥

I'm a Cybersecurity student at the University of Milan pursuing a Master's degree, beginning this year. Before that, I studied Network and Systems Security at the University of Milan. I'm a naturally curious person who loves learning the inner workings of every piece of software I stumble upon.

Rahul is a seasoned Red Team Operator with years of experience executing high-stakes offensive security engagements against hardened global enterprises—from breaching physical perimeters to dismantling cloud-native EDR solutions. As a key player at a top-tier cybersecurity firm, he specializes in crafting undetectable attack chains, weaponizing novel evasion techniques, and developing custom tooling that bypasses industry-standard defenses for clients in banking, telecom, and critical infrastructure. His mission? Hack first, hunt harder.

Rana Khalil is a distinguished red team consultant, with a decade of experience in penetration testing, securing development pipelines, and building comprehensive application security programs. Beyond her technical expertise, Rana is a recognized international speaker, having presented at leading conferences including BlackHat. She is also the founder of an online academy with over 25,000 students, where she shares her extensive knowledge by teaching students how to hack and secure web applications.

With over eight years of hands on experience in offensive security and vulnerability discovery, I specialize in data driven threat hunting across complex product ecosystems. Currently completing a Master of Science in Software Engineering with a focus on deepfake detection using 3D CNNs, I bridge the gap between academic research and advanced exploitation techniques. I have authored three technical volumes, including AI For Red Team Operation and Practical Application Security, while maintaining a global rank of 6 on Hackthebox. My work focuses on architecting resilient defense systems that integrate runtime application self protection and virtual patching to proactively decrease the time to pwn and neutralize emerging threats. By leveraging multi cloud telemetry and offensive research, I have identified over 140 vulnerabilities for major global vendors, ensuring product integrity against sophisticated adversaries.

Riccardo is a Defensive Security Engineer II at Satispay, where he works on detection engineering, security monitoring, incident response, and automation across a large-scale fintech environment.

His focus is on building defensive systems that reduce noise, improve visibility, and turn security data into reliable actions a blue team can use every day.

Splunk is a major part of his daily work — he holds both Splunk Enterprise Certified Admin and Core Certified Power User certifications — and he has also worked on projects combining Splunk with machine learning, including DNS anomaly detection.

In 2026, together with the Satispay Security Team, he placed #1 in Italy and #3 in EMEA at Splunk BOTS, competing against 358 teams.

More recently, Riccardo has been exploring how LLMs and agentic systems can move beyond simple assistants and become part of real defensive workflows. His current focus is on Agentic SOAR: combining n8n, Splunk, automated playbooks, and AI-driven decision making while keeping humans, guardrails, and predictable behavior firmly in the loop.

He likes security automation that can actually be run, tested, broken, and improved — preferably in a lab rather than explained through fifty slides.

At RomHack Camp 2026, he’ll bring that approach to the stage with a hands-on workshop on building AI-assisted defensive automation.

Sanjay Kumar is Head of Security Operations & Threat Intelligence at EYKON, where he leads security operations, threat detection, incident response, and threat intelligence. With more than a decade of experience in cybersecurity, his work focuses on detection engineering, threat hunting, identity-driven attacks, incident response, and translating threat intelligence into actionable defenses. Sanjay is an international cybersecurity speaker who has presented at security conferences and industry events across Europe and the United States, including DeepSec in Vienna, the ICS Cyber Security Conference in Atlanta, Recorded Future PREDICT, Next IT Security in Stockholm, and CrowdTour Helsinki. He is the recipient of multiple cybersecurity and research recognitions, including the Recorded Future Excellence Award for Innovation in Threat Intelligence at PREDICT Europe 2025. Alongside his industry work, Sanjay is a PhD researcher exploring the application of artificial intelligence and machine learning to cybersecurity and threat detection. His interests lie at the intersection of threat intelligence, security operations, detection engineering, identity security, and emerging attacker tradecraft, with a particular focus on turning real-world attack patterns into practical detection and response strategies.

Sean Juroviesky is a dedicated cybersecurity, risk management, and privacy advocate; speaking on those topics at conferences across the world including DEF CON, CypherCon, CornCon, BSides Rochester, SecretCon, Sec-T, and more. Sean also acts as a cybersecurity architect for a large music streaming provider. Beyond their professional pursuits, Sean finds joy in backpacking through the mountains with their adventurous Australian Shepherd, partner, and twins, embracing the serenity of nature and the thrill of exploration.

I currently work as Principal Security Consultant at IMQ Group - Intuity S.p.A., where I conduct penetration testing, secure code reviews, threat modeling, and DevSecOps assessments. Alongside consulting, I'm involved in academia as external professor for the Cyber Security Master's program at the University of Bologna.

Offensive Security Researcher, with a soft spot for Windows internals and Active Directory. Ever since I was a kid I wanted to know what was happening under the hood, taking things apart just to understand why they worked, and that itch never went away; it just grew into a passion for breaking and understanding Windows environments.

Malware nerd, OT Security tester at [redacted].
As a teenager, I wanted to be a journalist; I guess Plan B worked better... for now.
I know a couple things about OS internals, EDRs, and macOS security.

Alessandro Serpi is a Defensive Security Engineer at Satispay. Focused in building robust SIEM and SOAR architectures, he specializes in automating incident response pipelines and designing cross-functional tools that extend traditional cybersecurity capabilities into adjacent domains, such as fraud detection.

Offensive Security @ Mentat.
I'm a cybersecurity professional specializing in penetration testing, offensive security, and security research. Since 2017, I work mostly on vulnerability research and development.
I am also a member of the core development team behind gulp, an open-source incident response tool designed to streamline security operations and analysis.

Hi!
I am a vulnerability researcher and a Computer Engineering student.
In my free time I like playing CTF competitions with the fibonhack team :)
My main interests are software exploitation and console hacking.

Fabio Carletti aka Ryuw è un White Hat del gruppo (SoldierX Hacker team).

Esperto di sicurezza informatica con una vasta esperienza nel campo della protezione dei sistemi, delle reti e dei dati sensibili. Con più di 20 anni di esperienza nel settore della sicurezza informatica, ha lavorato con diverse organizzazioni per implementare strategie di difesa avanzate e mitigare le minacce informatiche in continua evoluzione.

Collabora come membro volontario del Tor Project team.

Ospite di rilevanti eventi italiani riguardanti la privacy, gnu/linux e software open source dedica le sue energie alla ricerca nella sicurezza informatica.

Fibonhack is a CTF team founded in Pisa in 2019 by a group of students from the University of Pisa, following the CyberChallenge.it program. Over the years, they have competed in numerous competitions and assisted the University and local schools with cybersecurity training. The group has also organized several CTFs, such as the Internet Festival CTF 2023 and MOCA CTF 2024.

Beyond competitions, the team is actively involved in organizing and participating in events to raise cybersecurity awareness.

Dr. Zago holds a PhD from the University of Murcia, Spain. He is currently based in Verona, Italy, working as a cybersecurity engineer (official registration code VR-A-4783). Since 2024 he works for the Oniverse Group as Cyber Security engineer.

His research has focused on Artificial Intelligence for cybersecurity, including machine learning solutions for network intrusion detection systems, big data and sentiment analysis to identify social bots on social media platforms; and, anomaly detection in users' behavioural patterns for authentication and authorization purposes.

Hey, I'm m3ssap0! I do AppSec stuff - mostly web, I work as a Security Engineering Manager and I organize Meethack meetups in Torino every week. Some years ago, I used to play CTFs. Now I am a beginner carnivore plants and terrariums grower.

mc.fly

Old hacker, works in software development in critical infrastructure. NPC in a computer game.
Works in security since 20+ years, likes to talk on conferences oder things that come to his mind.

Pre-2000 history at the CCC, started milliways.

I'm Giovanni Mellini, aka merlos, one of the founders of the non-profit association Cyber Saiyan that organizes RomHack Camp.

I occasionally speak on public community events, schools and universities.

Michele Pietravalle costruisce Tesla Coil dall’età di 15 anni e, dopo oltre 25 anni di passione e sperimentazione, ha portato le sue bobine a livelli sempre più evoluti in termini di tipologia e potenza. La sua ricerca lo ha condotto a dar vita a VoltagePyromania, un progetto musicale e scenico che unisce fulmini ed elementi di fuoco in un’esperienza artistica unica e immersiva.

toctou holds a master’s degree in Cybersecurity Engineering from the University of Verona. He began his career as a cybersecurity analyst before taking a sharp turn into database administration, becoming a Senior Oracle Database Administrator. With over ten years of experience in IT, he recently returned to his roots, making another career change to become a penetration tester. He holds the OffSec Certified Professional (OSCP) and OffSec Experienced Penetration Tester (OSEP) certifications. A cybersecurity enthusiast, he is always eager to expand his knowledge and hone his practical security skills in his spare time. Alongside his main role, he currently creates vulnerable machines for OffSec as a freelance author.