The 18th Security Analyst Summit shreds the predictable corporate playbook with bold cyber anarchy and punk aesthetics
Kaspersky has shared the agenda for its 18th annual Security Analyst Summit (SAS 2026), taking place on October 20-23, 2026, at the InterContinental Bali Resort. Challenging the common format of traditional events, SAS 2026 adopts a unique cyber-anarchy theme where attendees appear as lone rebels and walk their way to write a collective security manifesto. This narrative reflects a fundamental reality in the modern cyber space: the ultimate response to today’s complex threat environment lies in transforming solitary actions into a collaborative cyber-community.
Over 200 participants from around the globe will be attending SAS, and this year's event agenda features critical vulnerability disclosures and incident investigations into highly complex attacks targeting multiple digital sectors.
Spycraft goes pre-OS and next-level
This year's advanced cyberespionage research at SAS exposes highly sophisticated threats that are becoming increasingly adept at evading traditional security tools. Georgy Kucherin of Kaspersky GReAT will detail a stealthy, low-level UEFI bootkit campaign targeting diplomatic entities, while his colleague Sojun Ryu will present new findings on the next-level tactics of the notorious Lazarus APT group.
The threats to daily tech – from consoles and games to mobile devices
SAS will dive into malware targeting consumer systems, automotive control and public media devices. Dmitry Kalinin from Kaspersky Threat Research will provide new details on a campaign targeting Android-based car head units. Security expert Andy Nguyen will explain how key gaming console security bypasses allowed researchers to successfully run the Linux operating system on the PlayStation 5, and independent researcher Victor Pozdov will detail how a remote code execution vulnerability inside Counter-Strike & Dota 2 allowed to get access to gamers’ PCs. Furthermore, Alex Turing of XLab will present an autopsy of “Kimwolf,” a massive 31.4 Tbps Android TV botnet, and Alfie CG from Cellebrite Labs will dissect “Rocket,” an iOS security bypass weaponized in the Coruna exploit kit.
AI attacking AI – the birth of pre-prompt attacks
SAS will focus on the collision of machine learning and cybersecurity. Satoki Tsuji from Ikotas Labs will demo how zero-click Remote Code Execution chains can completely bypass AI-coding guardrails before an LLM is ever invoked. In addition, Dr. Zhiniang Peng from Huazhong University will showcase an autonomous, LLM-driven vulnerability mining system that successfully automated the discovery and verification of over 100 zero-day weaknesses across top Android distributions used by multiple smartphone manufacturers.
“As the global threat landscape grows increasingly complex, safeguarding our digital future requires deploying trusted cybersecurity tools and active, hands-on collaboration between teams. For nearly two decades, the Security Analyst Summit has served as the premier ecosystem for the world's top threat intelligence minds to network, build trusted relationships and share critical discoveries. This year’s cyber-anarchy atmosphere is designed to spark creative, out-of-the-box thinking and forge the collective front needed to take on sophisticated cyberattacks,” comments Igor Kuznetsov, Director of Kaspersky’s Global Research and Analysis Team.
The SAS Capture The Flag (CTF) 2026 Finals will take place during the event. A total of 13 teams – bringing together eight champions from the professional SAS CTF qualifiers and five regional winners from the global academic and corporate Kaspersky{CTF} tournament – will battle in a high-intensity Attack-Defense format for a portion of the $18,000 prize pool.
To find out more about the Security Analyst Summit 2026, its agenda and speakers, and to get tickets, visit https://thesascon.com.
