Hackers attacking companies are “daily business” in every newspaper. In most cases the company is down for some hours or even days. For a company running critical infrastructure to serve the citizens of Munich, this scenario is a nightmare. How can this vital systems be protected against cyberattacks? What challenges do we face? Which developments do we expect in the future?
Let’s have a look and dive a bit into the world of Operational Technology.

The Bosch Group is a leading global supplier of technology and services in the automotive sector. So get in and let me take you on a short road-trip through the current threat landscape. Let me show you how we pick up speed on vulnerability and incident management, put the brakes on emerging threats and put the pedal to the metal on new security features and solutions. New standards and regulations are popping up as traffic signs to lead the way, but there are many other challenges we have to navigate through with car manufacturers, such as holistic vehicle system security.

No one wants their keys and secrets on GitHub, but one bad push can mean you are suddenly exposed. In the best-case scenario, you discover the issue and fix it before something bad happens, but in the worse case, you don’t find out until it is far too late.

Most devs are familiar with using .gitignore files to prevent Git from tracking specific files and folders, but did you know that you can leverage Git hooks and some open source awesomeness to keep you from accidentally committing your secrets in the first place?

If you are not actively using Git hooks in your workflows, then this talk is for you. Let's look into the .git folder and unlock a whole world of automation possibilities!

What if we could end data breaches for good? That possibility might be closer than you’d think with the adoption of Confidential Computing.

In this session, attendees will learn about Confidential Computing: encrypting data in use within a secure hardware environment called a Trusted Execution Environment (TEE).

We’ll cover why this technology matters, how it works, and deploy working demos of healthcare and fintech use cases. Attendees will leave with ideas of how they can leverage CC using open source software to protect their data.

With the plans of increasing the number of reverse vending machines in Europe, it is relevant to take a look at the implemented security mechanisms of such vending machines [1,2]. Currently, in Austria, most stores provide such machines for the return of glass bottles, however, the government wants to also have an addition of vending machines for plastics. Security plays an important role with these machines, as they exchange the bottles for money and an insufficient security mechanism could allow attackers to practically print money. It is not uncommon for such machines to be targets of malicious actors. [3,4,5] We took a look at the vending machines present in most supermarkets in Vienna and figured out that some machines are not secured enough. In many cases, we found that the generated receipts – used at the cash register to be exchanged for money – are not secure enough. By analyzing several previously printed receipts, attackers can use an ESC printer to create forged receipts. Furthermore, we tested our attack with one store and were able to exchange our forged receipt for real goods. Our results show that this is not a single store that is improperly secured, but rather whole supermarket chains. This makes the vulnerability even more severe as, as far as we can tell, it affects whole supermarket chains that provide such reverse vending machines.