Kaspersky has announced the agenda for the 18th edition of its Security Analysts Summit (SAS 2026), scheduled to take place from 20 to 23 October in Bali, Indonesia. More than 200 cybersecurity specialists and experts from around the world are expected to attend.
This year’s summit adopts the theme “Cyber Chaos,” moving away from the traditional format of technical conferences. The focus is on encouraging creative thinking and strengthening collaboration among researchers to address evolving cyber threats.
The agenda includes the disclosure of serious security vulnerabilities and the presentation of investigations into complex attacks targeting multiple digital sectors, from diplomatic systems and gaming devices to smartphones and artificial intelligence applications.
Cyber Espionage Beyond Operating System Boundaries
The summit highlights advanced cyber espionage threats that use stealth techniques capable of bypassing traditional protection tools.
Georgy Kucherin, from Kaspersky’s Global Research and Analysis Team, will present a campaign using malware that targets UEFI firmware in diplomatic bodies. Suguru Ryu will present new findings on the advanced methods used by the Lazarus advanced persistent threat (APT) group.
Vulnerabilities Affecting Gaming Devices, Cars, and Phones
Summit sessions will address malware and security vulnerabilities targeting consumer devices, automotive systems, and mobile devices.
Dmitry Kalinin, from Kaspersky’s Threat Research department, will reveal new details about a campaign targeting Android-based head units in cars.
Security expert Andy Nguyen will show how security vulnerabilities in gaming devices allowed researchers to run Linux on a PlayStation 5.
In a related context, independent security researcher Victor Pozdov will explain how a remote code execution vulnerability in Counter-Strike and Dota 2 provided access to players’ computers.
Alex Turing, from the XLab laboratory, will present an analysis of the Kimwolf network, a massive botnet targeting Android TV devices, with an attack capacity of 31.4 terabits per second, according to the statement.
Alfie C. G. from Cellebrite Labs will also analyze the Rocket vulnerability in iOS, which was exploited within the Coruna exploit kit.
Artificial Intelligence Enters the Cyber Attack Arena
The summit dedicates part of its program to the intersection of machine learning and cybersecurity, with a focus on attacks targeting AI systems.
Satoshi Tsuji, from Ikotas Labs, will present attack chains for remote code execution without user interaction, explaining how they can bypass security controls related to programming AI systems before the large language model itself is used.
Dr. Jinyang Peng, from Huazhong University, will present an autonomous system based on large language models for finding and discovering security vulnerabilities. He will note its success in automating the discovery and verification of more than 100 zero-day vulnerabilities in major versions of the Android operating system used in smartphones.
Kaspersky: Collaboration Is Essential to Counter Evolving Threats
Igor Kuznetsov, head of Kaspersky’s Global Research and Analysis Team, said that the growing complexity of cyber threats requires combining reliable security tools with direct and effective collaboration between specialized teams.
He added that the Security Analysts Summit, which has brought together threat intelligence experts for nearly two decades, enables the exchange of experience, the building of trusted relationships, and the sharing of important discoveries. He noted that this year’s “Cyber Chaos” theme aims to stimulate thinking outside traditional frameworks and enhance collaboration in confronting advanced attacks.
13 Teams Compete in the SAS CTF 2026 Finals
The summit will also host the global finals of the 2026 Capture the Flag (CTF) competition, with the participation of 13 teams. Eight teams qualified through the professional SAS CTF qualifiers, and five teams come from Kaspersky’s global championship dedicated to academia and the business sector.
Participants will compete under an attack-defense format for a share of a total prize pool of USD 18,000.
Bali will host the summit events from 20 to 23 October 2026. The agenda, list of speakers, and attendance details can be found on the official website: SAS 2026 Security Analysts Summit.