Bio:

Dmitry Kurbatov is the Co-Founder and CTO of SecurityGen, a cybersecurity firm dedicated to securing telecom infrastructures. He leads a research-driven team that studies real-world attacker tactics and techniques to uncover actual vulnerabilities and weaknesses being exploited. By focusing on how bad actors operate, SecurityGen identifies critical protection gaps and helps operators implement effective and efficient defenses across their infrastructure.

Abstract:

Major telecom breaches such as SK Telecom and Salt Typhoon continue to occur despite growing awareness and investment in network security. In this talk, we’ll explore why these incidents are happening and what they reveal about the current state of telecom cybersecurity.

We will examine how control plane protocols like SS7, Diameter, and GTP remain vulnerable and actively exploited, why the promised security advantages of 5G often fall short in practice, and how regulatory blind spots and certification schemes are leaving critical gaps open for attackers.

Most importantly, we will outline practical steps that operators, regulators, and security professionals can take to address these challenges more effectively.

If you're involved in securing telecom infrastructure — or simply an everyday user relying on communications services — this talk will offer valuable insights into the risks and what can be done about them.

Points to be Covered:

• Why major breaches (like SK Telecom and Salt Typhoon) are happening
• How control plane protocols like SS7, Diameter and GTP continue to be exploited
• Why the security promises of 5G fall short in real-world deployments
• How regulatory blind spots and certification schemes are leaving doors open for attackers
• How these challenges can actually be addressed

Bio:

Cyber Security Leader by the day and a Cyber Whisperer by the night – driving innovations and research in the industry as OWASP Board Member, demystifying complex jargons and mentoring aspiring security leaders on various forums like EWF, WiCyS etc.

Helping organizations build secure, resilient products—because "ship it and hope for the best" isn’t a security strategy.

With expertise spanning Security Architecture, Supply Chain Security, Privacy by Design, Zero Trust, Ransomware Recovery, and SDL, I ensure that security isn't just a checklist—it’s woven into every line of code and every architectural decision.

And when I’m not shaping security strategy, innovating with AI Security Engineering or securing cloud environments, you’ll probably find me exploring new cities, sharing security insights, speaking at industry events, or secretly judging bad password hygiene and your lack of privacy on Instagram!

Abstract:

As AI systems evolve from passive tools to autonomous agents capable of planning, complex reasoning, and taking actions, traditional threat modeling approaches fall short. In this session, we explore the unique security risks introduced by Agentic AI systems and walk through a framework to threat model AI agents.