Program

CODE BLUE 2025

Time Table

This event is eligible for CPE credits (CISSP and CDFP).
Please note that participants are responsible for submitting their own CPE credit requests directly to the relevant certification bodies.
CODE BLUE does not process or submit CPE applications on behalf of attendees.

ALL DAY

ALL DAYS
DAY 1

Tue, Nov 18, 2025
DAY 2

Wed, Nov 19, 2025

Tue, Nov 18, 2025 ( Day 1 )

DAY 1

8:00

-
Doors Open
Location :

Track 1(HALL B)

Track 2(HALL A)

Track 3(Room 3)

Category :

Others
DAY 1

8:45

-

9:00
Opening
Location :

Track 1(HALL B)

Category :

Others
DAY 1

9:00

-

9:40
Keynote:Bend the Machine: The Hacker Path to Autonomy in the Real World

by デイビッド・ブラムリー - David Brumley
Location :

Track 1(HALL B)

Category :

Keynote
DAY 1

9:55

-

10:35
AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor

by ビン-ジョン・ジェン - Bing-Jhong Jheng
by パンゼンペン - Pan ZhengPeng
Location :

Track 1(HALL B)

Category :

Technical
DAY 1

10:00

-

10:30
[Mitsui Bussan Secure Directions, Inc.]Agentic Web Security
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

10:00

-

10:40
Azazel System for Emergency Shelters: Rapid-Deploy Portable SOC/NOC on Raspberry Pi

by 杉田誠 - Makoto Sugita
Location :

Track 3(Room 3)

Category :

Bluebox
DAY 1

10:40

-

11:10
[NRI SecureTechnologies, Ltd.]Offense-Driven Defense: Challenging Uncharted Technologies through AI
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

10:50

-

11:30
Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit”

by ビン-ジョン・ジェン - Bing-Jhong Jheng
by ムハンマド・ラムダン - Muhammad Ramdhan
by パンゼンペン - Pan ZhengPeng
Location :

Track 1(HALL B)

Category :

Technical
DAY 1

11:00

-

11:40
BIN2TL: Visualizing Program Dynamics with Perfetto

by マイケル・テロイヤン - Michael Telloyan
Location :

Track 3(Room 3)

Category :

Bluebox
DAY 1

11:20

-

11:50
[Sygnia]Fire Ant: A Chinese Espionage Group Operating Beneath the Hypervisor
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

11:40

-

12:20
Practical Automation of Penetration Testing with Agentic AI

by 豊⽥宏明 - Hiroaki Toyota
Location :

Track 1(HALL B)

Category :

Technical
DAY 1

12:00

-

12:30
[GMO Flatt Security Inc.]TBA
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

13:00

-

13:40
Build Your Own Pivoting Lab: A Starting Point for Internal Network Exploration

by フランシスコ・カンテリ - Francisco Canteli
Location :

Track 3(Room 3)

Category :

Bluebox
DAY 1

13:30

-

14:10
Don't judge an audiobook by its cover: taking over your Amazon account with a Kindle

by ヴァレンティーノ・リコッタ - Valentino Ricotta
Location :

Track 1(HALL B)

Category :

Technical
DAY 1

13:30

-

14:15
[GMO Internet Group, Inc.]AI Scorches Everything: Angel, Demon, or Something Else?
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

14:00

-

14:40
Proposal and Implementation of a Reduced Assembly Set Compiler for Enabling CPU Security Measures

by 坂井弘亮 - Hiroaki Sakai
Location :

Track 3(Room 3)

Category :

Bluebox
DAY 1

14:20

-

15:00
Cache the Frames, Catch the Vulnerabilities in Kernel Streaming

by Angelboy・ヤン - Angelboy Yang
Location :

Track 1(HALL B)

Category :

Technical
DAY 1

14:25

-

14:55
[CyCraft Japan Corporation]AI Security in Practice: From Adversarial Injections to Guardrail Defenses
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

15:00

-

15:40
GHARF：GitHub Actions RedTeam Framework

by 久保佑介 - Yusuke Kubo
by マツモトユウキ - Yuuki Matsumoto
Location :

Track 3(Room 3)

Category :

Bluebox
DAY 1

15:05

-

15:35
[S2W Inc.]Focus on "REAL" vulnerability - Prioritizing What Truly Matters in Security
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

15:20

-

16:00
Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing

by ディロン・フランケ - Dillon Franke
Location :

Track 1(HALL B)

Category :

Technical
DAY 1

15:45

-

16:30
[Panasonic Holdings Corporation]Profile of an IoT Vulnerability Likely to be Exploited: An Empirical Study Using Honeypots and OSINT
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

16:10

-

16:50
How to Hack Any Micro-controller with a Raspberry Pi Pico. Easy Fault-Injection by Traffic Mocking

by トンレン・チェン - Tongren Chen
Location :

Track 1(HALL B)

Category :

Technical
DAY 1

16:40

-

17:25
[Hitachi Systems, Ltd.]Part I: Education and Training for Organizational Resilience and Its Context / Part II: Geopolitical Risks Related to Cyber Domain Issues
Location :

Track 2(HALL A)

Category :

OpenTalks
DAY 1

17:00

-

17:40
PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry - Mercedes-Benz, Volkswagen, Skoda

by ミハイル・エフドキモフ - Mikhail Evdokimov
Location :

Track 1(HALL B)

Category :

Technical
DAY 1

17:50

-

18:50
Panel Discussion:The Present and Future of AI and Security (TBD)

by デイビッド・ブラムリー - David Brumley
by エヴァン・ダウニング - Evan Downing
by ペク・ミヌ - Minwoo Baek
by タイラー・ナイスワンダー - Tyler Nighswander
Location :

Track 1(HALL B)

Category :

Panel Discussion

Time Table

Talk Search

Tue, Nov 18, 2025 ( Day 1 )

Doors Open

Opening

Keynote:Bend the Machine: The Hacker Path to Autonomy in the Real World

AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor

[Mitsui Bussan Secure Directions, Inc.]Agentic Web Security

Azazel System for Emergency Shelters: Rapid-Deploy Portable SOC/NOC on Raspberry Pi

[NRI SecureTechnologies, Ltd.]Offense-Driven Defense: Challenging Uncharted Technologies through AI

Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit”

BIN2TL: Visualizing Program Dynamics with Perfetto

[Sygnia]Fire Ant: A Chinese Espionage Group Operating Beneath the Hypervisor

Practical Automation of Penetration Testing with Agentic AI

[GMO Flatt Security Inc.]TBA

Build Your Own Pivoting Lab: A Starting Point for Internal Network Exploration

Don't judge an audiobook by its cover: taking over your Amazon account with a Kindle

[GMO Internet Group, Inc.]AI Scorches Everything: Angel, Demon, or Something Else?

Proposal and Implementation of a Reduced Assembly Set Compiler for Enabling CPU Security Measures

Cache the Frames, Catch the Vulnerabilities in Kernel Streaming

[CyCraft Japan Corporation]AI Security in Practice: From Adversarial Injections to Guardrail Defenses

GHARF：GitHub Actions RedTeam Framework

[S2W Inc.]Focus on "REAL" vulnerability - Prioritizing What Truly Matters in Security

Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing

[Panasonic Holdings Corporation]Profile of an IoT Vulnerability Likely to be Exploited: An Empirical Study Using Honeypots and OSINT

How to Hack Any Micro-controller with a Raspberry Pi Pico. Easy Fault-Injection by Traffic Mocking

[Hitachi Systems, Ltd.]Part I: Education and Training for Organizational Resilience and Its Context / Part II: Geopolitical Risks Related to Cyber Domain Issues

PerfektBlue: Universal 1-click Exploit to Pwn Automotive Industry - Mercedes-Benz, Volkswagen, Skoda

Panel Discussion:The Present and Future of AI and Security (TBD)

Wed, Nov 19, 2025 ( Day 2 )

Doors Open

Dissecting FINALDRAFT: Actionable Intel from a State-Sponsored Multi-Platform Backdoor

Bypassing Anti-Debugging: A Hybrid Real-Simulated Approach to Rootkit Analysis

Deepfake

BOOTKITTY: Multi-OS Trust Chain compromise from Bootkit to Rootkit

Introduction to CICDGuard - Orchestrating visibility and security of CICD ecosystem

Cloud-Wide Contamination: Chaining SSRFs for Tenant Compromise in Azure (CVE-2025-29972)

[NEC Corporation]TBA

Mind the Gaps: Detecting What You Miss in Windows Event Logs (and Fixing It!)

Exploiting Blind Memory Corruption in Cloud Services

[NTT Security Japan]Identifying an attacker using OSINT

[MS&AD InterRisk Research & Consulting, Inc.]Cyber Risk Countermeasures—Now and in the Future: A Chat with MS&AD Insurance Group Representatives and a Special Guest

TOAMI (Casting Net): A Browser Extension Tool for Supporting Phishing Hunters

Invitation Is All You Need! Invoking Gemini for Workspace Agents with a Google Calendar Invite

[SCSK Security Corporation]Understanding the Demand for Cybersecurity Professionals Through Public Job Openings

Uncovering the Past: Reconstructing File Activity from Ext4 and XFS Journals

Behind the Screen: Unmasking North Korean IT Workers' Operations and Infrastructure

[NTT DATA INTELLILINK Corporation]Cyber Regulation in the IoT Era: Institutional Analysis of the EU Cyber Resilience Act and its impact on us

State Sponsored “Cyber Warriors” — North Korean Remote IT Workers

[Future Corporation／Future Secure Wave, Inc.]Threats That Penetrate Multi-Layered Defenses – From Breached Security to Becoming a Breach-Resistant Organization –

YAMAGoya: Open Source Threat Hunting Tool using YARA and SIGMA

The CCEL and the Thin Line Between Cyber Defence and Pre-emption: Japan's Legal and Strategic Pivot

The comparative study of offensive cyber operation-Noudouteki cyber bougyo v.Hunt forward

Closing Keynote:TBA

Closing

Networking Party