Positive Hack Talks Kuala Lumpur

Event Date:May 5, 2026
Format:In-person only
Location:Pavilion Hotel Kuala Lumpur Managed by Banyan TreeKuala Lumpur, Malaysia

A free, community-driven cybersecurity conference where real hackers share what they've built, broken, and learned. No marketing, no nonsense. Brutally honest — just the way it should be.

Event Date:May 5, 2026
Format:In-person only
Location:Pavilion Hotel Kuala Lumpur Managed by Banyan TreeKuala Lumpur, Malaysia

A free, community-driven cybersecurity conference where real hackers share what they've built, broken, and learned. No marketing, no nonsense. Brutally honest — just the way it should be.

This stop took place on May 5, 2026.

Next stop: Goa, December 10, 2026 →

Why show up

Hands-on talks

Bug bounty, pentest, red team, OSINT. Real techniques, not theory.

Fresh research

Real cases — and how the vulns were actually found.

Live Q&A

Grill the speakers. Answers you won't get from a blog.

Networking

Meet people who actually break things. No badge-scanning.

See how it went

All photos
Positive Hack Talks Kuala Lumpur: the audience in the hallPositive Hack Talks Kuala Lumpur: group photo of the attendees in the hallPositive Hack Talks Kuala Lumpur: attendees talking over coffeePositive Hack Talks Kuala Lumpur: the hall during Alexander Popov's talkPositive Hack Talks Kuala Lumpur: attendees at the photo wallPositive Hack Talks Kuala Lumpur: a speaker on stage

#PHTalks

Alex Moshkov
@amoshkov

Another legendary shot from #PHTalks Jakarta — keeping this as a tradition for every next con! Unbelievable — 370+ attendees, a record for all past talks. And this photo shows just a part of them.

Standoff Bug Bounty
@StandoffBB

#PHTalks landed in Cairo, Egypt On February 26, the event brought together 200+ hackers for an intense exchange of ideas. An in-person meetup for cybersecurity specialists ready to absorb the latest knowledge on offensive and defensive security and bug hunting.

Positive Technologies Global
@PTsecurity_EN

Thanks, Hanoi! Over 200 cybersecurity pros joined Positive Hack Talks for expert insights, hot topics, and great networking. From bug hunting to tackling top threats, it was a day to remember. Shoutout to our speakers! See you next time! #Cybersecurity #PHTalks

Ronaldo Russel
@RonaldoRussel

PHTalks Sao Paulo was a huge success! Results-driven cybersecurity solutions! #PHTalks My thanks to @amoshkov, the speakers, and the staff!

Kseniia
@naumovax

Finally have a time for tweet. This wednesday I spoke at #PHTalks in Cairo about "Effective new threat detection through generic rules in the network". I want to thank everyone who came, I'm very glad of your active participation and questions. It was a really nice trip :)

Pak Haji
@kusumaa_hadi

Huge thanks to the amazing team behind this incredible event! I'm truly grateful for the opportunity to learn so many new things and connect with such a vibrant, inspiring community. Can't wait for the next one! #CommunityVibes #LifelongLearning #PHTalks

Speakers

That was the line-up. Slides and recordings are on the cards below — for the speakers who agreed to publish theirs; the rest stayed in the room.

Sayaan Alam

Sayaan Alam

Security Researcher & Bug Bounty Hunter

Send a Fax as Anyone, Upload Photos to Any Frame: The Hidden Risks of Authorization in Email-Driven Systems

Muhammad Firdaus Amran

Muhammad Firdaus Amran

Security Analyst (Offensive)

Spray, Pray, Validate: Lessons from AI-assisted Vulnerability Research

Aditya Singh

Aditya Singh

Senior Security Researcher at Siemens Healthineers

Trojan Penguin in the Windows: Advanced Attack Vectors Through WSL

Akshay Jain

Akshay Jain

Senior Product Security Engineer

Dissecting Android RASP: A Practical Reversing Guide

Sagar Tiwari, Shubham Kumar

Sagar Tiwari, Shubham Kumar

Independent Cybersecurity and OSINT Researcher · Senior Information Security Analyst & OSINT Researcher

Dead in the Water: Tracking Ships Through VSAT When AIS Goes Dark

Community stand-ups

That was the community half of the day. Where a speaker agreed to publish, their slides and recording are on the card.

Navenesh Kumar

Navenesh Kumar

Founder, I/O TRIX

Building Malaysia's OT/IoT Cybersecurity Future

Nik Amir Hakim & Adlina Batrisya

Nik Amir Hakim & Adlina Batrisya

Lead Agent MCC & Security Researcher

Breaking the Gatekeepers: How We Sparked Malaysia's New Cyber Talent Movement

Rectifyq

Rectifyq

Security Analyst

Free for all: Curated Threat Intelligence Feed with relevancy to Malaysian Threat Landscape

Positive Hack Talks Host

Alex Moshkov

Community Bro at Positive Technologies

Thank you, KL! Real work on stage, hard questions from the room — that is what these stops are for. See you at the next one.

Alex Moshkov

Program

  1. 08:30 to 09:30, 1 hour

    Check-in & Welcome Coffee

    Welcome to Positive Hack Talks!

  2. 09:30 to 10:00, 30 minutes

    Host Welcome Speech

    Alex Moshkov

    Community Bro at Positive Technologies

  3. 10:00 to 10:40, 40 minutes

    Spray, Pray, Validate: Lessons from AI-assisted Vulnerability Research

    Muhammad Firdaus Amran

    Security Analyst (Offensive)

  4. 10:40 to 11:20, 40 minutes

    Kernel Wars: Anti-Cheat Reversing, BYOVD Exploitation and Mitigations

    Ravshan Rikhsiev

    Security Researcher at ONESEC

  5. 11:20 to 12:00, 40 minutes

    Trojan Penguin in the Windows: Advanced Attack Vectors Through WSL

    Aditya Singh

    Senior Security Researcher at Siemens Healthineers

  6. 12:00 to 12:40, 40 minutes

    Dissecting Android RASP: A Practical Reversing Guide

    Akshay Jain

    Senior Product Security Engineer

  7. 12:40 to 14:00, 1 hour 20 minutes

    Lunch

    No one stays hungry. We provide a full lunch.

  8. 14:00 to 14:40, 40 minutes

    Send a Fax as Anyone, Upload Photos to Any Frame: The Hidden Risks of Authorization in Email-Driven Systems

    Sayaan Alam

    Security Researcher & Bug Bounty Hunter

  9. 14:40 to 15:20, 40 minutes

    Kernel-Hack-Drill Masterclass

    Alexander Popov

    Linux Kernel Developer and Security Researcher at Positive Technologies

  10. 15:20 to 15:50, 30 minutes

    x3 Community Stand-Ups

    • Navenesh Kumar

      Founder, I/O TRIX

    • Nik Amir Hakim & Adlina Batrisya

      Lead Agent MCC & Security Researcher

    • Rectifyq

      Security Analyst

  11. 15:50 to 16:30, 40 minutes

    Dead in the Water: Tracking Ships Through VSAT When AIS Goes Dark

    Sagar Tiwari, Shubham Kumar

    Independent Cybersecurity and OSINT Researcher · Senior Information Security Analyst & OSINT Researcher

  12. 16:30 to 17:10, 40 minutes

    PhantomRPC: A New Privilege Escalation Flaw in Windows RPC

    Haidar Kabibo

    Application Security Specialist at Kaspersky

  13. 17:10 to 17:20, 10 minutes

    Closing Speech

  14. 17:20 to 19:00, 1 hour 40 minutes

    Coffee and Networking

Community friends

Shoutout to our friends from grassroots communities who help us spread the word.

  • RE:HACK
    RE:HACK
  • SherpaSec
    SherpaSec
  • IDSECCONF
    IDSECCONF
  • HITB Security Conference
    HITB Security Conference