Protocol-Hopping C2: Transport-Agnostic Command & Control That Won't Die - Francine Solheim

¥app.alert(1) is the new alert(1): PDFs as a vector to inject JavaScript in web apps - Luigi Gubello

From WAN to NAS: A Pwn2Own Journey Through the SOHO Attack Surface - Daan Keuper - NDC Security 2026

Attacking AI - Jason Haddix - NDC Security 2026

Secure and Compliant APIs - By Design - Daniel Sandberg & Tobias Ahnoff - NDC Security 2026

Beyond the Commit: Weaponizing and Hardening GitHub Actions - Niek Palm - NDC Security 2026

Have I Been Pwned - A Passkey Journey - Stefán Jökull Sigurðarson - NDC Security 2026

How to Know Your Client Is Real: Hardware-Backed Authentication Patterns - Victor Lyuboslavsky

Your Website Is Running Code You’ve Never Seen - Scott Helme - NDC Security 2026

sshlogin: securely authenticating to remote Linux systems via ... - Ignat Korchagin

Learning security monitoring through failure - Truls Dahlsveen - NDC Security 2026

Connecting the dots to go from tabular security incident data to behavioral graph understanding

The Risky Business, of AI Illiteracy - Sean Juroviesky - NDC Security 2026

Post-quantum cryptography for .NET developers - Filip W. - NDC Security 2026

Three decades of curl - Daniel Stenberg - NDC Security 2026

Hijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits-Mackenzie Jackson

Is Your Approach to Pipeline Security Flawed? Rethinking CI/CD Security - Patricia Rodrigues

Anti-Patterns: How to Not implement a Cloud Security tool - Johan Paramanathan - NDC Security 2026

What's New in ASVS V5 - Eden Yardeni - NDC Security 2026

MITRE ATT&CK for Developers - Chris Ayers - NDC Security 2026

Worms in our software supply chain - Where do we go from here? - Charlie Eriksen - NDC Security 2026

The server that talked back: a deep dive into SSRFs - Sofia Lindqvist - NDC Security 2026

Safe by design: the UX of secure banking - Dora Makszy - NDC Security 2026

ASP.NET Core meets OWASP Top 10 2025 - Anders Abel - NDC Security 2026

Won't somebody please think of the children!? - Niall Merrigan - NDC Security 2026

What we can learn from the World's Biggest Heists - James Birnie - NDC Security 2026

Getting Authorization Right in .NET: Patterns, Pitfalls... - Michele Leroux Bustamante

Keynote: 25 Years of the Microsoft SDL - Michael Howard - NDC Security 2026

Solutions That Evolve: Building Self-Improving Systems with Genetic Algorithms - Barry Stahl

Flying a drone with twitter, bananas & Web APIs - Nhlanhla Lucky Nkosi - NDC London 2026

Trapped in the AI Error Loop: Why Smart Systems Keep Making Dumb Mistakes - Omphile Matheolane

The New Frontend Toolkit: Popover API, Dialog, and Next-Gen CSS - Eric Veliyulin - NDC London 2026

Coding 4 Fun: 8-bit game emulation in .NET - Alex Thissen - NDC London 2026

Hello JARVIS - Building Voice Interfaces for Your LLMS - Nathaniel Okenwa - NDC London 2026

How to do half-assed UX - Ash Banaszek - NDC London 2026

Going Passwordless - A Practical Guide to Passkeys in ASP.NET Core - Maarten Balliauw

Stop Treating LLMs Like REST APIs - Jeff Fran & Jack Pearce - NDC London 2026

Postgres and OpenAI - a match made in Azure - Giorgi Dalakishvili - NDC London 2026

Accessibility by Everyone (and for Everyone) - Amy Kapernick - NDC London 2026

RolePl-AI - Jo Franchetti - NDC London 2026

Optimizing your HttpClient usage - Nico Vermeir - NDC London 2026

Application Performance Optimisation in Practice - Steve Gordon - NDC London 2026

Blazor Authentication? Hold My Beer! - Roland Guijt - NDC London 2026

The 1 Trillion Pixel Maze: My Decade-Long Obsession with C# Optimization - Davy Davidse

Getting maximum mileage from a minimal number of tests - Andrew Poole - NDC London 2026

Code that writes code - .NET Source generators - Glenn F. Henriksen - NDC London 2026

OpenTelemetry At Scale 101: Intro to OpAMP - Aakansha Priya &Adriana Villela

HTMX & ASP.NET Razor Pages – Web development without the JavaScript pains - Kevin DeRudder

A Defence of Technical Excellence - Chris Simon - NDC London 2026

How to Git Away with Murder - Sergès Goma - NDC London 2026

Meditations on Code As Art - David Whitney - NDC London 2026

If only I had known ... - Hannes Lowette - NDC London 2026

Digging into the Matrix: Practicing Code Archaeology - Arthur Doler - NDC London 2026

Building AI That Learns and Adapts: A Case Study in MRI Diagnostics - Agata Chudzińska

Crafting Intelligent Agents with Context Engineering - Carly Richmond - NDC London 2026

Building Secure Infrastructure for Productive AI Agents - Eric Paulsen & Jiachen Jiang

Between the Layers– Interpreting Large Language Models - Michelle Frost - NDC London 2026

From Model Integration to Agents: Building Intelligent .NET Applications - Gill Cleeren

How I used AI voice to help me play Magic: The Gathering - Michelle “MishManners” Duke

AI Agents Need Permission Slips - Heather Downing - NDC London 2026