One of Japan's Largest International Cybersecurity Conferences "CODE BLUE 2026" Announces Full Program Registration Ends November 10

The CODE BLUE Organizing Committee has announced the full program for the international cybersecurity conference “CODE BLUE 2026” (Training: November 11–15; Conference:November 17–18, Shinjuku Ward, Tokyo).

CODE BLUE 2026

Five training courses will be held from November 11 to 15. A diverse program is planned, including keynote speeches, presentations selected through an open call for papers (CFP), presentations by sponsoring companies (OpenTalks), contests and workshops, and booth exhibitions by sponsoring companies. A networking party will also be held during the event.

● Cutting-edge training to hone professionals’ practical skills

From penetration testers tackling cutting-edge attack techniques to incident responders honing their skills in log analysis and forensics, and security engineers driving automation through AI—we’ve prepared practical training courses designed to strongly support the technical development of professionals active on the front lines.

● A Conference Featuring Cutting-Edge Discussions

The conference will feature presentations covering a wide range of perspectives, including advanced vulnerability analysis, international cybersecurity governance, and security assessments of various platforms.

The keynote speakers will be Christian Van Heurck, Deputy Head of the Capacity Building Unit at the European Union Agency for Cybersecurity (ENISA), and Ioannis Agrafiotis.Under the theme “Cybersecurity in the Era of Frontier AI,” they will discuss defense strategies and the importance of capacity building in the age of AI.

Additionally, the sponsor-sponsored sessions (OpenTalks) will feature high-level presentations on par with the selected talks, with presentations by companies and experts active on the front lines covering topics such as multi-layered defense, governance, Agentic SOC, practical OSINT, and incident response.

● A Variety of Hands-On Contests and Workshops

The “Contests and Workshops” that will enliven the event will feature a lineup of “Villages” (hands-on exhibition and participation areas) in specialized fields such as space,healthcare, automotive, and critical infrastructure (ICS), among other specialized fields. We will also offer a diverse range of hands-on programs, including practical CTFs, incident response contests, and introductory workshops on threat intelligence.This is a valuable opportunity to experience cutting-edge security technologies firsthand by seeing, touching, and learning.

■ Training Courses: November 11–15

[Training Course Names, Dates, and Instructors (Titles Omitted)]

●OffSec EXP-401: Advanced Windows Exploitation (OSEE)

Dates: 5 days, November 11–15 / Instructor: OffSec Trainer

●DEaTH by Windows: Detection Engineering and Threat Hunting with Yamato Security Tools and AI

Dates: 3 days, November 13–15 / Instructor: Zack Tanaka

●The Browser as a Crime Scene: Browser Forensics and AI-Assisted Investigation [CodeBlue Exclusive]

Dates: 3 days, November 13–15 / Instructor: Saksham Tushar

●AI AppSec Robots: Building Real-World Agents for Application Security

Dates: 2 days, November 14–15 / Instructor: Haricharana S.

●Crownless Shield - A Deep Dive into Modern Defensive Operations

Dates: 2 days, November 14–15 / Instructor: Mars Chen

*Please visit the official website for details on each training course.

[Japanese] https://codeblue.jp/program/trainings/

[English] https://codeblue.jp/en/program/trainings/

*Pre-registration for training courses closes on November 8.

■Conference: November 17–18

[Track 1 Schedule (Keynotes & CFP-Selected Presentations)]

● Day 1 (November 17)

Presentation Title (Speaker: Titles Omitted)

09:00 Keynote: Cybersecurity and Capacity Building in the Era of Frontier AI (tentative)

　　　 (Christian Van Hoek, Yannis Agrafiotis)

10:10 [Pwn2Own Berlin 2026 $20,000] Agent2Shell: Your AI Coding Agent Already Ran the Attacker's Code

 　　　(Tomoki Tsuji)

11:00 AI vs. AI: AI-Assisted Research into a Privilege Escalation Bug in the Google Pixel AI Coprocessor

　　　 (Poh Kang Yu)

11:50 ChatMate: Remote Prompt Execution via Sandbox Escape

　　　 Remote Prompt Execution on AI Assistants

　　　 (Ori Lahav)

13:40 The Evolution of Adversarial AI: Stories from the Front Lines of Threat Intelligence

　　　 (Daniel Kapelman Zahra)

14:30 From the Rebellious Cities: How Iranian APTs spy on their own people

　　　 (Eliad Kimhy, Subhajeet Singha)

15:30 Quality Assurance for Incident Response in the Age of AI

　　　 (Shusei Tomonaga, Yuki Yano)

16:20 In Origin We Trust: Breaking Chromium from Its Privileged Side

　　　 (Orange Tsai)

17:10 Pass-the-Device: Transplanting SASE/VPN Trust After Endpoint Compromise

　　　 (Ruslan Sayfiev)

18:00 Too Close to the Metal: Attacks on GPU NeoｰCloud from Inside and Out

　　　 (Michael Katchinskiy, Yakir Kadkoda)

● Day 2 (November 18)

Presentation Title (Speaker: Titles Omitted)

09:00　Shade Core: Bringing UEFI Attacks Back to Hypervisor-Protected Modern PCs

　　　 (Kazuki Matsuo)

09:50　Vulnerabilities Assembled! The Cross-Component Vulnerability Factory Inside the Windows Kernel

　　　 (Angelboy Yang)

10:40　Five Years of GitHub Monitoring: Unveiling the Lifecycle of Malicious and For-Sale PoCs

　　　 (Ryosuke Yoshimura)

11:30　Operation ShadowCommit - Hidden Ops on Github

　　　 (Jun Hyeong Lee, Daehoo Lee)

13:20  Pwning Agentic Browsers with PleaseFix: A New Vulnerability Class for 0-Click Takeover

　　　 (Stav Cohen, Michael Bargury)

14:10 The Code IS the Law: Private Norm-Making in the Cybersecurity Governance of Outer Space

　　　 (Joanna Kulesza)

15:00 Salt Typhoon's Shadow: Japan and the Staging Grounds Next Door

　　　 (Christopher Blatcha)

15:50 Physical Intrusion of Major Plants and Business Risk Assessment using CPSF: Countering Hybrid Physical-Cyber Attacks

　　　 (Daisuke Ota)

16:40 When the Spectrum Becomes the Battlefield: Defending Municipal IoT Under Jamming

　　　 (Pavlo Chernikov)

17:30 Defending Critical National Infrastructure in a Hybrid Threat Landscape

　　　 (Ivan Kalabashkin)

[Track 2 Schedule (OpenTalks・U25: Youth Session)]

● Day 1 (November 17)

Presentation Title (Sponsoring Company)

10:00 Threat Trends in AI Agents and Multi-Layered Defense with Secure AI Gateway

　　　 (Mitsui Bussan Secure Directions, Inc.)

10:40 Cheap Exploits, Scarce Judgement: Human Resilience in Japan's Active Cyber Defense Era

　　　 (OffSec)

11:20 Part 1: Part 1: Why Frontier AI Is Rewriting Cyber Warfare: Preparing for AI That Can Serve as Both Sword and Shield(Hitachi Systems, Ltd.)

　　　 Part 2: China's Military Use of Artificial Intelligence(Bonji Ohara Senior Fellow Sasakawa Peace Foundation)

13:00 How to Work with Threat Intelligence

　　　 (Panasonic Holdings Corporation)

13:55 Part 1: Bringing World-Leading Expertise to AI: The "AI White Hacker" Training Initiative

　　　 Part 2: Beyond "/goal find vulnerabilities": Making AI Assess, Not Just Find

　　　 (GMO Internet Group, Inc.)

15:00 Navigating Frontier AI Risks and Governance: Lessons from Japan and Global Standards

　　　 (SCSK Security Corporation)

15:40 Unknown Assets, No Time to Wait for KEV: What ASM and Risk-Based Vulnerability Management Can—and Can't—Do in the AI Era

　　　 (Macnica, Inc.)

16:20 oward an Agentic SOC That Surpasses Expert Analysts: Organizational Knowledge Injection and Harness-Based Control

　　　 (NRI Secure Technologies, Ltd.)

● Day 2 (November 18)

[Presentation Titles (Speakers: Titles Omitted, Sponsoring Companies)]

09:00 U25: No Context, No Consent: A Systematic Analysis of LNA Bypasses in Firefox’s Internal Request Paths

　　　 (Rintaro Kawasugi)

09:50　U25: Out of LINE：QR Code to Wormable RCE in LINE Client

　　　 (Lin HongｰTen)

10:50　MIBleed: An 11-Year-Old Bug Every Tool Missed

　　　 (SSD Labs Japan)

11:30　Vulnerability Management in the Frontier AI Era: Closing the Gap Between Attackers and Defenders

　　　 (NTT DATA INTELLILINK Corporation)

13:00  After a Cyber Incident: What Every Company Must Do Next — Guidance from Legal Experts

　　　 (MS&AD InterRisk Research & Consulting, Inc.)

13:40 Attribution of Threat Actors Using OSINT 2026

　　　 (NTT Security (Japan))

14:20 Hunting C2 Infrastructure from Abused ManageEngine Servers: Tracing and Analyzing ValleyRAT and AtlasRAT

　　　 (NEC Corporation)

15:00 What 1.18 Million Real-World Data Points Reveal: Safety and Guardrail Design for AI Agents in Organizations

　　　 (HireRoo, Inc.)

[Track 3 Schedule (Bluebox: Introduction to OSS, etc.)]

● Day 1 only (November 17)

Presentation Title (Speaker: Titles Omitted)

12:00 Antigent: An Autonomous Counter-Agent Against Agentic AI Attacker

　　　 (Hiroaki Toyota)

13:00 One Harness, Three Security Agents: Recursive Language Models in Practice

　　　 (Syue Siang Su)

14:00 Turncoat: From Coding Agent to C2 Agent

　　　 (Michael Telloyan)

15:00 vwhois: A Practical WHOIS Parser Conquering the Wilderness of All TLDs

　　　 (Hiroki Hada)

16:00 Static Analysis for AI Applications: From Taint Tracking to Exploit Generation

　　　 (Alisha Gupta)

17:00 AgentShield: Stopping a Rogue AI Agent in the Linux Kernel

　　　 (Weixiao JI, Qingzhe Jiang, Leandro Li)

*Please visit the official website for details on each presentation.

[Japanese] https://codeblue.jp/program/time-table/

[English] https://codeblue.jp/en/program/time-table

*Japanese titles and speaker names are subject to change.

■Contest & Workshop: November 17–18

1F CONFERENCE ROOM: Villages

Title, Organizer, and Schedule

●Aerospace Village (Aerospace Village)

November 17–18

●Biohacking Village (Biohacking Village)

November 17–18

●Car Hacking Village at CODE BLUE 2026 (Car Hacking Village)

November 17–18

●ICS Village (ICS Village)

November 17–18

■B2 Track 2

Title, Organizer, Dates

●Incident Response Contest - Let's Think It Through Together (Hitachi Systems, Ltd.)

November 17–18

●Hacker X Hacker: A Hack the Box CTF (Hack the Box)

November 17–18

●Introduction to Threat Intelligence (Panasonic Holdings Corporation)

November 17–18

●Aerospace Cybersecurity Village (Koichi Toriumi)

November 17–18

●The Wired Village (Season Cherian)

November 17–18

■B2 Rooms

Title, Organizer, Dates, Venue

●Practical macOS DFIR (Bhargav Rathod)

November 17, Room 2

●LCL-Tokyo Autumn 2026@CODE BLUE (LCL-Tokyo)

November 17, Room 1

●CyberTAMAGO (CyberTAMAGO)

November 18, Room 1

*Please visit the official website for details on each contest and workshop.

[Japanese] https://codeblue.jp/program/contests-workshops/

[English] https://codeblue.jp/en/program/contests-workshops/

■CODE BLUE 2026 Event Overview

[Training]

Date and Time: Wednesday, November 11, 2026 – Sunday, November 15, 2026

Venue: Bellesalle Shinjuku Grand Conference Center

　　　(5th Floor, Sumitomo Realty Shinjuku Grand Tower)

*Dates and participation fees vary by training session. Please check the official website for details.

[Japanese] https://codeblue.jp/program/trainings/

[English] https://codeblue.jp/en/program/trainings/

[Conference]

Date and Time: November 17 (Tue) – November 18 (Wed), 2026

Venue: Bellesalle Takadanobaba

　　　　(Sumitomo Realty Shinjuku Garden Tower, B2 & 1F)

Languages: Simultaneous interpretation in Japanese and English (except for some presentations)

Format: In-person event

Participation Fee:

1. Conference Ticket

(Includes access to all areas, participation in the networking party, and early access to archived videos)

Regular Price: 98,000 yen (tax included): June 1 (Mon) – November 10 (Tue)

On-site: 128,000 yen (tax included): Tuesday, November 17 – Wednesday, November 18 (purchased at the venue on the day of the event)

2. Visitor Ticket

(Restricted access to certain areas; does not include participation in the networking party; does not include early access to archived videos)

Regular Price: 28,000 yen (tax included): June 1 (Mon) – November 10 (Tue)

On-site: 32,000 yen (tax included): November 17 (Tue) – November 18 (Wed) at the venue

Pre-registration:

Please register via the “Registration” page on the official website.

[Japanese]　　 https://codeblue.jp/registration/

[English]　　　 https://codeblue.jp/en/registration/

[For the Press] https://codeblue.jp/press-registration/

Website: https://codeblue.jp/

Social Media: [X (formerly Twitter)] https://x.com/codeblue_jp

　　　　 　 [Facebook] https://facebook.com/codeblue.jp

　　　　 　 [LinkedIn] https://www.linkedin.com/company/codeblue-jp

Organizer: CODE BLUE Executive Committee

Operated by: CODE BLUE Secretariat (Zesuroku Co., Ltd.)