Got a talking point for VB2026?... Why not turn it into a poster?

Poster sessions are a great way to engage with your peers, share ideas, get feedback, build connections and learn, all in an informal setting.

Details of this year's posters

Below are some details of the VB2026 posters.

Title: You Can’t Take Down What You Can’t See: The Growing Impact of Phishing Cloaking

Author: Yusuke Osumi (Sumitomo Mitsui Banking Corporation)

Outline:

Phishing cloaking is now becoming more sophisticated, making malicious sites harder to observe through OSINT/CTI services and automated crawlers such as urlscan.io.
Registrars and hosting providers may be unable to verify reported phishing pages because they are located outside the targeted country and are blocked by cloaking.
These challenges increase the cost and effort required for investigation and takedown. We would like to exchange experiences and discuss practical approaches with others facing the same problem.
Modern cloaking goes beyond simple geofencing and User-Agent checks, using emulator detection, residential-versus-hosting IP filtering, and so on. Legitimate CAPTCHA services are also abused.

View full poster .

Title: Mapping Deception Feasibility Across MITRE ATT&CK®

Authors: Veronica Valeros¹, Carlos Catania², Viliam Lisý¹, Harm Griffioen³ (¹ Czech Technical University in Prague, ²National University of Cuyo, ³Delft University of Technology)

Outline:

Cyber deception research commonly assumes a decoy can be placed wherever there is attacker behaviour.
We systematically measured/scored feasibility across all 250 techniques of MITRE ATT&CK.
We found that only 80 of 250 techniques admit a decoy.
A decoy must sit on a sweep path or imitate a sought asset to work.
Only a few tactics with large deception surface: Discovery, execution, credential access, collection

View full poster .