โฆ hearts
Community
by
We build things for the security community and bring everybody together. Knowledge, tools, events, competitions โ open and free for everyone.
67 8 9
10
11a
11b
COMMUNITY BRO ยท POSITIVE TECHNOLOGIES
HEY, I'M ALEX MOSHKOV ๐
I travel the world, meet researchers, and build things that bring the security community closer together. Not as a job description โ as something I genuinely love doing.
If we haven't met yet โ come to one of our events or just drop me a message.
12a
VULNERABILITIES' HOME
The free database we run โ built around researchers, not entries. Every CVE, every trend, every voice.
12b
12d
- 425,000+vulnerabilities
- 56,500+researcher profiles
- dailyupdates
- foreverfree โค๏ธ
12c
dbu.gs โWhat you'll find on dbugs
When a vuln doesn't have a CVE, we assign a PT-ID โ clearly marked, traceable, linked to the researcher. Treated on equal footing with CVE, never second-tier.
K-expertise
PT EXPERTISE
Two teams that publish their work.
13
attacker ~ zsh
PT SWARM
Our offensive security team. 66 CVEs and 439 vulnerabilities in the last 12 months โ every one written up openly on the blog. They breach 90% of client perimeters and tell you exactly how. Good reading.
14
soc-jumphost ~ bash
PT ESC
Proactive threat intelligence, threat hunting, and incident response. Anticipating adversaries, tracking campaigns, uncovering 0days, and delivering actionable, real-world intelligence. Trusted and respected in the global cybersecurity research community.
K-talks
CONFERENCE TALKS
Where our researchers speak
Research presentations by Positive Technologies experts.
K-talks-table
| Speaker | Social | Conference | Topic | When | Status |
|---|---|---|---|---|---|
Mikhail Sukhov PT SWARM | OFFZONE 2026, ๐ท๐บ Russia | IPAHound. Walking along the edges in FreeIPA | Aug 20โ21, 2026 | Done | |
Kseniia Naumova PT ESC | CSST, ๐จ๐ณ China | Navigating the Ocean of Network Dumps: Approaches to Scalable Traffic Analysis | Sep 1โ3, 2026 | Done | |
Mikhail Sukhov PT SWARM | ROOTCON, ๐ต๐ญ Philippines | IPAHound. Walking along the edges in FreeIPA | Sep 23โ25, 2026 | Done | |
Artem Danilov PT SWARM | โ | ROOTCON, ๐ต๐ญ Philippines | SEG fault - when 2 email parsers disagree | Sep 23โ25, 2026 | Done |
Kseniia Naumova PT ESC | KazHackStan, ๐ฐ๐ฟ Kazakhstan | What If We Stop Looking at Email? Hunting Phishing Kits Beyond the Inbox | Sep 29โ30, 2026 | Done | |
Timofey Duditsky PT ESC | โ | ZeroNights, ๐ท๐บ Russia | Slowburn: Breaking System Management Mode via AMD Platform Configuration Blob | Sep 30, 2026 | Done |
Alexander Popov Principal Security Researcher | ZeroNights, ๐ท๐บ Russia | Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via Struct Device | Sep 30, 2026 | Done | |
Alexander Popov Principal Security Researcher | SAS 2026, ๐ฎ๐ฉ Indonesia | Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via Struct Device | Oct 20โ23, 2026 | Upcoming | |
Kseniia Naumova PT ESC | Suricon, ๐ต๐น Portugal | The Power of Correlation: Hunting Unknown Threats with Generic Suricata Rules | Nov 18โ20, 2026 | Upcoming |
- OFFZONE 2026, ๐ท๐บ RussiaDoneMikhail SukhovPT SWARM
IPAHound. Walking along the edges in FreeIPA
- CSST, ๐จ๐ณ ChinaDoneKseniia NaumovaPT ESC
Navigating the Ocean of Network Dumps: Approaches to Scalable Traffic Analysis
- ROOTCON, ๐ต๐ญ PhilippinesDoneMikhail SukhovPT SWARM
IPAHound. Walking along the edges in FreeIPA
- ROOTCON, ๐ต๐ญ PhilippinesDoneArtem DanilovPT SWARM
SEG fault - when 2 email parsers disagree
Sep 23โ25, 2026โ - KazHackStan, ๐ฐ๐ฟ KazakhstanDoneKseniia NaumovaPT ESC
What If We Stop Looking at Email? Hunting Phishing Kits Beyond the Inbox
- ZeroNights, ๐ท๐บ RussiaDoneTimofey DuditskyPT ESC
Slowburn: Breaking System Management Mode via AMD Platform Configuration Blob
Sep 30, 2026โ - ZeroNights, ๐ท๐บ RussiaDoneAlexander PopovPrincipal Security Researcher
Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via Struct Device
- SAS 2026, ๐ฎ๐ฉ IndonesiaUpcomingAlexander PopovPrincipal Security Researcher
Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via Struct Device
- Suricon, ๐ต๐น PortugalUpcomingKseniia NaumovaPT ESC
The Power of Correlation: Hunting Unknown Threats with Generic Suricata Rules
15a
EVENTS
Where we meet in person
The best things happen when people share a room.
15bFor the community
Positive Hack Talks
COMMUNITY MEETUPSFree cybersecurity meetups around the world. Real researchers talking about what they've built, broken, and learned. No marketing, no nonsense. Brutally honest โ just the way it should be.
For the community
Live Q&A with practitioners, fresh research, hands-on demos. OSINT, bug bounty techniques, pentesting, red teaming โ whatever the local community cares about most. Participation is always free.
15c
Positive Hack Talks
Past & Upcoming
Bengaluru
India
October, 2024
Hanoi
Vietnam
November, 2024
Cairo
Egypt
February, 2025
Jakarta
Indonesia
July, 2025
Sao Paulo
Brazil
December, 2025
Kuala Lumpur
Malaysia
May, 2026
Next cityยทto be announced
4TH EDITION ยท MOSCOW ๐ท๐บ ยท 2 WEEKS ON-SITE
Positive Hack Camp
18a
Positive Hack Camp
Positive Hack Camp is an onsite camp in Moscow, organised by Positive Technologies with the support of Russia's Ministry of Digital Development. Two weeks that pull the cybersecurity community together and send everyone home a little more in love with the craft.
18e
EDITIONS SO FAR
- 2024 ยท 1st edition74 studentsCompleted
- 2025 ยท 2nd edition88 studentsCompleted
- 2026 ยท 3rd edition81 studentsCompleted
18d
THE DEAL
- 01
You provide
- Round-trip flight to Moscow
- Visa, if required
- 02
Included
- Accommodation
- Cultural program
- Meals
- Training
- 03
Requirements
- Your English is B1 or higher
- You are a student
- You are confident with Linux or Windows at an advanced user level, including installing software and basic configuration
- You understand how the internet and local networks work
18b
MOSCOW ยท ON-SITE ยท INTERNATIONAL
NEXT EDITION
To be announced
MOSCOW ยท ON-SITE ยท INTERNATIONAL18c
WHAT TO EXPECT
Days split between lectures from practitioners who actually ship โ offensive security, malware analysis, AppSec, infra โ and hands-on labs in local and cloud environments you really attack. Evenings are the community part: CTFs, open conversations, food around the city. Alumni often tell us it's the point where a hobby turned into a career.
19a
Positive Hack Days
19b
POSITIVE HACK DAYS
Part festival, part conference, all community. 500+ speakers, hacker contests, live Standoff cyberbattles, villages, workshops โ and 150K people from 40 countries who show up because they genuinely care about security.
20a
VILLAGERS
Hacker Villages: A Global Community
International teams come together to experiment, learn and innovate.
- Automotive Hacking
- Aerospace
- Malware
- IoT
- AI
- Hardware Hacking
- Crypto & Privacy
- Lock Picking
- ICS / SCADA
- Red Team
- Social Engineering
- and moreโฆ
20b
We're actively inviting international speakers AND village teams to join PHDays. If you're a researcher with a talk, or a community running a hacker village outside Russia and want to host one in Moscow โ reach out to Alex.
CFP opens with PHDays announcement
Local CommunityGatherings
Informal meetups wherever Alex travels โ different cities, different countries. Just the community in a bar, a place with nice coffee, or just walking around the city.
21b
Alex Moshkov
@amoshkov
On my way to Jakarta for #PHTalks, I made a quick stop in Shanghai ๐จ๐ณ to visit the awesome folks from @geekcontop @DarkNavyOrg @0xKira233. Also dropped by @dawnseclab, but was rushing to the airport so fast @flanker_hqd we forgot to take a photo with the team๐ Hope to see you all again soon โ I'll try to make it to GeekCon this year!
Alex Moshkov
@amoshkov
Lunch time during @GEEKCONTOP with @flanker_hqd @hzshang15 @hi_piaca @ihacku @hclxing Nice to meet you everybody!
Alex Moshkov
@amoshkov
Finally a proper conference (???) @avtokyo !!
Alex Moshkov
@amoshkov
Long time no see @jaysonstreet! And nice to meet you @_nunoalmeida_ Tmrw (May 7th) at 7PM @jaysonstreet invites all hackers for an after-GISEC meetup at Pizza Hut at Dubai Mall. Please come and join to chat ๐
Bhavuk Jain
@bhavukjain1
Such a wonderful trip with the gang! Thanks for making it a memorable one ๐ค @XHackerx007 @GodfatherOrwa @HusseiN98D @amoshkov #PHDays #Moscow
Anindya Sankar Roy
@fr3ak_hacks
Had a great time with @m0m0x01d @XHackerx007 @amoshkov at @bsidesahmedabad , Day 1 wrapped up
Harshit Kerai
@KeraiHarshit
An unplanned visit to the shopping centre turned into an unexpected meetup with BSides speakers, a valuable exchange of knowledge, engaging discussions, and memorable experiences. @m0m0x01d, @GodfatherOrwa, @XHackerx007, @MukundBhuva, @h4x0r_dz, @amoshkov.
Jayson E. Street
@jaysonstreet
Was a great #HackerMeetup special shoutout to @_nunoalmeida_ @amoshkov & Thomas. ๐๐ค๐ #HackerAdventures
Alex Moshkov
@amoshkov
An incredible experience before the #PHTalks. Thank you all so much!!๐ฅ๐ @SirBagoza @niksthehacker @naumovax @rosako @amoshkov @0xMalWan @Ellord0Xd @m359ah @SergeyTemnikov2
Mushroom ใญใใณ
@MushroomWasp
Loved meeting amazing hackers and gaining new insights at Positive Hack Talks! @PTsecurity_EN A huge shoutout to @amoshkov for organizing such a unique and inspiring event! Truly one of a kind! โค๏ธ #hacking #BugBounty #ctf
21c
ON THE ROAD
Where Alex is heading next
Conferences, trips and local meetups โ wherever the road leads.
21c-table
| Event | Destination | When | Status |
|---|---|---|---|
HITCON 2026conference | Taipei Taiwan | Aug 21โ22, 2026 | Done |
Off-By-Oneconference | Singapore Singapore | Sep 14โ15, 2026 | Done |
GISECconference | Dubai UAE | Sep 16โ18, 2026 | Done |
Standoff Hacksmeetup | Kuala Lumpur Malaysia | Sep 19โ20, 2026 | Done |
ROOTCON 20conference | Clark, Pampanga Philippines | Sep 23โ25, 2026 | Done |
Power of Community (POC)conference | Seoul South Korea | Nov 12โ13, 2026 | Upcoming |
CODE BLUEconference | Tokyo Japan | Nov 17โ18, 2026 | Upcoming |
ToneguCon 3.0conference | Tokyo Japan | Nov 19โ20, 2026 | Upcoming |
AVTOKYOconference | Tokyo Japan | Nov 21, 2026 | Upcoming |
- DoneTaipeiTaiwanHITCON 2026conferenceAug 21โ22, 2026
- DoneSingaporeSingaporeOff-By-OneconferenceSep 14โ15, 2026
- DoneDubaiUAEGISECconferenceSep 16โ18, 2026
- DoneKuala LumpurMalaysiaStandoff HacksmeetupSep 19โ20, 2026
- DoneClark, PampangaPhilippinesROOTCON 20conferenceSep 23โ25, 2026
- UpcomingSeoulSouth KoreaPower of Community (POC)conferenceNov 12โ13, 2026
- UpcomingTokyoJapanCODE BLUEconferenceNov 17โ18, 2026
- UpcomingTokyoJapanToneguCon 3.0conferenceNov 19โ20, 2026
- UpcomingTokyoJapanAVTOKYOconferenceNov 21, 2026
If you're in town โ let's grab coffee.
Say hi22b
OPEN TOOL ยท NO ADS ยท NO ACCOUNT
The world's cybersecurity calendar
Every security conference, CFP and community event worth knowing about โ gathered in one place, kept current, and free for everyone.
- Auto-synced
Every event re-checked daily โ dates, CFPs and venues verified before they go stale.
- CFP deadlines
Submission deadlines you see coming, with closing-soon calls always on top.
- Trip planner
Heading somewhere? See the other cons worth the trip โ nearby and around the same dates.
- Free & open
Star events, export to .ics, share a link. No account, no email, no tracking.
MayJunJul
MTWTFSS
22a
STANDOFF 365
The ecosystem for offensive security practitioners
Bug bounty, live hacking events, hyperrealistic attack-defense competitions, and a 24/7 training cyber range โ under one roof.
22c
EARN
Standoff Bug Bounty
Hunt real bugs in real companies.
Find real vulnerabilities in real companies and get paid. A large community of serious hunters. Private programs for the best ones.
- $5.5M+PAID OUT TO RESEARCHERS
- 0RESEARCHERS ONBOARD
- Since 2022RUNNING YEAR-ROUND
22d
MEET AND CELEBRATE
> Standoff Hacks
Live hacking events. Real money on the spot.
Offline live-hacking tournaments. Hunt bugs in real companies with hosts in the room and payouts handed out live. Held around the world since 2022.
- $500K+PAID AT LIVE EVENTS
- 0EDITIONS TO DATE
- 0COUNTRIES
./bin/list-editions --sort=desc
- [2026]SHANGHAIch[COMPLETED]
- [2025]AHMEDABADin[COMPLETED]
- [2024]HANOIvi[COMPLETED]
- [2024]MYACHKOVOru[COMPLETED]
- [2023]MOSCOWru[COMPLETED]
- [2023]SOCHIru[COMPLETED]
- [2022]MOSCOWru[COMPLETED]
- $_
22e
DEFENDERATTACKER
COMPETE
Standoff Cyberbattle
Attack-defense at industrial scale.
Hyperrealistic red vs blue. 1,500+ VMs simulating real industries โ energy, finance, oil & gas. 5,500+ veterans have battled here.
- 0+VMs PER BATTLE
- 0+VETERANS WHO'VE BATTLED
- 0EDITIONS SINCE 2016
DEFENDERATTACKERStandoff Cyberbattle
22f
PRACTICE
Standoff Hackbase
24/7 training range. Free.
Replicas of real IT infrastructure open around the clock. Four difficulty levels, seasonal challenges, live leaderboard. Three tracks: Standalone for solo hunters, Bootcamp for rookies, Industry for teams.
- 0/7ACCESSFREE
- 0DIFFICULTY LEVELS
- 0TRACKSSOLO ยท BOOTCAMP ยท INDUSTRY
- L1RookieFirst footholds
- L2OperatorChained exploits
- L3SpecialistPrivilege escalation
- L4MasterFull domain compromise
Tracks
- SOLOself-paced hunters
- BOOTCAMProokies & juniors
- INDUSTRYred-team squads
Free. Open. For the community.
Positive Technologies with love and with the security community ๐ค