Patrick Mathieu & Franck Desert

This presentation will be an introduction to AI programming, using Python, Cursor, and Claude Code. We'll see how to use these tools to create simple and effective AI applications and the programming approaches involved. We'll also explore fundamental AI concepts such as machine learning, recursion, and language models. This presentation is designed for beginners and AI enthusiasts.

Patrick Mathieu

Each week, Quebec SMEs experience cybersecurity incidents. The problem isn't a lack of tools or good intentions—it's a lack of practice. When it happens, teams hesitate, decisions are delayed, and blind spots emerge. Not due to lack of skill, but because they've never tested their incident response capacity together. In this talk, Patrick Mathieu, a security consultant with over 20 years of experience, immerses you in a realistic crisis scenario and concretely shows you the benefits of being prepared. We'll talk about Tabletop Exercises (TTX), incident preparedness, and—most importantly—what actually works on the ground. No jargon or unnecessary fear, just concrete examples and clear paths to strengthen your security posture. You'll leave with a better understanding of your potential risks, and simple actions to be ready when it counts.

Podcast La French Connection

The La French Connection podcast will be in a live format, with a conversation between attendees and speakers on the topics covered at the iHack events.

Frédérik Bernard

He always tells his teams the same thing: "Relax. We're not saving lives. We're saving businesses." Since January 2025, the Secur01 teams have responded to new incidents. Heavier cases. More human. Harder to talk about. Behind every breach, there is an organization. Behind every organization, there are decisions. And behind every decision, there is a human who chose to look the other way. This year, the Chronicles aren't about the attackers. They're about us. The MSPs. The executives. The IT teams. Those who were entrusted with security. And what they did with it. This is a talk about what we avoid telling ourselves. About the mistakes we repeat because we never had the courage to honestly look at ourselves in the mirror. "We're not saving lives." Until the day we realize that phrase has its limits.

Vianney Gall

This workshop offers a high-level introduction to software-defined radio (SDR). Participants will learn about how SDR systems work in general, the main tools and software available, and the key criteria to consider when choosing a device. The workshop is aimed at beginners and focuses on practical understanding rather than in-depth theory. By the end of the session, participants will have the foundations needed to get started with SDR and make an informed choice when purchasing equipment. A limited number of SDR devices will be provided for hands-on exercises, but participants are encouraged to bring their own equipment if they have any.

Jonathan Marcil

A presentation in 2026 without AI is incomplete, you say? Well, this one includes a double dose of LLMs! On one hand, we'll introduce the concepts and perform threat modeling of a personal assistant-type agent; on the other, we'll use an LLM to create this model. Beyond threats, we'll also cover some defense elements.

Podcast La French Connection

The La French Connection podcast will be in a live format, with a conversation between attendees and speakers on the topics covered at the iHack events.

Enzo Hoummady

Maxime

Podcast La French Connection

The La French Connection podcast will be in a live format, with a conversation between attendees and speakers on the topics covered at the iHack events.

Christian Lambert (WhyN0t)

Security is still too often seen as the bottleneck of deployments. Yet, given today's delivery speed, pushing validations to the very end of the cycle is no longer a viable option. Far from buzzwords, this presentation aims to demystify DevSecOps with a down-to-earth approach. Beyond the simple CI/CD pipeline, where and how can we truly inject security? Drawing on my field experience in IT, we'll explore the classic pitfalls to avoid in order to finally unite development, operations, and security teams. Warning: the goal here is not to provide you with a list of magic tools. Instead, we'll address the challenges, sometimes cultural, needed to transform security into an enabler capable of mitigating risks and blocking vulnerabilities well before they reach production.

Robert Descôteaux

At a time when the majority of cyberattacks begin with a simple email, corporate messaging remains one of the most critical—and often most underestimated—attack surfaces. Targeted phishing, CEO fraud (BEC), or MFA bypass: techniques are evolving rapidly, driven in part by automation and artificial intelligence. This presentation offers a deep dive into modern attacks targeting messaging services, highlighting the methods used in the field. Through realistic scenarios, we'll analyze how attackers exploit technical flaws, weak configurations, and human behavior alike. Beyond the assessment, this session will cover effective defense strategies, combining technical controls (SPF, DKIM, DMARC), identity protection, detection capabilities, and the key role of users. Duration: 1 hour

Christian Lambert, Robert Descôteaux

Want to grow your network, accelerate your learning, or simply discover the key events in the cybersecurity community? This presentation is for you. In 15 minutes, we offer an overview of 10 must-attend events. From Hackfest to NorthSec, GoSec, BSides, and even DEF CON and Black Hat, we'll share what makes each one unique, their "vibe," and why they deserve your attention. Through a dynamic two-voice presentation, sprinkled with humor and anecdotes, you'll discover the differences between community, technical, and corporate events, along with concrete tips to get the most out of your participation. Whether you're a beginner or an experienced professional, you'll leave with a better understanding of the cybersecurity event ecosystem... and maybe the urge to add a few dates to your calendar. Duration: 15 minutes

Podcast La French Connection

The La French Connection podcast will be in a live format, with a conversation between attendees and speakers on the topics covered at the iHack events.