Running order

• 13:30 – 13:35 / Opening and welcome
• 17:50 – 17:55 / CTF awards and closing

Trained in International Relations at the Universidad Abierta Interamericana, Facundo Britos specialises in strategic analysis, international economics and security. Facundo leads the OWASP Rosario Chapter and takes part in professional forums on cybersecurity and geopolitics. Analytical and a polyglot, Facundo has moderated and spoken at webinars and workshops on cyberspace, diplomacy and artificial intelligence.

• LinkedIn Facundo Britos, opens in a new tab

• 13:30 – 13:35 / Opening and welcome
• 14:25 – 14:50 / Talk

Who is Jia Tan? The XZ Utils backdoor case

Given in Spanish

Tomás Illuminati is a cybersecurity analyst specialising in threat intelligence, OSINT and vulnerability research, and a Chapter Leader of OWASP Rosario. Tomás has been credited with +13 CVEs in open source projects such as Wazuh, setuptools, Deno and Mozilla's node-convict. As a consultant at OSINT Industries, Tomás builds data enrichment modules for monitoring underground forums and, as a UNDP instructor, has delivered threat intelligence training for programmes in Myanmar and Liberia. Tomás has published on influence operations and digital forensics, and contributed the XZ Utils backdoor entry to the NATO CCDCOE's Cyber Law Toolkit. Tomás holds the TRM Labs Crypto Seizure Specialist (TRM-CSS) certification and is studying for a master's in cybersecurity at The Open University (UK).

• LinkedIn Tomás Illuminati, opens in a new tab
• GitHub Tomás Illuminati, opens in a new tab

• 13:35 – 14:00 / Talk

Beyond the OWASP Top 10: from vulnerabilities to security decisions

Given in Spanish

MBA, CISO, consultant and university lecturer, specialising in cybersecurity governance, risk management and digital transformation. Extensive experience in public and private organisations, including executive roles in technology and information security. Chapter Leader of OWASP Rosario, creator of Security by Reason® and author of "Pensar como un Hacker, Defender como un Filósofo" (Think Like a Hacker, Defend Like a Philosopher). Winner of the Steve Katz CISO Award 2026 at Infosecurity Mexico.

• LinkedIn Daniel Sasia, opens in a new tab
• securitybyreason.org Daniel Sasia, opens in a new tab
• Book Daniel Sasia, opens in a new tab

• 14:00 – 14:25 / Talk

Offensive AI: when attacks happen at machine speed

Given in Spanish

Oscar Niss holds a degree in Public Administration and a master's in International Law. Oscar was Argentina's Under-Secretary for Cyber Defence from 2019 to 2023 and a member of the National Cybersecurity Committee. With the Argentine delegation, Oscar also took part in the United Nations working group on peace and security in cyberspace. A speaker at national and international events and the author of a number of publications, Oscar is currently Director of Information Security for the Province of Buenos Aires and a Chapter Leader of OWASP Rosario.

• LinkedIn Oscar Niss, opens in a new tab

• 14:50 – 15:15 / Talk

Where OAuth breaks when an agent makes the call

Given in Spanish

Valentín Torassa Colombero works in cybersecurity, software architecture and cloud infrastructure. As the creator of VT Security, Valentín shares technical content on Linux, systems and security. Valentín studies Information Systems Engineering at UAI Rosario, takes part in research and free software communities, and is building VT-Agent-Firewall, an open project for controlling the permissions and access that agents have to tools.

• LinkedIn Valentín Torassa Colombero, opens in a new tab
• valentorassa.com Valentín Torassa Colombero, opens in a new tab

• 15:30 – 15:55 / Talk

Do you know your agent?

Given in Spanish

Federico Quattrin graduated top of the class in Electronic Engineering at the Universidad Nacional de Rosario (UNR). A Security Engineer at Canonical for more than two years, Federico triages, analyses and remediates vulnerabilities in Ubuntu and other open source projects. That follows more than four years in threat intelligence and threat actor attack simulation at companies such as AttackIQ and Airbus. Federico teaches on the cybersecurity diploma at the Universidad Nacional de Córdoba (UNC), and studied and worked in Germany during university on a DAAD scholarship from the German government.

• LinkedIn Federico Quattrin, opens in a new tab

• 15:55 – 16:20 / Talk

Will ThreatAtlas slay the dragon?

Given in Spanish

Pablo Masjoan is a systems engineer from Córdoba with more than 20 years in cybersecurity. Starting out as a security analyst, Pablo worked on projects across Latin America, led governance, risk and compliance teams, and was CISO of an aeronautics company. Pablo teaches cybersecurity at several universities, bringing OWASP topics into the classroom, and takes part in international conferences. Pablo enjoys tracking what is new in the field and bringing it to colleagues and newcomers alike with concrete, real-world examples.

• LinkedIn Pablo Masjoan, opens in a new tab

• 16:20 – 16:45 / Talk

Intercept, Script, Repeat: Hands-On Web and Mobile App Reversing

Ashar Khalil is a cybersecurity graduate and a Research and Development Engineer at OSINT Industries, focusing on mobile reverse engineering, API security and cryptographic analysis. Ashar's toolkit includes Frida, Burp Suite, IDA Pro and JADX. Previously Ashar worked in AI security, organised national-level CTFs and delivered security and OSINT training. Ashar enjoys sharing practical offensive security knowledge and contributing to OSINT research.

• LinkedIn Ashar Khalil, opens in a new tab
• ashar.netlify.app Ashar Khalil, opens in a new tab

• 16:45 – 17:10 / Talk

Governing AI and living to tell the tale

Given in Spanish

Roberto Rubiano graduated in Computer Engineering from the Universidad de Belgrano, studied for a master's in information security at the Universidad de Buenos Aires (UBA) and holds ISACA's CISM certification. Roberto has more than 15 years' experience in cybersecurity, working on projects in the financial sector (payments), critical infrastructure and healthcare. Now CISO at Osigu, Roberto previously led the GRC team at Pomelo for more than three years, coordinating its PCI DSS and ISO 27001 certifications. Roberto teaches at the Universidad del Gran Rosario (UGR), the Universidad Argentina de la Empresa (UADE), the Universidad Nacional de José C. Paz (UNPAZ) and Hackademy, and sits on the cybersecurity working group of the Cámara Argentina Fintech and the Cybersecurity Committee of the Cámara Fintech México.

• LinkedIn Roberto Rubiano, opens in a new tab

• 17:10 – 17:50 / Capture the Flag

Lucas Giannoni studies Information Systems Engineering at the Universidad Tecnológica Nacional, Facultad Regional Rosario (UTN FRRo), with a particular interest in information security, systems infrastructure and solving technical challenges. At ROS:SEC 2026 Lucas coordinates the CTF with OWASP Rosario and is on hand to help participants throughout the competition.

• LinkedIn Lucas Giannoni, opens in a new tab