A packed room at CYBERCOR, eleven sessions, and a single thread that tied them all together: the same tools that accelerate defense also accelerate attack.
BSides Chișinău 2026, the second edition of the local community’s cybersecurity conference, took place on October 30 at the Technical University of Moldova. DAAC digital was a partner of the event for the second consecutive year.
What Remains Unseen in the Inventory
The opening remarks were delivered by Mihai Lupașcu, director of the Cybersecurity Agency. The remark that set the tone for the day focused on process rather than technology: teams track the versions of installed applications and components, but rarely the engine running beneath them.
And this matters more than ever, because AI-assisted research shortens the path from a known vulnerability to a functional tool. The defense sector no longer has time to be reactive.
AI, on both sides of the line
The browser has been discussed as the organization’s new control point—the place where employees spend nearly their entire workday and where sessions, tokens, and extensions accumulate.
Alexey Shulenkov, an independent cybersecurity consultant, spoke about Shadow AI: the tools employees use without authorization and the data that leaves the company along with them. There are already public cases of data leaks through AI assistants, and control cannot be achieved through written policies alone.
A third session addressed prompt injection in LLM agents, with a conclusion that will sound familiar to anyone who has worked with content filters: the rule cannot reside within the prompt, because the model can ignore it. Detection must take place outside the model.
The human element remains the most vulnerable
The afternoon session shifted the focus from technology to people. Real-life, anonymized online fraud scenarios were presented, from the first contact with the victim to the transfer of funds, along with OSINT techniques that attackers use to build a profile of their target before taking any technical action.
In parallel with the main program, ICI Bucharest conducted a hands-on exercise on a cyber range, in a CTF format, based on an attack scenario in the energy sector—ranging from a phishing email to the impact on systems that control physical processes.
A larger edition than the first
The first edition, in 2025, brought together nine speakers and ten partners. This year’s edition reached eleven sessions and twelve partners, with a full hall throughout the day. The event is organised by CYBERCOR, the Agency for Cyber Security and the Technical University of Moldova, and attendance remains free, in the spirit of the BSides movement: non-profit conferences built by volunteers, where places on stage are not for sale.
For DAAC Digital, being a partner isn’t just about visibility. The discussions in the conference room and during breaks are the fastest way to stay up to date in a field where the response time is now measured in hours.
If you’re wondering how much visibility you have into the AI tools used in your organization or how well the data passing through them is protected, write to us and we’ll discuss your specific situation.
