Cyber files: AI I Red teaming I Confidential Computing

Details
*** Both talks are now logged ***
MUC:SEC community members, friends, supporters and beyond, we are thrilled to invite you to our new in-person event. :)
TNG Technology Consulting GmbH, our amazing host for the evening, would generously provide us with a cozy and comfortable venue for the talks, networking and much more.
Two insightful talks, conducted in English, and a great opportunity to network, learn, and share knowledge with a fellow information>cyber >security>tech enthusiasts, are a great reason not to miss out on this chance to connect with industry experts and expand your horizons.
We look forward to seeing you there!
_Agenda
- 6.00 PM - Doors open
- 6.30 PM - Start of our meet up - Welcome & Intro (TNG Technology Consulting GmbH & MUC:SEC)
- 6.40 PM - 7.10 PM - First talk - Hacking Google's AI - Lessons Learned from Red Teams at Google by Thomas Brunner (AI Red Team @Google)
- ca 7.10 - ca 7.25 PM - Break - Time to network with all attendees and speakers
- 7.25 - 7.55 PM - Second talk - Confidential Computing: Closing the Trust Gap in TEEs (Trusted Execution Environments) and Cloud Deployments by Filip Rezabek (Co-founder/Researcher @SpaceComputer/TUM/Flashbots)
- 7.55 - 9.00 PM - Extra time for networking with all attendees and speakers
_More information on the talks?
- First talk - Hacking Google's AI - Lessons Learned from our Red Teams by Thomas Brunner (AI Red Team @Google)
Google has a long history of operating Red Teams that simulate real threat actors, allowing us to anticipate and counter cyber security threats as they emerge. A few years ago, a dedicated AI Red Team at Google was formed, which applies the same approach to the new reality of AI-enabled products.
Thomas will give an overview of how Red Teams work at Google, what their AI Red Team does, and what attacks they believe are the most relevant today.
@About Thomas: Before co-founding the AI Red Team, worked on learning robots at Google X, where he tried to (unsuccessfully) make them clean up after him. He holds a PhD in adversarial machine learning, loves breaking things but otherwise is a very serious engineer.
- Second talk - Confidential Computing: Closing the Trust Gap in TEEs (Trusted Execution Environments) and Cloud Deployments by Filip Rezabek (Co-founder/Researcher @SpaceComputer/TUM/Flashbots)
Confidential Computing is rapidly transforming how sensitive data is processed, offering new ways to protect information even while it is in use. At the heart of this shift are Trusted Execution Environments (TEEs) and their extensions into Confidential Virtual Machines (CVMs). These technologies already power confidential cloud services used in practice, yet their threat models and real-world deployment strategies often diverge—creating critical blind spots for defenders and opportunities for adversaries.
This talk will dissect the architectural trade-offs between process-based and VM-based TEEs, highlighting both their strengths and limitations when deployed in hostile or minimally trusted environments. We will explore how providers and enterprises can bridge today’s confidence gap generating verifiable “Proofs of Cloud” that tie workloads to their physical platforms. By doing so, we address long-standing challenges such as replay, attestation proxying, and the implicit trust assumptions baked into cloud-scale TEEs.
Attendees will see how TEEs already power services like private messaging and confidential cloud processing, where their limitations leave exploitable gaps. The session delivers practical insights and tools for deploying high-assurance confidential workloads—even when the infrastructure itself can’t be fully trusted.
@About Filip: A researcher at the TUM and Flashbots, and a co-founder of SpaceComputer. As a researcher, he is finishing his Ph.D. in distributed computing and robust systems, with deep expertise in networking, cryptography, and Trusted Execution Environments (TEEs).
_Location?
- TNG Technology Consulting GmbH, Arabellastraße 4a, 81925 München
_How to participate?
- RSVP
- Bring your friends and
- Tell your colleagues
We are looking forward to an excellent event and interesting but chilled brainstorming :)

Cyber files: AI I Red teaming I Confidential Computing