GOhack26: When trust becomes an attack surface

Zurich, October 8, 2026 – The fourth edition of GOhack will take place on 29 and 30 October 2026 at the Swiss Distance University of Applied Sciences (FFHS) in Zurich. The cybersecurity event combines a symposium, an educational programme featuring talks and workshops, and a Live Bug Bounty Challenge in which ethical hackers test real systems belonging to participating organisations. This year's focus is on risks associated with supply chains, external service providers, internal access and AI systems.

The symposium on Thursday evening is titled "The Enemy Within – Supply Chains, Insiders, AI: When Trust Becomes an Attack Surface." Experts from business, research, government and the cybersecurity community will explore how organisations can manage dependencies and risks associated with trust.

Following a welcome message from Florian Schütz, Director of the Swiss National Cyber Security Centre (BACS), Roman Hüssy, Co-Head of GovCERT at BACS, will open the symposium. Other speakers include Silvan Schellenberg, Head CISO Switzerland Office, UBS; Dr Stefan Lüders, CISO & Head of the CSIRT, CERN; Aurore Chatard, National Head Security, SRG; Dr Sina Wulfmeyer, Chief Data Officer & DPO, Unique AI; Bernhard Tellenbach, Head of Cyber Defence Campus; and Michael Platen, Founder & Chairman, Aequivalent. The symposium will be moderated by Christoph Lanter, Managing Director of kombiniert.ch.

Aurore Chatard will offer a particularly interesting perspective from her experience as Head of Security for the Eurovision Song Contest 2025 in Basel, where she was responsible for a complex security operation involving numerous partners and international dependencies. At GOhack26, she will share lessons from the event that organisations can apply to their own security challenges.

Three formats, one goal: Bringing cybersecurity to life

GOhack26 combines strategic insights, practical learning and live security testing.

Symposium: On Thursday evening, experts from business, government, research and the cybersecurity community will discuss how organisations can manage risks related to trust, access and dependencies.

EDU Track: On Thursday and Friday, business and technical talks, along with hands-on workshops, will offer practical insights into current cybersecurity topics. The programme covers email security, social engineering, digital identity, supply chain risks, AI agents, cryptography and penetration testing, among others.

Live Bug Bounty Challenge: Over two days, ethical hackers from the GObugfree community will search for vulnerabilities in real systems belonging to ten participating companies and organisations, including BDO, Threema and Abraxas. A total prize pool of CHF 50,000 is available for valid findings. Visitors can follow the challenge on site, track progress via the live leaderboard and meet the ethical hackers and participating organisations. The most successful hackers will be recognised at the awards ceremony on Friday evening.

"Companies must be able to trust employees, partners, and systems. At the same time, they need to know who has access, what dependencies exist, and where risks arise from them. At GOhack26, we bring these perspectives together and use the Live Bug Bounty Challenge to show how real systems are tested under real conditions," says Marcel Eyer, Co-CEO of GObugfree.

Students and emerging cybersecurity professionals are also an important part of GOhack26. The event gives them the opportunity to meet security leaders, companies and experienced ethical hackers, while gaining first-hand insights into different areas of cybersecurity.

Event details

GOhack26 October 29.–30. 2026 FFHS Gleisarena, Zürich

• Formats: Symposium, EDU Track with workshops, Live Bug Bounty Challenge
• Platinum Partners: BDO Digital and FFHS (partners since the first edition of GOhack)
• Who should attend: Business decision-makers, IT and security professionals, ethical hackers, students, emerging talent and anyone interested in cybersecurity.