Your product can pass an automated security check - and still remain vulnerable.

A single overlooked flaw can lead to data leaks, unauthorized access to user accounts, financial losses, or loss of customer trust.

At the new Speaker Talk at Almaty Hub, we’ll explore how to look at your product through an attacker’s eyes and identify vulnerabilities before someone else does.

We’ll discuss why automated scanners don’t catch everything and how to uncover weaknesses hidden deeper in product logic, authorization, APIs, and unconventional attack scenarios.

Speaker - Nurlan Bazarbekov, CISO at Globerce Capital, independent security researcher, and the #1 bug hunter on the Tumar.One platform. Throughout his security research practice, he has discovered vulnerabilities in systems of NASA, Yandex, Toyota Europe, and Dynatrace.

Through practical cases, we’ll explore:
- how to build hypotheses and identify unconventional attack scenarios;
- how to detect authorization issues, IDOR vulnerabilities, and weaknesses in business logic and APIs;
- how to identify SSRF, XSS, and race conditions;
- how a seemingly minor vulnerability can develop into a serious attack chain;
- how to assess the real-world risk to a product and its users.

The session will be useful for developers, CTOs, security professionals, and tech teams looking to build more secure products.

📅 September 10
🕔 16:00
📍 Almaty Hub, 24 Zenkov St., 4th floor, Event Hall

Note: To attend the event, please download the Astana Hub app and register in advance.

Follow for more events:
Instagram: Almaty_hub
Telegram: Almaty Hub

Let's create our own Spider-Man in Blender!

At the workshop, we will be engaged in 3D modeling and sculpting - we will turn a familiar superhero into an original 3D character.

Let's look at how to work with shapes and proportions, create details and give a character character. And the main project will be the Chibi version of Spider-Man.

There will be a lot of practice, work in Blender and the opportunity to go from a simple shape to a ready-made 3D character with your own hands.

If you've been wanting to try yourself in 3D for a long time, it's time to get started!

📍 Kazakhstan, 59/1🗓️ September 10 / 16:00

AISteppeTechHack is an in—person AI & Cybersecurity hackathon in Astana, which will be held as part of the Cyber Steppe conference with the support of the Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan.

The hackathon is organized by MSSP.Global and SteppeTechLab with the participation of the Mayor's Office of Astana and Astana Innovations.

The main sponsor is Medet Turin, a national cybersecurity expert.

Participants will have to solve 3 practical tasks at the intersection of artificial intelligence and cybersecurity. The tasks will be announced on the day of the hackathon, so the teams will work with real cases and limited time to develop solutions.

How is the hackathon going?

- Participation is offline only - Teams of 2 to 5 people- 3 tasks in the areas of AI and cybersecurity- Tasks are announced on the day of the event- It takes one day to develop a solution.- The pitching takes place on the same day- The winners are determined by an expert jury

Prizes

The total prize pool is 1,000,000 ₸.

Additionally, the Business Growth Academy provides 1 grant for studying under the Mini-MBA program.

The hackathon will bring together young developers, AI specialists, and cybersecurity enthusiasts who will not just discuss technologies, but develop and protect working solutions for real-world tasks in one day.

Cyber Steppe takes place in Astana and is dedicated to the development of digital security culture and practice in Kazakhstan.