AppSec Village — DEF CON 2026

Let's talk about some critical infrastructure that millions of people use every day: Public transportation. In this talk, I'll present some findings that I discovered in the public transportation ecosystem of one of the largest cities in Argentina, impacting more than 1.5 million people daily. Reading code, chaining vulnerabilities, weak access controls, and flawed internal designs, I got full access to core mobility systems, from buses to taxis, including DVRs, transport cards, user data, real-time tracking and administrative panels. We'll walk through the technical exploitation path, the real-world impact and the lessons learned.

ResearchersIgnacio Navarro AR