Georg Ph. E. Heise
George is currently leading the Lufthansa Industry Solutions Advanced Cyber Security Team. Inside the LHIND’s Security and Privacy business unit, he designed and pushed a team of IT security fanatics during the COVID period to perform the vast majority of penetration tests inside the Lufthansa Group.
In his role, he is running a team that delivered over 300 engagements per year, Including everything from vulnerability scans and small web application penetration tests to large-scale corporate network and Active Directory audits to Red Team engagements. Over the past years, he gained extensive knowledge of big enterprises, especially in the aviation industry.
With a strong focus on consumers and clients, he helps demystify hacking for clients and guides them from scoping through the attack scenario to a sophisticated enhancement of their assets.
Over the past years, George has used his Australian-German background and the business experience with big Multi-Nationals and Fortune 500 companies he gained in Australia to improve German work culture and thrive his team to achieve not only achieve more for the team but also bring personal ambitions to live.
19 September 2025 Talks
Breaking Bad AD: What Red Teams Wish You'd Fix Yesterday
Active Directory (AD) remains a cornerstone of enterprise IT infrastructure, yet it often harbours misconfigurations that adversaries exploit with alarming ease. Despite advancements in security practices, many organisations continue to grapple with outdated software, excessive permissions, and neglected configurations, leaving them vulnerable to sophisticated attacks.
This session will examine real-world scenarios in which mismanaged AD environments could have led to significant security breaches. We’ll also look into how this could have been avoided and how small- to medium-sized businesses can have an up-to-date Active Directory that makes adversaries' lives hard.