Molecular Malware: How DNA Can Hack You! - BSides Birmingham 2026

After attending cybersecurity conferences, I like to take notes and share the talks that stood out to me. This one was by the speaker Ram Balasubramanian at BSides Birmingham 2026.

The speaker mentions that DNA is traditionally viewed as the blueprint of life, but the exploration focuses on its potential to be treated as a digital weapon. They mention that synthetic DNA is used in a way that could potentially be leveraged to seize control of a secure network.

The speaker explains that the encoding process involves translating malicious binary shellcode into Base-4 DNA sequences. They mention that as the DNA sequencer reads the sample, it converts these chemical bases into a digital data stream through the translator process.

The speaker highlights that legacy bioinformatics tools may lack robust bounds checking, and in such cases, an oversized DNA sequence can trigger a stack-based buffer overflow.

They further mention that this exploit can lead to a hijack scenario, where return addresses are overwritten, ultimately enabling remote code execution from within the secure perimeter and bypassing traditional firewalls.

The speaker emphasises that this is not just a "cool hack," but a real risk to scientific integrity. If the data coming off a sequencer cannot be trusted, then diagnostics, vaccines, and research built on top of it also become untrustworthy.

Finally, the speaker mentions that the solution lies in the rise of Cyber-Biosecurity, with a need to move toward memory-safe languages, implement strict input validation, and introduce malware screening at the DNA synthesis level.

I attend cybersecurity conferences so you don't have to miss out. I share notes and key takeaways for anyone in the infosec community who couldn't be in the room! These are my notes from the session, not a transcript. If you were there and see it differently, or have thoughts, drop a comment below :)