Marcos Bajo — SPARQNOW

At-a-Glance

PhD Student and researcher at the System Security group @ Cispa Helmholtz Center For Information Security
Invented CFOP, a new binary exploitation technique that bypasses state-of-the-art defenses, appearing in USENIX Security 2025 and BlackHat USA 2025
Invented SFOP, a new binary exploitation technique that bypasses Intel CET, appearing in IEEE S&P 2026 and DEFCON 34
Co-authored PLaTypus, a defensive project to fortify programs from modern binary exploitation attacks, appearing in IEEE S&P 2026 and BlackHat USA 2026
Built TripleCross malware, an eBPF-based rootkit with ~2000 GitHub stars, appearing in RootedCON 2023 and eBPF Summit 2022

Biography

Marcos Bajo is a PhD Student and cybersecurity researcher at the CISPA Helmholtz Center for Information Security, where he is part of Christian Rossow's systems security group. His research primarily focuses on software security and malware techniques.

Bajo has developed several notable projects in the field of cybersecurity. He invented CFOP, a new binary exploitation technique designed to bypass state-of-the-art defenses, which was featured in USENIX Security 2025 and BlackHat USA 2025.