What You Missed During Black Hat and DEFCON - Security Conference Highlights
Explore key highlights from Black Hat and DEFCON, including car hacking, Android security, policy changes, and malware analysis, as presented by Bugcrowd's VP of Operations.
Demystifying PTSD in the Cybersecurity Environment
Exploring PTSD's impact on cybersecurity professionals, offering insights for understanding and supporting affected individuals in the field.
Carrying Our Insecurities with Us - The Risks of Implanted Medical Devices in Secure Spaces
Explores security risks and policy challenges of implanted medical devices in secure spaces, discussing mitigations and workforce protections for national security.
Attacking NextGen Roaming Networks
Explore vulnerabilities in Diameter-based networks, including tracking subscribers, billing fraud, and denial of service attacks. Learn about security risks and recommendations for next-generation roaming networks.
Evolving Security Experts Among Teenagers
Innovative approach to cybersecurity education for teenagers, leveraging government, industry, and community support to create the next generation of experts and inventors in Israel.
Hide Android Applications in Images
Discover a technique to conceal malicious payloads in Android packages, manipulating encrypted data to appear as genuine images while evading detection and reverse engineering attempts.
Self-Driving and Connected Cars - Fooling Sensors and Tracking Drivers
Explore security vulnerabilities in autonomous vehicles and privacy risks in connected cars. Learn about sensor attacks, tracking methods, and potential countermeasures for safer automotive technologies.
Switches Get Stitches
Explore vulnerabilities in industrial Ethernet switches, their impact on critical infrastructure, and learn mitigation strategies. Gain insights into attacking management planes and creating malicious firmware for MITM attacks.
Introduction to Corporate Information Security Law
Explore corporate information security law fundamentals, legal frameworks, and compliance strategies for protecting sensitive data and mitigating cyber risks in business environments.
From Dead Data to Digestion - Extracting Windows Fibers for Your Digital Forensics Diet
Explore Windows Fibers' undocumented internals, reverse APIs, and create detection telemetry from process memory. Learn about a new open-source tool for threat hunting and EDR development.
Lemons and Liability - Cyber Warranties as an Experiment in Software Regulation
Explore cyber warranties as a voluntary liability model for software security, examining their implications for policy-makers and the cybersecurity industry.
Building Cyber Security Strategies for Emerging Industries in Sub Saharan Africa
Explore strategies to combat rising cybercrime in sub-Saharan Africa, addressing unique challenges and developing tailored solutions for emerging industries in the region.
Cybersecurity Risk Assessment for Safety-Critical Systems
Explore cybersecurity threats to space systems, motivations behind attacks, and essential perspectives for securing these critical infrastructures.
Securing Your Big Data Environment
Explore strategies for securing big data environments, focusing on Hadoop. Learn about control frameworks, data protection techniques, and effective risk management for sensitive information.
Owning a Building - Exploiting Access Control and Facility Management Systems
Explore vulnerabilities in building access control and facility management systems, uncovering potential security risks and exploitation techniques.
Dynamic Binary Instrumentation Techniques to Address Native Code Obfuscation
Explore dynamic binary instrumentation techniques for tackling obfuscated Android app code, aiding reverse engineers in overcoming anti-analysis protections.
Ret2page - The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache
Explore a new exploitation technique for Use-After-Free vulnerabilities, focusing on SLUB and BUDDY allocators to improve efficiency and success rates in physical page reuse and Android rooting.
Android Universal Root - Exploiting Mobile GPU - Command Queue Drivers
Explore GPU hacking techniques and vulnerabilities in Android device drivers, focusing on rooting methods and security implications for mobile systems.
A Journey Into Fuzzing WebAssembly Virtual Machines
Explore WebAssembly VM architecture, attack surfaces, and fuzzing strategies. Learn about bug discovery across multiple projects using various fuzzing techniques and frameworks.
A New Trend for the Blue Team - Using a Symbolic Engine to Detect Evasive Forms of Malware - Ransomware
Explore symbolic engines for detecting evasive malware and ransomware, enhancing blue team capabilities in reverse engineering and threat analysis.
Trace Me if You Can - Bypassing Linux Syscall Tracing
Novel vulnerabilities and exploitation techniques to bypass Linux syscall tracing, even with security measures like seccomp, SELinux, and AppArmor in place. Demonstrates how user-mode programs can evade detection.