When Knowledge Graph Meets TTPs - Automated and Adaptive Executable TTP Intelligence for Security
Explore automated TTP intelligence for security assessments using knowledge graphs, enhancing breach simulation with adaptive attack chains to evaluate defense capabilities effectively.
Deception at Scale - How Malware Abuses Trust
Explore techniques used by attackers to disguise malware as legitimate, including stolen certificates and hiding malicious files in trusted applications.
Two Bugs With One PoC - Rooting Pixel 6 From Android 12 to Android 13
Explore Pixel 6 rooting techniques, vulnerabilities, and PoC creation for Android 12 and 13, focusing on the Tensor chip and Linux kernel 5.10 challenges.
Weaponizing Mobile Infrastructure - Are Politically Motivated Cyber Attacks a Threat to Democracy?
Explore politically motivated cyber attacks on mobile infrastructure and their potential threat to democracy, with insights on cyber resilience against nation-state attacks during conflicts.
Trends and Top Takeaways from Black Hat Asia
Insightful panel discussion on critical InfoSec trends, key takeaways from Black Hat Asia, and their impact on future security strategies, featuring industry experts and the conference founder.
The Various Shades of Supply Chain - SBOM, N-Days and Zero Trust
Explore supply chain security challenges in semiconductors, focusing on SBOMs, N-day vulnerabilities, and Zero Trust principles to enhance transparency and mitigate risks in firmware development.
Sweet Dreams - Abusing Sleep Mode to Break Wi-Fi Encryption and Disrupt WPA2/3 Networks
Novel Wi-Fi attacks exploiting power-save mode to leak encrypted frames and disrupt networks. Explores vulnerabilities in AP frame buffering and encryption, demonstrating potential security risks in Wi-Fi implementations.
Security Advocacy Shouldn't Be for Security Professionals - An Analysis of How the Industry Misses the Mark and How We Can Improve
Explores how security advocacy should extend beyond professionals to all IT sectors and society, analyzing global security content and proposing improvements for broader impact.
Stealing With Style - Using CSS to Exploit ProtonMail & Friends
Explore critical vulnerabilities in privacy-focused webmail providers, including email theft and remote code execution, through CSS exploitation techniques in ProtonMail, Tutanota, and Skiff.
Revisiting Stealthy Sensitive Information Collection from Android Apps
Explore advanced techniques for detecting stealthy sensitive information collection in Android apps, addressing challenges in privacy policy compliance and user data protection.
Prototype Pollution Leads to RCE - Gadgets Everywhere
Explore how Prototype Pollution vulnerabilities in JavaScript can lead to remote code execution, analyzing Node.js core code and NPM packages for potential security risks.
PMFault - Voltage Fault Injection on Server Platforms Through the PMBus
Explore voltage fault injection attacks on server platforms via PMBus, revealing vulnerabilities in power management systems and discussing potential security implications for data centers.
PPLdump Is Dead - Long Live PPLdump
Explore Windows Protected Process Light (PPL) mechanism, its vulnerabilities, and historical exploits. Learn about PPLdump, its impact on system security, and Microsoft's approach to PPL-related vulnerabilities.
New Wine in an Old Bottle - Attacking Chrome WebSQL
Explore Chrome WebSQL vulnerabilities and a mutation-based fuzzer for discovering SQLite bugs, enhancing web application security against remote attacks.
Operation Clairvoyance - How APT Groups Spy on the Media Industry
Explore how APT groups target Taiwan's media industry for cyber espionage, focusing on their tactics, motivations, and impact on daily activities and national security.
Phoenix Domain Attack - Vulnerable Links in Domain Name Delegation and Revocation
Explore a novel DNS attack allowing adversaries to maintain revoked malicious domains, affecting mainstream DNS software and public resolvers. Learn about vulnerabilities in domain name delegation processes.
Preparing the Long Journey for Data Security
Explore global data security trends, legislation, and industry-specific strategies. Gain insights into the evolving landscape of data protection and its impact across sectors.
Nakatomi Space - Lateral Movement as L1 Post-exploitation in OT
Exploring deep lateral movement in OT networks, focusing on TTPs for navigating through embedded device networks at the lowest levels, highlighting security vulnerabilities in industrial control systems.
Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks
Explore techniques to combat distributed bot attacks using streaming-based outlier detection and SliceLine, generating effective rules for blocking malicious traffic at scale.
Custom Processing Unit - Tracing and Patching Intel Atom Microcode
Unveils groundbreaking framework for observing, tracing, and patching Intel Atom microcode execution, offering unprecedented insights into CPU internals and microcode update processes.
Backdooring of Real Time Automotive OS Devices
Explore vulnerabilities in automotive embedded devices, focusing on bare-metal software and real-time constraints. Learn about potential security risks and backdooring techniques in critical automotive systems.