Resting on Feet of Clay - Securely Bootstrapping OPC UA Deployments
Explore security challenges in OPC UA deployments, focusing on secure bootstrapping methods and addressing vulnerabilities in industrial control systems.
Skeletons in the App Sandbox - 5+ Ways to Escape
Explore vulnerabilities in Apple's App Sandbox, uncovering methods to bypass security measures and escape containment, with insights on improving iOS and macOS protection.
Exploiting Windows COM - WinRT Services
Discover techniques for exploiting Windows COM/WinRT services, uncovering vulnerabilities in cross-process communication and UWP applications for potential LPE, RCE, and sandbox escape attacks.
Internal Affairs - Hacking File System Access from the Web
Explore vulnerabilities in the File System Access API, revealing how malicious websites can exploit it for arbitrary code execution and bypass security measures.
Diving Into Spooler - Discovering LPE and RCE Vulnerabilities in Windows Printer
Uncover critical vulnerabilities in Windows Printer Spooler, exploring potential LPE and RCE exploits. Learn from past attacks and discover hidden security risks in this essential system component.
Chasing Foxes by the Numbers - Patterns of Life and Activity in Hacker Forums
Explore patterns of cyber criminal activity in underground forums, analyzing behavior across clear, deep, and dark web platforms to understand hacker communities and their focus areas.
Fire & Ice - Making and Breaking macOS Firewalls
Explore macOS firewall creation and vulnerabilities, covering kernel-level socket filtering, user-mode communication, secure installation, and self-defense mechanisms. Learn about firewall bypasses and potential weaknesses.
How Can Communities Move Forward After Incidents of Sexual Harassment or Assault
Strategies for community response to sexual harassment/assault incidents, focusing on survivor support, accountability, and bystander intervention. Explores leadership roles and community healing.
PEIMA - Harnessing Power Laws to Detect Malicious Activities
Explore power law-based techniques for detecting and mitigating DDoS attacks, intrusions, and other malicious network activities using PEIMA methodology.
Insecurity in Building Automation - How to Create Dark Buildings with Light Speed
Explore vulnerabilities in building automation systems, their potential for exploitation, and the implications for physical security in modern infrastructure.
Offensive Malware Analysis - Dissecting OSX/FruitFly via a Custom C&C Server
Explore malware analysis techniques using a custom C&C server for OSX/FruitFly. Learn to decode, monitor, and understand malware behavior for enhanced cybersecurity skills.
Protecting Visual Assets - Digital Image Counter-Forensics
Explore counter-forensic techniques to safeguard image-based intelligence from exploitation attacks, addressing current and emerging threats in visual asset protection.
Breaking Electronic Door Locks Like You're on CSI - Cyber
Learn techniques for bypassing electronic door locks, exploring vulnerabilities and hacking methods used in popular media depictions of cybersecurity.
Wire Me Through Machine Learning
Explore how machine learning can combat Business Email Compromise scams, a sophisticated threat that has cost organizations billions in losses through fraudulent wire transfers.
Randomization Can't Stop BPF JIT Spray
Explores Linux BPF JIT compiler vulnerabilities, demonstrating how randomization fails to prevent JIT spray attacks and proposing mitigations for enhanced kernel security.
When Virtualization Encounters AFL - A Portable Virtual Device Fuzzing Framework with AFL
Explore a portable virtual device fuzzing framework using AFL to enhance VM security. Learn techniques for identifying vulnerabilities in virtual devices and preventing VM escape attacks.
Signing Into One Billion Mobile App Accounts Effortlessly with OAuth2.0
Explore vulnerabilities in OAuth2.0 protocol when used for mobile app authentication, uncovering potential security risks in Single-Sign-On services for billions of users.
AI Based Antivirus - Can AlphaAV Win the Battle in Which Man Has Failed?
Explore deep learning-based antivirus technology with low false positive and negative rates, already in production since 2016. Learn about AI's potential to revolutionize cybersecurity.
Dig Into the Attack Surface of PDF and Gain 100+ CVEs in 1 Year
Explore PDF vulnerabilities, efficient fuzzing techniques, and attack surface analysis to uncover 100+ CVEs in a year, with statistical insights on security weaknesses.
Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation
Explore new attacks on HTTP/2, the emerging Internet protocol. Learn about vulnerabilities, implementation flaws, and potential mitigations in this cutting-edge cybersecurity analysis.
I Know What You Saw Last Minute - The Chrome Browser Case
Explore HTTP Adaptive Streaming vulnerabilities in Chrome, focusing on YouTube's DASH implementation and potential privacy risks through traffic analysis and machine learning techniques.