Zen and the Art of Adversarial Machine Learning
Explore security concerns in machine learning integration, including data extraction, model evasion, and biased outcomes. Learn operational guidance and tools for addressing these challenges.
HTTP/2 - The Sequel is Always Worse
Uncover HTTP/2 vulnerabilities and their impact on web security. Learn about implementation flaws, RFC imperfections, and new attack techniques targeting high-profile websites and various server infrastructures.
Windows Defender - Demystifying and Bypassing ASR by Understanding the AV's Signatures
Explore Windows Defender's undocumented signature format, learn ASR rule implementation, and discover techniques for signature evasion in this comprehensive security analysis.
BadMesher - New Attack Surfaces of Wi-Fi Mesh Network
Explore new attack surfaces in Wi-Fi Mesh networks, focusing on EasyMesh vulnerabilities. Learn about network build and control attacks, and discover MeshFuzzer for identifying security flaws.
Finding Vulnerabilities in TensorFlow
Explore vulnerabilities in TensorFlow through advanced fuzzing techniques, focusing on deep issues hidden in complex code logic and semantic contexts beyond traditional API fuzzing methods.
Security Industry Call-to-Action - We Need a Cloud Vulnerability Database
Explore cloud vulnerabilities in AWS, GCP, and Azure, and learn why a cloud-specific vulnerability database is crucial for improved security in the evolving cloud landscape.
The Bad Guys Win - Analysis of Magecart Vulnerabilities
Comprehensive analysis of Magecart vulnerabilities, exploring attack methods, defense mechanisms, and enterprise challenges in securing third-party scripts and preventing digital supply-chain attacks.
Burning Bridges - Stopping Lateral Movement via the RPC Firewall
Explore Windows RPC security, lateral movement prevention, and the RPC Firewall tool to enhance network defense against remote attacks and ransomware spread.
Inside the Ransomware Negotiation Economics
Explore the economics and negotiation strategies of ransomware attacks, focusing on digital extortion tactics, decision-making processes, and effective countermeasures for organizations.
From Logic to Memory - Winning the Solitaire in Reparse Points
Explore advanced Windows file redirection vulnerabilities, bypassing mitigations with novel exploit techniques. Learn about reparse points, logic flaws, and memory corruption in system services.
A Universal Way to Exploit Android PendingIntents in High-profile and System Apps
Explore Android PendingIntent vulnerabilities in high-profile apps, learn exploitation techniques, and discover security implications through case studies and practical demonstrations.
New Ways of IPv6 Scanning
Explore innovative techniques for IPv6 scanning, uncovering vulnerabilities and effective methods to obtain IPv6 addresses despite the vast address space.
A Titan M Odyssey
Explore Google's Titan M chip: its architecture, security features, and potential vulnerabilities through reverse engineering and dynamic analysis techniques.
How Your E-book Might Be Reading You - Exploiting EPUB Reading Systems
Uncover security vulnerabilities in e-book reading apps through analysis of EPUB format, revealing potential privacy risks and exploitation techniques across various platforms and devices.
One Glitch to Rule Them All - Fault Injection Attacks Against the AMD Secure Processor
Explore fault injection attacks on AMD's Secure Processor, revealing vulnerabilities in CPU security and discussing implications for system integrity and trust.
Lost in the Loader - The Many Faces of the Windows PE File Format
Explore Windows PE file format intricacies, parser differentials, and a custom language for modeling loaders. Learn analysis techniques to aid reverse-engineering tasks.
Hand in Your Pocket Without You Noticing - Current State of Mobile Wallet Security
Uncover security flaws in popular mobile payment services, exploring potential fraud scenarios and vulnerabilities in contactless transactions for public transport and retail.
The Art of Exploiting UAF by Ret2bpf in Android Kernel
Explore Android kernel exploitation techniques, focusing on a Use-After-Free vulnerability in xt_qtaguid. Learn about KASLR bypass, rooting methods, and security measures against such attacks.
Achieving Linux Kernel Code Execution Through a Malicious USB Device
Explore Linux kernel exploitation via malicious USB devices, focusing on CVE-2016-2384 vulnerability. Learn about USB-based attacks, payload delivery, and mitigation strategies.
Owfuzz - WiFi Nightmare
Explore WiFi security vulnerabilities and attack surfaces using Owfuzz, a fuzzing tool for detecting protocol flaws in WiFi implementations, including WIFI6 and WPA3.
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
Explore cloud security threats, including crypto-mining worms and innovative techniques targeting AWS, Kubernetes, and other providers. Learn about hackers' methods, persistence strategies, and potential impacts on cloud environments.