Insider Threats Packing Their Bags With Corporate Data
Discover indicators to identify employees exfiltrating data before leaving, addressing challenges in cloud environments and personal vs. business traffic separation.
Hand Me Your Secret, MCU - Microarchitectural Timing Attacks on Microcontrollers Are Practical
Unveiling novel microarchitectural timing side-channel attacks on microcontrollers, challenging the belief that MCUs are immune to such vulnerabilities due to their simple architecture.
A Run a Day Won't Keep the Hacker Away - Inference Attacks in Fitness Tracking Social Networks
Explore inference attacks on fitness tracking social networks, revealing vulnerabilities in endpoint privacy zones and discussing implications for user privacy and location protection.
A New Attack Interface in Java Applications
Explores a newly discovered attack surface in Java applications, focusing on JDBC vulnerabilities in cloud-native systems and customized database management services.
Hacked on National Television
Explore behind-the-scenes insights from a Swedish TV series where hackers targeted individuals and companies, revealing cybersecurity vulnerabilities and lessons learned.
Grand Theft House - RF Lock Pick Tool to Unlock Smart Door Lock
Explore vulnerabilities in smart door locks using RF technology, analyzing secure rolling code algorithms and encryption standards to understand potential security threats in IoT devices.
Fuzzing the Native NTFS Read-Write Driver - NTFS3 - in the Linux Kernel
Explore advanced fuzzing techniques for the NTFS3 driver in Linux, focusing on context-aware methods to efficiently identify vulnerabilities in this complex subsystem.
Forward Focus - The Impact of Artificial Intelligence
Explore AI's revolutionary impact on cybersecurity, including enhanced detection, automation, and ethical considerations, while addressing potential risks and future developments in the field.
Alice in Kernel Land - Lessons Learned From the eBPF Rabbit Hole
Explore eBPF technology for kernel-level programming, runtime code loading, and performance optimization. Learn key concepts, security implications, and practical applications in this deep dive.
Abusing Azure Active Directory - From MFA Bypass to Listing Global Administrators
Explore Azure AD vulnerabilities, including MFA bypass and global admin listing, to understand potential security risks in this widely-used identity management solution.
Speed + Security – Best Practices for Securing Containers
Explore top container security risks, attack vectors, and best practices for protecting containerized environments in this expert discussion.
The Excellent Adventure of XDR – Where is it Going?
Explore the evolving world of extended detection and response (XDR), its potential as a SIEM alternative, and how it enhances security analysts' efficiency in threat detection and response.
How Automating Incident Response Secures Your Security Posture
Explore how automating incident response enhances security posture, builds team capacity, and cultivates new skills in this insightful discussion with Karl Klaessig of ServiceNow.
The Future of ApplePwn - How to Save Your Money
Explore open-source tools demonstrating vulnerabilities in Apple Pay, including methods for unauthorized transactions and card reconnection, even on non-jailbroken devices.
Breaking Korea Transit Card with Side-Channel Attack - Unauthorized Recharging
Unveiling vulnerabilities in Korea's transit card system through side-channel attacks, demonstrating potential financial risks and the need for enhanced smartcard security measures.
Inside Web Attacks - The Real Payloads
Explore real-world payloads used by attackers exploiting major vulnerabilities, based on CloudFlare's unique insights from protecting millions of websites.
Driving Cyber Resiliency of IoT Devices with Active Management and Cyber Hygiene
Explore IoT device security challenges, cyber hygiene importance, and active management strategies. Gain insights from HP's framework for print security assessments and industry best practices.
Your Guide to An Integrated Threat Intelligence Strategy
Discover how to implement a holistic, integrated threat intelligence approach that combines cultural shifts and technological enhancements for proactive cybersecurity.
Securing Your Business Starts With The Basics
Learn essential cybersecurity strategies from AlienVault's CTO. Discover the importance of mastering security basics, effective breach detection, and data sharing for improved threat response across organizations.
Samsung Pay - Tokenized Numbers Flaws and Issues
Análisis de vulnerabilidades en la generación de tokens de Samsung Pay, explorando posibles fallos de seguridad y riesgos para los usuarios.
O-Checker - Detection of Malicious Documents Through Deviation From File Format Specifications
Explores detection of malicious documents by identifying deviations from file format specifications, focusing on targeted email attacks in Japan and introducing the o-checker tool for high detection rates.