Flying a False Flag - Advanced C2, Trust Conflicts, and Domain Takeover
Explore advanced command and control techniques, trust exploitation, and domain takeover in cloud environments. Learn about stealthy methods and new tooling for AWS, Azure, and GCP.
Every Security Team is a Software Team Now
Exploring how cybersecurity practices evolve as companies become software-driven. Discusses cultural shifts in software engineering and their impact on security, emphasizing the need for integrated, cross-functional approaches.
The Next Arms Race
Explore the emerging cyber arms race as countries develop new offensive weapons for the Internet, challenging the notion of a borderless digital world.
BLEEDINGBIT - Your APs Belong to Us
Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.
SirenJack - Cracking a 'Secure' Emergency Warning Siren System
Uncover the SirenJack vulnerability affecting emergency warning systems, exploring how a simple setup can compromise critical infrastructure and discussing potential security implications.
Ghost Telephonist Link Hijack Exploitations in 4G LTE CS Fallback
Uncover a critical 4G LTE vulnerability allowing attackers to hijack calls and SMS. Learn about the 'Ghost Telephonist' attack and its implications for mobile network security.
Sonic Gun to Smart Devices - Your Devices Lose Control Under Ultrasound - Sound
Explore how acoustic waves can exploit vulnerabilities in MEMS sensors, causing smart devices to lose control and yield spoiled data.
IoTCandyJar - Towards an Intelligent-Interaction Honeypot for IoT Devices
Explore innovative honeypot adaptation for IoT security, addressing unique challenges and proposing intelligent interaction solutions to enhance protection of networked embedded devices.
The Adventures of AV and the Leaky Sandbox
Explore a novel data exfiltration technique exploiting cloud-enhanced antivirus sandboxes in highly secure enterprises, demonstrating vulnerabilities in seemingly protected systems.
Bug Collisions Meet Government Vulnerability Disclosure
Explore the Vulnerability Equities Process and its impact on software vulnerability disclosure, examining the likelihood of multiple parties discovering the same security flaws.
KR^X - Comprehensive Kernel Protection Against Just-In-Time Code Reuse
Explore comprehensive kernel protection against just-in-time code reuse attacks, focusing on memory corruption vulnerabilities and hardening techniques to prevent privilege escalation in kernel code.
Big Game Theory Hunting - The Peculiarities of Human Behavior in the InfoSec Game
Explore behavioral game theory in cybersecurity, examining human decision-making and its impact on defense strategies. Learn how empirical observations challenge traditional assumptions about rational behavior in InfoSec.
National Cyber-Aggression and Private-Sector Internet Infrastructure
Exploring nation-state cyber-attacks on private Internet infrastructure, misaligned military incentives, and economic impacts. Discusses past efforts and current initiatives to address these challenges.
Hacking Serverless Runtimes - Profiling AWS Lambda, Azure Functions & More
Explore techniques for auditing and defending serverless runtimes, focusing on AWS Lambda and Azure Functions, to enhance security in micro-service architectures.
Betraying the BIOS - Where the Guardians of the BIOS are Failing
Explore UEFI firmware vulnerabilities, recent security breaches, and the growing threat landscape. Gain insights into potential widespread security lapses in BIOS protection.
Tracking Ransomware End to End
Explore the rise of ransomware, its revenue model, and tracking methods. Learn about Bitcoin usage, victim payments, and evolving cybercrime tactics in this comprehensive analysis.
Dragon Tails - Measuring Dependence on International Vulnerability Research
Análisis cuantitativo del impacto de las restricciones chinas en la divulgación de vulnerabilidades de software, examinando su efecto en productos propietarios y de código abierto.
Vulnerability Intelligence
Explore vulnerability intelligence, analyzing 10 years of data to improve prioritization and mitigation strategies for security specialists navigating the complex landscape of weaknesses.
Cybersecurity Meets Reality
Explore real-world cybersecurity challenges and solutions with insights from a seasoned security officer, offering practical perspectives on industry trends and best practices.
Recording at Scale Across Your Global Network Is Essential for Your Cyber Security Posture
Explore essential strategies for global network recording to enhance cybersecurity. Learn about threat landscapes, Netflow, forensics, and cost-effective solutions for improved security posture.
Can Your Security Mid Game Stand Up to the IT Ransomware Playbook
Explore ransomware mid-game tactics, attacker strategies, and defensive measures to strengthen your security posture against evolving threats in this informative discussion.