Securing Your In-Ear Fitness Coach - Challenges in Hardening Next Generation Wearables
Explore security challenges and solutions for next-gen wearables, focusing on a custom Security Development Lifecycle for hardware, software, and cloud components in IoT ecosystems.
When Good Turns Evil - Using Intel SGX to Stealthily Steal Bitcoins
Explore how Intel SGX can be exploited to implement stealthy malware, extract secret RSA keys, and steal Bitcoins through cache attacks and other vulnerabilities in trusted execution environments.
A New Method to Bypass 64-bit Linux ASLR
Explore a novel ASLR bypass technique for 64-bit Linux systems using "return-to-csu", applicable to any application due to its use of silently attached code.
Breaking the Attack Graph - How to Leverage Graphs to Strengthen Security in a Domain Environment
Explore how defenders can leverage graph-based thinking to strengthen security in domain environments, adapting to sophisticated attackers and enhancing prevention, detection, and investigation strategies.
Exfiltrating Reconnaissance Data from Air-Gapped ICS - SCADA Networks
Explore techniques for exfiltrating data from isolated industrial networks, including PLC-based methods, frequency manipulation, and passive monitoring. Learn about attack vectors and detection strategies.
A Retrospective Case Study of VMware Guest-to-Host Escape Vulnerabilities
Análisis detallado de vulnerabilidades de escape de máquinas virtuales VMware, explorando superficies de ataque, mecanismos RPC y casos de estudio de parches de seguridad recientes.
A Process is No One - Hunting for Token Manipulation
Learn to generate hunt hypotheses for effective threat hunting, focusing on token manipulation techniques and targeted data collection for improved cybersecurity analysis.
Inside Android's SafetyNet Attestation
Explore Android's SafetyNet Attestation, its role in ecosystem security, and potential vulnerabilities. Learn about attack patterns, device integrity detection, and implementation challenges.
Attacks Against GSMA's M2M Remote Provisioning
Explore vulnerabilities in GSMA's eUICC remote provisioning, revealing potential attacks that could disrupt mobile network operators' service delivery. Learn about SIM evolution and security implications.
CALDERA - Automating Adversary Emulation
Automate adversary emulation for network security using CALDERA. Replicate realistic post-compromise techniques, leveraging benign system functionality to enhance defensive strategies.
Effective Vulnerability Discovery with Machine Learning
Explore machine learning techniques for effective vulnerability discovery in software dependencies, enhancing security analysis beyond traditional methods.
Securing the Next Version of HTTP - How QUIC and HTTP-3 Compare to HTTP-2
Explore QUIC and HTTP/3 protocols, their security features, and improvements over HTTP/2. Learn about encryption, handshakes, and performance enhancements in next-gen web communication.
Raiden Glitching Framework
Explore voltage glitching for hardware hacking, bypassing security mechanisms, and disclosing firmware secrets using the Raiden framework and Python API.
From Zero to Sixty - The Story of North Korea's Rapid Ascent to Becoming a Global Cyber Superpower
Explore North Korea's rise as a cyber superpower through technical analysis and strategic insights, featuring demonstrations of rare malware variants and their global impact.
Hey Google, Activate Spyware! - When Google Assistant Uses a Vulnerability as a Feature
Explore Android vulnerabilities allowing unauthorized camera control, revealing security flaws in Google Assistant and discussing implications for user privacy and smartphone security.
3D Red Pill - A Guest-to-Host Escape on QEMU/KVM Virtio Device
Demonstration of a guest-to-host escape exploit on QEMU/KVM virtio-gpu devices, showcasing vulnerability analysis, exploitation techniques, and potential security solutions.
Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices
Discover critical Wi-Fi security vulnerabilities affecting billions of devices, including Amazon Echo. Learn about Kr00k, its impact, and see a live demonstration of the exploit.
ZombieLoad - Leaking Data on Intel CPUs
Explore ZombieLoad, a critical Intel CPU vulnerability. Learn about its mechanics, implications for data security, and potential exploits through demonstrations and insights.
Wi-Fi Brokering
Explore Wi-Fi network vulnerabilities and advanced attack techniques, focusing on 802.1X networks and PEAP authentication methods. Learn about relaying challenges and responses for unauthorized access.
Complexity Killed Security
Explore how increasing hardware complexity impacts software security, challenges in documentation access, and potential solutions for modern cybersecurity threats.
How I Created My Clone Using AI - Next-Gen Social Engineering
Explore AI-powered impersonation techniques for advanced social engineering attacks, including text, voice, and video cloning. Live demonstrations showcase creating realistic digital doppelgangers for online deception.