Multiple Bugs in Multi-Party Computation - Breaking Cryptocurrency's Strongest Wallets
Explore vulnerabilities in advanced cryptographic methods for cryptocurrency wallets, focusing on multi-party computation and threshold signature schemes. Learn about potential attacks and security considerations.
Healthscare – An Insider's Biopsy of Healthcare Application Security
Insider's examination of vulnerabilities in healthcare systems, including radiology, EMR, pharmacy, and clinical documentation. Highlights security issues and proposes solutions for the healthcare industry.
Spectra - Breaking Separation Between Wireless Chips
Explore wireless spectrum sharing challenges, coexistence mechanisms, and potential vulnerabilities in Wi-Fi and Bluetooth chips, with focus on smartphone security implications.
Lateral Movement and Privilege Escalation in GCP - Compromise Organizations without Dropping an Implant
Explore techniques for identity compromise, privilege escalation, and lateral movement in Google Cloud. Learn about GCP's unique security model and default permissions, with demonstrations and tool releases.
You Have No Idea Who Sent That Email - 18 Attacks on Email Sender Authentication
Uncover 18 email sender authentication attacks, their impact on popular providers, and defense strategies in this eye-opening exploration of email security vulnerabilities.
An Unauthenticated Journey to Root - Pwning Your Company's Enterprise Software Servers
Uncover critical vulnerabilities in SAP enterprise software, exploring unauthenticated access to root privileges. Learn attack steps, prevention strategies, and potential impacts on Fortune 1000 companies.
HTTP Request Smuggling in 2020 - New Variants, New Defenses and New Challenges
Explore new variants, defenses, and challenges of HTTP Request Smuggling, an attack technique exploiting interpretations of non-standard HTTP requests between client and server.
Engineering Empathy - Adapting Software Engineering Principles and Process to Security
Explore how software engineering principles can enhance security practices, featuring insights from a role-reversal experiment between security and runtime teams.
Hacking the Supply Chain - The Ripple20 Vulnerabilities Haunt Tens of Millions of Critical Devices
Exposición sobre vulnerabilidades críticas Ripple20 que afectan a millones de dispositivos IoT en diversos sectores, detallando su descubrimiento, impacto y explotación técnica.
Stealthily Access Your Android Phones - Bypass the Bluetooth Authentication
Explore Android Bluetooth vulnerabilities, including BlueRepli, and learn stealthy access techniques. Discover security risks in AOSP and mobile manufacturers' oversights.
Web Cache Entanglement - Novel Pathways to Poisoning
Explore novel web cache poisoning techniques, probing cache inconsistencies to build sophisticated exploit chains. Learn to uncover vulnerabilities in caching systems across the internet.
My Cloud is APT's Cloud - Investigating and Defending Office 365
Investigate and defend Office 365 against sophisticated attacks. Learn authentication types, attack lifecycle, and effective countermeasures for cloud-based enterprise security.
IMP4GT - IMPersonation Attacks in 4G Networks
Explore IMP4GT attacks in 4G networks, revealing vulnerabilities in LTE security. Learn about impersonation techniques, their impact, and consequences for users and law enforcement.
A Framework for Evaluating and Patching the Human Factor in Cybersecurity
Explore a framework for assessing and improving human-related cybersecurity vulnerabilities, focusing on evaluating and enhancing the human factor in security systems.
Demystifying Modern Windows Rootkits
Explore Windows rootkit development, from basic drivers to advanced hooking techniques. Learn about kernel-mode malware, network stack manipulation, and innovative methods to evade detection.
Office Drama on macOS
Explore macOS-specific Office macro attacks, their growing popularity, and unique exploit techniques. Learn about analysis, sandbox bypassing, and detection methods for these emerging threats.
Hiding Process Memory via Anti-Forensic Techniques
Explore novel anti-forensic techniques for hiding malicious process memory, evading detection by memory analysis tools while maintaining accessibility for malware functionality.
Security Research on Mercedes-Benz - From Hardware to Car Control
Explore Mercedes-Benz car security research, from hardware analysis to gaining control. Learn about attack surfaces, reverse engineering, and cloud control in modern connected vehicles.
Plundervolt - Flipping Bits from Software without Rowhammer
Discover Plundervolt: a software-based fault attack that threatens system security without physical access. Learn its mechanisms, potential impacts, and how it compares to Rowhammer.
A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep Learning
Explore deep-learning techniques to identify and reduce side-channel attack vulnerabilities, leveraging AI explainability for efficient implementation assessment and improved security.
Emulating Samsung's Baseband for Security Testing
Explore Samsung baseband security through emulation, enabling scalable vulnerability research and debugging for cellular network protocols.