Needing the DoH - The Ongoing Encryption and Centralization of DNS
Explore DNS encryption's impact on internet privacy, security, and network operations. Delve into DoT and DoH standards, their implications for users and providers, and the shift towards centralized DNS.
TiYunZong Exploit Chain to Remotely Root Modern Android Devices - Pwn Android Phones from 2015-2020
Comprehensive exploit chain analysis for remotely rooting modern Android devices, focusing on Pixel phones. Explores attack surfaces, introduces new vulnerabilities, and demonstrates practical exploitation techniques.
On Trust - Stories from the Front Lines
Explore how companies develop character through their approach to security and privacy, with insights from leading security programs during times of change and adversity.
Attacking iPhone XS Max
Explore iPhone XS Max vulnerabilities, including PAC implementation, XNU bug exploitation, and kernel read/write access. Learn about Unix Domain Socket, race conditions, and unprotected control flow transfer points.
Breaking Through Another Side - Bypassing Firmware Security Boundaries from Embedded Controller
Reverse engineering Embedded Controller firmware to bypass Intel BIOS Guard on Lenovo Thinkpads, exploring hardware security boundaries and firmware update processes.
API-Induced SSRF - How Apple Pay Scattered Vulnerabilities Across the Web
Explore API security vulnerabilities, focusing on Apple Pay's impact, with live demos and actionable strategies for improving defensive programming practices.
The Enemy Within - Modern Supply Chain Attacks
Practical guidance on defending against and responding to supply chain attacks, covering prevention strategies, risk assessment, and best practices for both SecOps and App Development professionals.
HostSplit - Exploitable Antipatterns in Unicode Normalization
Explore new exploit techniques using Unicode normalization to bypass URL security filters and enable domain impersonation, with focus on software-fooling attacks beyond visual spoofing.
Preventing Authentication Bypass - A Tale of Two Researchers
Explore techniques for identifying authentication bypass vulnerabilities, learn effective researcher-company partnerships, and discover secure coding practices to prevent similar flaws in web applications.
Selling 0-Days to Governments and Offensive Security Companies
Explore the intriguing world of vulnerability brokerage, including the process of selling 0-days, market dynamics, and key stakeholders involved in this secretive industry.
Towards Discovering Remote Code Execution Vulnerabilities in Apple FaceTime
Explore FaceTime's vulnerabilities through reverse engineering, focusing on call initialization, connection processes, and potential attack surfaces for remote code execution.
Adventures in the Underland - The CQForensic Toolkit as a Unique Weapon Against Hackers
Explore CQTools, a powerful toolkit for penetration testing, featuring unique discoveries by CQURE Team. Learn practical applications in cybersecurity projects and forensic analysis.
Mobile Network Hacking - IP Edition
Explore mobile network vulnerabilities and learn how to apply IT security measures to protect against user tracking, RCS exploits, fake access points, and DNS attacks.
Unveiling the Underground World of Anti-Cheats
Explore anti-cheat techniques in gaming, from market analysis to advanced methods like memory manipulation, with insights on implementation and real-world examples.
The Future of Securing Intelligent Electronic Devices Using the IEC 62351-7 Standard for Monitoring
Explore threat detection in smart grids using IEC 62351 and SNMP, with live coverage analysis and demonstrations of active monitoring for securing intelligent electronic devices.
Behind the Scenes of iOS and Mac Security
Explore iOS and macOS security features, including Find My, Gatekeeper, and kernel integrity protection. Learn about Apple's innovative approaches to user privacy and device security.
See Like a Bat - Using Echo-Analysis to Detect Man-in-the-Middle Attacks in LANs
Explore Vesper, a novel MitM detector for LANs using echo-analysis. Learn about its application, effectiveness against various attacks, and practical deployment strategies.
Defense Against Rapidly Morphing DDOS
Explore defenses against rapidly evolving DDoS attacks, examining the ProtonMail case and evaluating mitigation strategies for SOC operators facing dynamic, high-speed threats.
Chip.Fail - Glitching the Silicon of the Connected World
Explore fault injection attacks on popular IoT processors using affordable equipment. Learn about voltage glitching techniques and tools for breaking silicon security in connected devices.
Cyber Insurance 101 for CISOs
Explore cyber insurance essentials for CISOs, covering policy dynamics, terms, and the CISO's role in procurement. Gain insights into market trends and coverage limitations.
Exploiting the Hyper-V IDE Emulator to Escape the Virtual Machine
Explore a critical Hyper-V vulnerability, its exploitation on Windows Server 2012R2, and learn about virtualization security, memory manipulation, and payload strategies in this technical deep dive.