Leverage and Demonstrate Value with Your Cyber Insurance Renewal
Discover strategies to maximize cyber insurance renewals, showcasing your organization's value and security measures for optimal coverage and rates.
Why Cyber Insurance Should Be Your SOC's New Best Friend
Explore how cyber insurance can enhance your SOC's effectiveness, providing insights on risk management, incident response, and cybersecurity best practices.
The Integration of Cyber Security and Insurance - The Journey of Cysurance
Explore the convergence of cybersecurity and insurance, examining Cysurance's innovative approach to risk management and protection in the digital age.
Sure, Let Business Users Build Their Own. What Could Go Wrong?
Explore the risks and security implications of business users creating applications with low-code/no-code platforms, and learn strategies to mitigate potential vulnerabilities in enterprise environments.
Diversity Microtalks - Perspectives on Creating Change
Cybersecurity leaders share practical insights on inclusion, data-driven diversity approaches, and strategies to reduce microaggressions and quiet quitting in the workplace.
TSSHOCK - Breaking MPC Wallets and Digital Custodians for Billion Dollar Profit
Unveils critical vulnerabilities in MPC wallets and digital custodians, demonstrating potential billion-dollar cryptocurrency theft through 0-day attacks on Threshold Signature Schemes used by major institutions.
A SSLippery Slope - Unraveling the Hidden Dangers of Certificate Misuse
Explore the hidden risks of certificate misuse, focusing on digital signatures, code signing, and SSL/S/MIME certificates. Learn about authentication challenges and potential security vulnerabilities.
The Most Dangerous Codec in the World - Finding and Exploiting Vulnerabilities in H.264 Decoders
Uncover hidden security risks in H.264 video decoders using H26Forge framework. Learn to craft video files exposing edge cases and potential vulnerabilities in this complex, privileged ecosystem.
The Yandex Leak - How a Russian Search Giant Uses Consumer Data
Explore the implications of Yandex's leaked source code, revealing insights into data collection practices and behavioral analytics technologies used by the Russian search giant.
Mirage - Cyber Deception Against Autonomous Cyber Attacks
Explore novel cyber deceptions targeting weaknesses in AI-driven attacks and an emulation system for evaluating deceptions and adversaries at scale.
Becoming a Dark Knight - Adversary Emulation Demonstration for ATT&CK Evaluations
Explore adversary emulation for cybersecurity, learning how to study advanced threats, develop scenarios, and execute operations to improve industry defenses through MITRE ATT&CK Evaluations.
Know Thy Enemy - The Taxonomies That Meta Uses to Map the Offensive Privacy Space
Explore Meta's privacy-inclusive taxonomies for tracking weaknesses, adversarial tactics, and scaling detection efforts. Learn how these frameworks enhance privacy threat understanding and align security teams.
BingBang - Hacking Bing.com with Azure Active Directory
Discover a novel technique for identifying Azure Active Directory misconfigurations, exposing vulnerabilities in cloud-managed environments and their potential impact on major platforms like Bing.com.
Unsafe at Any Speed - CISA's Plan to Foster Tech Ecosystem Security
Explore CISA's strategy for enhancing tech ecosystem security, covering safe-by-design products, memory safety, open-source security, insurance, and addressing the security poverty line.
MTLS - When Certificate Authentication is Done Wrong
Explore novel attacks on mTLS authentication in zero-trust networks, examining vulnerabilities and complexities associated with X509 certificate-based client authentication.
I Watched You Roll the Die - Unparalleled RDP Monitoring Reveal Attackers' Tradecraft
Unparalleled RDP monitoring reveals attackers' tactics through PyRDP, an open-source tool. Analysis of 3-year honeynet data exposes threat actors' methods, providing insights into RDP-based attacks and ransomware outbreaks.
Endoscope - Unpacking Android Apps with VM-Based Obfuscation
Explore techniques for unpacking Android apps with VM-based obfuscation, focusing on code virtualization challenges and reverse-engineering methods for mobile app security analysis.
Uncovering Azure's Silent Threats - A Journey into Cloud Vulnerabilities
Explore security vulnerabilities in Azure ML, uncovering potential threats in cloud-based machine learning platforms and discussing implications for AI/ML system adoption.
Interpretable Incident Inspector Based on Large-Scale Language Model and Association Mining
Explainable AI-powered incident inspector combining language models and association mining for robust, interpretable cybersecurity analysis of large-scale events.
Unleashing the Power of Decompilation for x86 Deep Neural Network Executables
Explore BTD, a decompiler for deep neural network executables, enabling reverse engineering of compiled DL models on various hardware platforms to enhance security and transparency.
Identifying and Reducing Permission Explosion in AWS - A Graph-Based and Analytical Approach
Explore a graph-based approach to identify and mitigate permission explosion in AWS, enhancing cloud security and reducing potential risks in complex infrastructures.