Enrolling Millions of Developers in 2FA - Here's What Happened
Behind-the-scenes look at GitHub's 2FA initiative: strategic considerations, challenges, and lessons learned from scaling security measures for millions of developers.
When a Zero Day and Access Keys Collide in the Cloud - Responding to the SugarCRM 0-Day Vulnerability
Explore AWS environment attacks using MITRE ATT&CK, learn prevention strategies, and understand the complexities of cloud security through the lens of the SugarCRM 0-day vulnerability.
Does Public Disclosure of Vulnerabilities Affect Hacker Participation in Bug Bounty Programs?
Explore the impact of public vulnerability disclosure on bug bounty programs, examining its effects on hacker participation and organizational security strategies.
Close Encounters of the Advanced Persistent Kind - Leveraging Rootkits for Post-Exploitation
Explore advanced Windows kernel post-exploitation techniques, including 0-day vulnerability exploitation, DKOM for altering OS telemetry, and NDIS modules for disrupting EDR cloud telemetry and establishing covert persistence.
NPM and Sigstore - Provenance Comes to the World's Largest OSS Ecosystem
Explore GitHub's efforts to secure the Javascript ecosystem through provenance integration and Sigstore partnership, enhancing npm's security against malware and supply chain attacks.
Making and Breaking NSA's Codebreaker Challenge
Explore NSA's Codebreaker Challenge: a competitive program mimicking real-world cybersecurity problems, featuring code analysis and reverse engineering tasks of increasing difficulty for US students.
Synthetic Trust - Exploiting Biases at Scale
Explore AI-generated voice phishing attacks, their psychological and technical aspects, and the growing threats of generative AI on decision-making, personal security, and organizational trust.
Lifting the Fog of War - Monitoring, Identifying and Mitigating MS-RPC Based Threats
Explore techniques for monitoring and defending against RPC-based attacks, including traffic analysis, signature detection, and mitigation strategies for Windows environments.
Dive into Apple UserFS - Userspace Filesystem
Explore Apple UserFS architecture, its impact on filesystem security, and potential vulnerabilities. Gain insights into iOS security through reverse-engineering and analysis of this userspace filesystem implementation.
Badge of Shame - Breaking into Secure Facilities with OSDP
Explore vulnerabilities in OSDP protocol for secure facilities, from cryptographic attacks to basic flaws. Learn about a practical pentesting tool for exploiting these weaknesses in RFID systems.
How NOT to Train Your Hack Bot - Dos and Don'ts of Building Offensive GPTs
Explore the potential and limitations of using large language models for offensive security operations, including techniques for finding vulnerabilities and ethical considerations.
Evading Logging in the Cloud - Bypassing AWS CloudTrail
Explore AWS API vulnerabilities that allowed CloudTrail logging bypass, uncovering security flaws in various AWS services and their subsequent fixes.
Fast, Ever-Evolving Defenders - The Resilience Revolution
Explore a new resilience-based paradigm for systems defense, focusing on nimble, empirical approaches to outmaneuver attackers through accelerated operational tempo and design-based solutions.
Defender-Pretender - When Windows Defender Updates Become a Security Risk
Explore Windows Defender's architecture, signature database, and update process. Learn about a critical 0day vulnerability affecting Windows and Microsoft 365 Defender, posing risks to enterprise machines.
Kill Latest MPU-Based Protections in Just One Shot - Targeting All Commodity RTOSes
Unveils critical security flaws in popular RTOSes, demonstrating exploitation techniques for privilege escalation and arbitrary read/write access through live demos on real-world products.
Low-Level RASP - Protecting Applications Implemented in High-Level Programming Languages
Explore low-level RASP for enhanced application security across multiple high-level programming languages, offering improved defense capabilities compared to traditional WAF and HIPS solutions.
One Drive, Double Agent - Clouded OneDrive Turns Sides
Explore how OneDrive can be exploited for ransomware attacks, bypassing traditional EDR defenses. Learn about novel techniques and their implications for cloud security.
All You Need is Guest
Uncover security risks of Azure AD guest accounts and learn how undocumented APIs can be exploited to gain unauthorized access to sensitive enterprise resources.
Me and My Evil Digital Twin - The Psychology of Human Exploitation by AI Assistants
Explore the psychological impact of AI assistants on human perception and vulnerability to manipulation, examining the potential for digital agents to exploit cognitive biases before achieving true sentience.
EDR - Erase Data Remotely, By Cooking An Unforgettable Byte Signature Dish
Discover a new vulnerability allowing remote deletion of critical files through endpoint security controls' byte signature detection logic, potentially causing severe data loss and DOS attacks.
Risks of AI Risk Policy - Five Lessons
Explores challenges in implementing AI risk management frameworks, highlighting five key roadblocks faced by stakeholders when operationalizing standards like NIST AI RMF and EU AI Act.