Understanding and Exploiting Implanted Medical Devices
Explore vulnerabilities in implanted medical devices, including pacemakers and neurostimulators. Learn about remote exploitation risks, therapy disruption, and patient safety concerns in this technical presentation.
The Battle Against the Billion-Scale Internet Underground Industry - Advertising Fraud Detection
Explore the escalating war between internet advertising fraud and anti-fraud efforts. Analyze typical underground industry gangs and their evolving tactics in this high-stakes technological confrontation.
From Hackathon to Hacked - Web3's Security Journey
Explore Web3 and blockchain security challenges, examining the risks of emerging tech, high-stakes environments, and immutable transactions. Learn about current vulnerabilities and potential solutions.
Measure Security Effectively
Learn strategies to quantify cybersecurity effectiveness, determine ROI, and communicate results from the security trenches to the boardroom, addressing a key industry challenge.
10 Things I Wish I Knew Before My First Incident
Essential insights for effective incident response, covering crucial aspects often overlooked by beginners. Learn from real-world experiences to enhance your preparedness and decision-making during critical cybersecurity events.
Your Software IS - NOT Vulnerable - CSAF, VEX, and the Future of Advisories
Explore the future of software security advisories, focusing on CSAF and VEX, and learn how to manage the increasing volume of vulnerability information effectively.
Breaking Access Controls With BLEKey
Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.
Blended Web and Database Attacks on Real-Time, In-Memory Platforms
Explore innovative attack vectors on real-time, in-memory platforms, blending web and database vulnerabilities. Learn about new SQL injection techniques, server-side JavaScript exploits, and R-based attacks in SAP HANA.
New and Newly - Changed Fully Qualified Domain Names - A View of Worldwide Changes to DNS
Innovative approach to monitoring DNS changes, enabling better detection of security threats, phishing, and malicious behavior. Practical examples and demo included.
The Tactical Application Security Program - Getting Stuff Done
Aprenda a implementar um programa de segurança tático e eficaz, focando em avaliações ágeis, resposta a incidentes e gerenciamento de bugs. Descubra por que abordagens táticas podem ser mais efetivas que estratégias de longo prazo.
The Battle for Free Speech on the Internet
Explore the challenges and strategies for preserving online freedom of speech, examining the impact of censorship and the role of tech companies in protecting lawful content.
Fingerprints on Mobile Devices - Abusing and Leaking
Explore vulnerabilities in mobile fingerprint authentication, including authorization attacks, sensor spying, and backdoors. Learn to secure fingerprints and mitigate risks in this eye-opening analysis.
I'm Not a Human - Breaking the Google reCAPTCHA
Explore techniques to bypass Google's reCAPTCHA using risk analysis manipulation, deep learning for image recognition, and automated solving methods. Discusses implications for CAPTCHA security.
The Tactical Application Security Program - Getting Stuff Done
Practical approach to application security: lightweight team, agile methods, and operational excellence. Covers assessments, bug handling, and private bug bounty programs, with actionable advice for managers and practitioners.
Numchecker - A System Approach for Kernel Rootkit Detection
Explore NumChecker, a VMM-based framework for detecting kernel rootkits using Hardware Performance Counters. Learn about its implementation, effectiveness, and security analysis.
Weaponizing Data Science for Social Engineering - Automated E2E Spear Phishing on Twitter
Automated spear phishing on Twitter using machine learning and social engineering techniques. Explores target profiling, content generation, and high-value target identification for more effective phishing campaigns.
Building Trust and Enabling Innovation for Voice Enabled IoT
Explore security considerations for voice-enabled IoT devices using the Voice Privacy Alliance's toolkit, focusing on building trust and fostering innovation in this emerging technology.
AndroBugs Framework - An Android Application Security Vulnerability Scanner
Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.
Automating Linux Malware Analysis Using Limon Sandbox
Explore automated Linux malware analysis with Limon sandbox. Learn to collect, analyze, and report runtime indicators using static, dynamic, and memory analysis techniques for comprehensive threat assessment.
What You Need to Know About the Changing Regulatory Landscape in Information Security
Explore the evolving regulatory landscape in information security with experts discussing challenges, communication gaps, and strategies for navigating policy changes in Europe and beyond.
Cybersecurity for Oil and Gas Industries - How Hackers Can Manipulate Oil Stocks
Explore critical cybersecurity vulnerabilities in oil and gas industries, focusing on SAP and Oracle systems. Learn about potential attacks, their impacts, and strategies for protecting vital infrastructure and operations.