Security Industry Call-to-Action - We Need a Cloud Vulnerability Database
Explore cloud vulnerabilities in AWS, GCP, and Azure, and learn why a cloud-specific vulnerability database is crucial for improved security in the evolving cloud landscape.
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
Explore cloud security threats, including crypto-mining worms and innovative techniques targeting AWS, Kubernetes, and other providers. Learn about hackers' methods, persistence strategies, and potential impacts on cloud environments.
Practical HTTP Header Smuggling - Sneaking Past Reverse Proxies to Attack AWS and Beyond
Explore HTTP header smuggling techniques to bypass security measures, attack web applications, and exploit vulnerabilities in proxy servers and AWS services.
Bridging Security Infrastructure Between the Data Center and AWS Lambda
Explore secure integration of serverless technology with data center services, focusing on workload identity in AWS Lambda and bridging identity between on-premises and cloud environments.
Can You Roll Your Own SIEM
Explore building a custom cloud-native SIEM solution, discussing considerations, requirements, and benefits compared to vendor options. Learn about cost savings and improved capabilities.
How I Can Unlock Your Smart Door - Security Pitfalls in Cross-Vendor IoT Access Control
Explores security vulnerabilities in cross-vendor IoT access control, focusing on delegation chains and authorization flaws in smart home devices and cloud platforms.
Internet Everywhere - The Future of History's Most Disruptive Technology
Pioneers explore the Internet's revolutionary impact, discussing its history, current developments, and future implications for technology, society, and human interaction.
Serverless Security - Attack & Defense
Explore serverless security vulnerabilities and defenses across AWS, Azure, and GCP. Learn about dependency poisoning, validation errors, and insecure defaults with practical demos and prevention strategies.
Breaking and Securing Cloud Platforms
Comprehensive analysis of cloud security vulnerabilities, real-world attack scenarios, and best practices for securing cloud deployments. Covers data exposure, access control issues, and attacker exploitation techniques.
KLara - Your New Friend
Cloud-based Yara scanner for efficient malware detection. Scans large malware libraries at high speeds, enhancing threat intelligence and APT hunting capabilities. Open-source project with live demo.
Breaking Apple's iCloud Keychain
Discover techniques for accessing and analyzing data stored in Apple's iCloud, including synced information, backups, and keychain contents. Learn about vulnerabilities in two-factor authentication.
Cache Side Channel Attacks - CPU Design As A Security Problem
Explore CPU cache vulnerabilities and side-channel attacks, their impact on security, and potential mitigations in modern computing environments like cloud and multi-user systems.
Duplicating Black Box Machine Learning Models
Exploración de técnicas avanzadas para duplicar modelos de aprendizaje automático de caja negra, destacando vulnerabilidades en servicios en la nube y proponiendo un nuevo método de ataque más eficiente.
Hey Attacker! I Can See You!
Exploring cloud-scale deception technology to track and analyze attackers, enhancing Azure security through psychological and technical approaches for better threat intelligence and user protection.
All Your Cloud Are Belong to Us - Hunting Compromise in Azure
Explore cloud security challenges, focusing on Azure infrastructure vulnerabilities and shared responsibility in IaaS, PaaS, and SaaS environments. Learn detection and mitigation strategies for emerging threats.
Hardening Android Against Ransomware, One Dessert at a Time
Explore Android's evolving defenses against ransomware, from KitKat to Nougat, and learn about system improvements and proactive measures to protect devices, data, and user experience.
Tracking Internet Threats by Visualizing IP and DNS Data
Visualize IP and DNS data to track Internet threats using innovative techniques like particle physics models and network graphs for enhanced cybersecurity intelligence.
Cyber in a World of Cloud
Explore cloud security challenges and advantages, including threat adaptation, data-driven defense, and self-protection mechanisms in hyperscale environments.
Changing the Physics of Defense
Explore modern cybersecurity trends reshaping defense strategies, including cloud storage, big data analytics, information sharing, and advanced skillsets to counter evolving threats.
Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure
Explore Azure Log Analytics exploitation as a covert channel, uncovering potential security threats in cloud logging infrastructure and learning mitigation strategies.
So You Think You Can Secure Your Cloud - Red Team Engagements in GCP
Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.