Decoding Galah - An LLM-Powered Web Honeypot
Discover how LLM-powered honeypot Galah revolutionizes web security by dynamically simulating multiple applications and analyzing attacker behavior through intelligent HTTP response generation.
Exploiting Voice Cloning in Adversarial Simulation - Security Testing and Defense Strategies
Explore the security vulnerabilities of voice verification systems through deep learning voice cloning techniques, including practical demonstrations, risk assessment, and defensive countermeasures.
Bluetooth Blues: Unmasking CVE 2023-52709 - The TI BLE5-Stack Attack
Dive into the technical analysis of CVE 2023-52709, exploring Bluetooth stack vulnerabilities, their impact on automotive security, and essential mitigation strategies for RPA generation failures.
MFT: Using NFTs as Attack Vectors for Command and Control
Explore how NFTs can be weaponized as attack vectors for C2 commands, featuring the mFT tool for creating malicious payloads and understanding blockchain-backed threats in cybersecurity.
Atomic Honeypot - A MySQL Honeypot That Drops Shells
Discover how a weaponized MySQL honeypot server exploits vulnerabilities to counter-attack malicious clients, featuring innovative use of CVE-2023-21980 and CVE-2024-21096 for defensive security research.
Introduction to IPv6 - Understanding Modern Internet Protocols
Dive into the evolution of Internet protocols, from IPv4 to IPv6, understanding core networking concepts and security implications for modern infrastructure deployment.
Access Control System Implementation Best Practices and Security Guidelines
Master essential best practices for implementing secure physical access control systems, from tamper-resistant wiring to clone-proof badges and controller equipment management.
Manufacturing Cybersecurity: Lessons Learned and Taught from Ransomware Attacks
Delve into manufacturing cybersecurity challenges, focusing on ransomware threats, network vulnerabilities, and automation risks while exploring protective strategies for operational technology environments.
MoWireless MoProblems: Modular Wireless Survey System and Data Analytics with PacketGlass
Discover how to build and implement a modular wireless survey system using PacketGlass for efficient collection, visualization, and analysis of massive wireless network data through Elastic-based analytics.
The Interplay Between Safety and Security in Aviation Systems
Explore the critical relationship between aviation safety and cybersecurity standards, from DO-178 to DO-356A, understanding system design principles, assurance levels, and threat modeling in modern aircraft systems.
Cybersecurity Evolution at NSA: From Cryptography to Global Internet Defense
Gain insights into cybersecurity evolution through a 35-year NSA veteran's journey, exploring vulnerability analysis, defense strategies, and the complex interplay between defense and intelligence operations.
Small Satellite Modeling and Cybersecurity - Building Defensive Solutions for Space Systems
Explore cybersecurity challenges and defensive strategies for small satellite systems, including modeling techniques, vulnerability analysis, and the innovative Small Satellite Defender solution.
Solving the Lover Stalker Killer Murder Case Using Digital Forensics Tools
Delve into forensic digital investigation techniques used to solve a real murder case, exploring how basic Unix tools and Perl programming helped crack a complex cyberstalking homicide investigation.
Process Injection Attacks with Return-Oriented Programming - Advanced Techniques and Methodologies
Discover advanced process injection techniques using return-oriented programming (ROP), including unique string comparison solutions, multiple WinAPI patterns, and practical methodologies for reliable implementation.
Sudos and Sudon'ts - Peering Inside Sudo for Windows
Delve into Windows security mechanisms through an analysis of Sudo for Windows, exploring process elevation, ALPC services, and Rust-Windows API interactions while uncovering potential security vulnerabilities.
RFID 101: Understanding Badge Systems, Readers, and Security Exploits
Discover the fundamentals of RFID technology, badge cloning, and security system vulnerabilities using tools like Proxmark and Flipper, while learning practical wireless communication hacking techniques.
How State Laws Meant to Protect Children Raise Other Privacy and Constitutional Risks
Explore the complex interplay between state privacy laws aimed at protecting children online and their unintended consequences, from data collection concerns to First Amendment challenges.
Lessons Learned from Building and Defending LLM Applications
Gain insights into real-world challenges and practical strategies for developing secure LLM applications, exploring vulnerabilities, defense mechanisms, and best practices for robust AI systems.
Using EPSS for Better Vulnerability Management
Discover how to implement EPSS for vulnerability management, leveraging data-driven insights to predict and prioritize exploit risks in CI/CD pipelines and system patching processes.
Red Team Attack Simulation for Operational Technology - Real-World Case Studies
Dive into real-world attack vectors and strategies for industrial networks through a decade of Red Team exercises, focusing on operational technology and control system vulnerabilities.
Warflying: Aerial WiFi Network Detection and Analysis from a Cessna
Explore the fascinating intersection of WiFi scanning and aviation as two researchers conduct aerial wireless network detection experiments using a Cessna, revealing surprising insights about signal ranges and detection capabilities.