Software Defines the Vehicle - Why Customers and Developers Will Love Cars Even More
Explore how software is revolutionizing the automotive industry, enhancing user experiences and creating exciting opportunities for developers in vehicle technology.
Rolling out the C2 - Modern Red Team Infrastructure in 2024
Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.
Wars and Rumors of Wars - Implications for Domestic Critical Infrastructure
Explore the implications of Volt Typhoon's cyber attacks on critical infrastructure and discuss appropriate responses for organizations and individuals facing such threats.
Living with the Enemy - How to Protect Yourself and Energy Systems
Explore strategies for reducing risks in energy systems integrating IoT devices, focusing on clean energy infrastructure security amidst climate change and manufacturing uncertainties.
All Your Badge Are Belong to Us - Vulnerabilities in RFID Access Control Systems
Explore RFID access control vulnerabilities, their real-world exploitation, and implications. Gain insights into why insecure systems persist and learn key considerations for selecting secure solutions.
How a Simple Misconfiguration Can Break TPM Full Disk Encryption
Explore TPM-based disk encryption vulnerabilities, learn to identify and exploit misconfigurations in Linux systems, and discover proper boot sequence validation techniques.
Using a Cloud Telescope to Observe Internet-Wide Botnet Propagation Activity
Explore the Cloud Telescope: a global, cloud-native architecture for capturing cybernetic activity. Learn about its design and discover insights from recent experiments on botnet propagation and infection patterns.
DoH Deception: Evading ML-Based Tunnel Detection with Black-Box Attack Techniques
Explore vulnerabilities in ML models for DoH tunnel detection, demonstrating successful evasion techniques and highlighting critical features to avoid in model development.
Cybersecurity and AI Risk Management Challenges for Next-Generation Public Safety Systems
Explore cybersecurity and AI risks in next-gen public safety systems. Learn how the tech community can support agencies in responsible adoption of advanced technologies for enhanced emergency response.
BOLABuster: Harnessing LLMs for Automating BOLA Detection
Harnessing LLMs to automate BOLA detection in APIs and web applications, reducing requests by 99% while uncovering critical vulnerabilities and submitting multiple CVEs.
Passwords 101 - History, Cracking Techniques, and Defenses
Explore password hashing history, cracking techniques, and defenses. Learn about tools, wordlists, custom rules, and CPU vs GPU tradeoffs in this comprehensive overview of password security.
Reassessing 50,000 Vulnerabilities: Insights from SSVC Evaluations in Japan's Largest Telco
Practical vulnerability prioritization using SSVC: Insights from evaluating 50k+ vulnerabilities in Japan's largest telco, improving efficiency and effectiveness over CVSS-based approaches.
Combating Phone Spoofing with STIR/SHAKEN
Explore STIR/SHAKEN protocols for combating phone spoofing, including implementation status, demo, and critique of US mobile carriers' efforts in adopting this PKI-based call verification system.
PhishDefend - A Reinforcement Learning Framework for AI-Augmented Phishing Detection and Response
Explore a reinforcement learning framework for measuring AI-augmented phishing detection and response, enhancing cybersecurity strategies against evolving threats.
One Port to Serve Them All - Google GCP Cloud Shell Abuse
Uncovers security vulnerabilities in GCP Cloud Shell, demonstrating how attackers can exploit a public-facing port to access internal services and bypass authentication, potentially leading to data leaks and network attacks.
ZERO-RULES Alert Contextualizer and Correlator for Detecting Multi-Stage Cyber Attacks
Leveraging AI models to connect security events into MITRE ATT&CK campaigns, enhancing detection of multi-stage cyber attacks and shifting focus from individual incidents to targeted campaigns.
Securing Cloud-Native DevOps - A Zero Trust Approach
Explore Zero Trust principles for securing cloud-native DevOps environments, addressing challenges like supply chain attacks and lateral movement in microservices and serverless architectures.
Spear-Phishing at Scale Using Generative AI - EHLO World
Explore how Generative AI enhances email-based attacks, enabling sophisticated phishing campaigns at scale. Learn about real-world examples and future implications for cybersecurity.
Zero Downtime Credential Rotation - Strategies and Benefits
Learn strategies for safe credential rotation in complex systems without downtime. Explore design techniques to enhance system security and resilience while minimizing disruptions.
Using Generative AI and Databricks Workloads to Manage Sensitive Data
Explore solutions for managing sensitive data using Databricks' Unity Catalog. Learn how to leverage AI and organizational capabilities to protect data throughout its lifecycle while enabling processing and operational use.
Generative AI and Advanced Machine Learning in Telecommunications
Exploring Generative AI and ML's impact on telecom: network optimization, customer service enhancement, and operational efficiency, with case studies and future trends.