Netscreen of Death
Explore firmware vulnerabilities, live debugging, and real-world attacks on network security devices. Learn about untrusted code, scripting, and common criteria audits in this technical deep dive.
Tools of the Trade for a Modern CISO
Explore essential tools and strategies for modern CISOs, covering organizational roles, security frameworks, risk assessment, and effective communication in evolving cybersecurity landscapes.
Rapid Risk Assessment
Learn rapid risk assessment techniques for effective cybersecurity governance. Explore risk definitions, analysis methods, and real-world case studies to enhance your organization's security posture.
The Truth About Outsourcing Security
Explore the realities of outsourcing security, including approaches, stages, challenges, and strategies for success in this insightful presentation by Bryan Fite.
.NET Access Control Service
Explore .NET Access Control Service for token-based authentication, federation, and secure resource access in Windows Azure environments.
Corporate Espionage via Mobile Compromise - A Technical Deep Dive
Explore corporate espionage via mobile compromise, including real-world examples, kill chain analysis, and demonstrations of exploits targeting PowerShell and Linux kernel vulnerabilities.
The Interim Years of Cyberspace - Security in a Domain of Warfare
Explore cyberspace security as a warfare domain, examining historical lessons, current threats, and strategies for a safer digital future.
Hacking and Craft - Jeff Gough
Explore hacking techniques for inkjet printers and their applications in crafting, including wax casting, thermoforming, and creating custom eyewear. Learn about printer components and security implications.
Virtual Firewalls - The Good, the Bad and the Ugly
Explore virtual firewalls' advantages, drawbacks, and implementation challenges in cloud environments, covering performance, hardware, and configuration management considerations.
Your IPv6 Default Config Meets FOCA - And Starts to Cry
Explore IPv6 security vulnerabilities and attack techniques, including ARP spoofing and network advertisement spoofing, with practical demonstrations and expert insights.
Flash Storage Forensics
Explore flash storage forensics techniques, including spare area analysis, wear leveling, and flash translation layers, to enhance criminal investigation capabilities.
The Future of Data Exfiltration and Malicious Communication
Explore advanced data exfiltration techniques, covert channels, and protocol engineering for secure communication. Learn about innovative approaches to network security and malicious traffic detection.
Introducing Daisho
Explore Daisho, an innovative open-source hardware platform for monitoring Ethernet, USB, and HDMI. Learn about its modular design, architecture, and potential applications in network security.
UI Redressing Attacks on Android Devices
Explore UI redressing attacks on Android devices, including clickjacking and new browserless attacks, along with mitigation techniques for improved mobile security.
Bluetooth - Does It Spark Joy?
Explore Bluetooth firmware reverse engineering, security insights, and bug-finding techniques in this deep dive into wireless technology vulnerabilities.
Alfred, Find the Attacker - A Primer on AI and ML Applications in the IT Security Domain
Explore AI and ML applications in IT security, covering classification, outlier detection, and user behavior analysis for enhanced protection and threat detection.
Dark Clouds Ahead - Attacking a Cloud Foundry Implementation
Explore vulnerabilities in Cloud Foundry implementations, focusing on SAP HANA XS Advanced. Learn about components, concepts, and potential security risks in cloud platforms.
The Anatomy of Windows Telemetry
Explore Windows Telemetry architecture, data collection points, and management. Learn about disabling and reducing telemetry, with insights from German cybersecurity experts.
I'm in Your Cloud, Reading Everyone's Emails - Hacking Azure AD via Active Directory
Explore Azure AD vulnerabilities, hacking techniques, and security risks in cloud environments. Learn about AD Connect, crypto magic, and service principles to enhance your cybersecurity knowledge.
BloodHound and the Adversary Resilience Methodology
Explore BloodHound's advanced features for identifying security vulnerabilities, improving attack resilience, and enhancing Active Directory defenses through graph-based analysis.
Fun with LDAP and Kerberos - Attacking AD from Non-Windows Machines
Explore Active Directory attacks from non-Windows systems using LDAP and Kerberos. Learn techniques for reconnaissance, password spraying, and ticket forging to enhance your penetration testing skills.