Investigating PowerShell Attacks
Explore PowerShell attack techniques, forensic artifacts, and investigation methods for detecting and mitigating threats in Windows environments.
The Project of Prototype This
Hackers Joe Grand and Zoz share behind-the-scenes insights from their TV show "Prototype This," revealing challenges and innovative solutions in creating unique prototypes under tight constraints.
Realtime Analysis and Visualization of the Zeus Botnet
Explore real-time analysis and visualization techniques for cybersecurity, covering data collection, processing, and reporting using advanced technologies like MongoDB, Redis, and API integration.
Uncovering SAP Vulnerabilities - Dissecting and Breaking the Diag Protocol
Dissecting SAP Diag protocol to uncover vulnerabilities, explore attack vectors, and enhance security in SAP Netweaver systems through novel tools and techniques for protocol analysis and exploitation.
HTML5 - A Whole New Attack Vector
Explore HTML5's new features from an attacker's perspective, uncovering potential security vulnerabilities and innovative attack vectors in modern web browsers.
Introducing the Smartphone Penetration Testing Framework
Comprehensive framework for assessing smartphone security in organizations, covering various attack vectors and providing tools for penetration testing across multiple platforms.
Adventures in Authentication and Authorization
Explore Netflix's journey in implementing authentication and authorization for microservices, discussing technology choices, challenges, and innovative solutions for a robust zero-trust ecosystem.
Navigating the Sandbox Buffet
Explore diverse sandboxing techniques to isolate risky software, balancing performance, security, and developer experience. Learn to choose the right combination for your workloads.
Meaningful Hardware Privacy for a Smart and Augmented Future
Explore hardware privacy features in smart devices, their design, security, and challenges. Learn about recording indicators, privacy switches, and future implications for augmented reality.
Working on the Frontlines - Privacy and Security with Vulnerable Populations
Explore challenges faced by journalists and activists worldwide, and learn about protecting vulnerable populations through public interest technology and frontline privacy and security work.
Myths and Lies in InfoSec
Debunking InfoSec myths and lies, emphasizing critical thinking and source verification. Explores common misconceptions, their impact, and the importance of skepticism in cybersecurity practices and industry claims.
Crypto for the People - Part 2
Explores how cryptography benefits some groups more than others, discussing its impact on finance, cloud computing, and data analytics while examining social implications and power dynamics.
Can the Fight Against Disinformation Really Scale?
Exploring challenges in scaling disinformation countermeasures, questioning assumptions about trust, and proposing human-centric approaches to combat misinformation effectively.
The Global Privacy Control - Exercising Legal Rights at Scale
Explore how the Global Privacy Control enables users to exercise privacy rights at scale, addressing challenges in data protection and legal compliance across multiple jurisdictions.
Protect2020 - An After Action Report
Insider's analysis of cybersecurity measures during the 2020 US election, examining successes, challenges, and future improvements for safeguarding democratic processes.
The Security Team at the Top - The Board of Directors
Explore how CISOs can effectively engage with boards of directors, build credibility, and leverage this powerful security team to enhance organizational cybersecurity strategies.
When Machine Learning Isn't Private
Exploring privacy risks in machine learning models, focusing on data leakage and extraction techniques. Discusses challenges in prevention and potential solutions for researchers and practitioners.
Around the World in 500 Days of Pandemic Misinformation
Explore global pandemic misinformation trends, their evolution, and impact on health decisions through a large-scale, longitudinal study across multiple countries.
Security & U.S. Political Campaigns - A Study & Expert Roundtable
Exploring security vulnerabilities in U.S. political campaigns, offering insights and recommendations to protect democratic processes from cyber threats and data breaches.
The Practical Divide between Adversarial ML Research and Security Practice - A Red Team Perspective
Exploring the gap between adversarial ML research and real-world security practices, highlighting challenges and lessons learned from Microsoft's Machine Learning Red Team engagement.
The State of 0-Day in-the-Wild Exploitation
Comprehensive analysis of 0-day exploits from 2020, offering insights on vulnerabilities, exploitation methods, and strategies to enhance cybersecurity and protect users from unknown threats.