Breaking and Securing Cloud Platforms
Comprehensive analysis of cloud security vulnerabilities, real-world attack scenarios, and best practices for securing cloud deployments. Covers data exposure, access control issues, and attacker exploitation techniques.
Fuzzing File System Implementations to Uncover Security Bugs
Explore file system vulnerability research through fuzzing techniques on BSD systems. Learn to identify attack surfaces, automate testing, and uncover security bugs in kernel implementations.
Documents of Doom - Infecting macOS via Office Macros
Explore macOS vulnerabilities through Office macros, analyzing recent attacks and detailing a novel exploit chain that can infect fully-patched systems with minimal user interaction.
Exploiting Directory Permissions on macOS
Explore macOS directory permission vulnerabilities, from arbitrary overwrites to privilege escalation. Learn techniques to control file contents and understand the intricacies of macOS security.
Analyzing Recent Evolutions in Malware Loaders
Análisis detallado de la evolución reciente de los cargadores de malware, sus técnicas de evasión y distribución, y métodos para detectarlos y analizarlos en entornos corporativos.
The Insecurity of Cloudless Smart Door Systems
Explore vulnerabilities in cloudless smart door systems for large buildings, focusing on IP-gateway security risks and potential exploits in intercom-IP integration.
Open Source Security – Vulnerabilities Never Come Alone
Explore open source security challenges, variant analysis techniques, and real-world case studies. Learn about vulnerabilities in popular software and gain insights from industry expert Fermin J. Serna.
RIDL - Rogue In Flight Data Load
Unveiling RIDL attacks: exploiting speculative execution vulnerabilities in modern CPUs to steal in-flight data across security boundaries, bypassing existing mitigations and compromising system security.
LoRaWAN Auditing
Comprehensive guide to LoRaWAN security auditing, covering vulnerabilities, testing methods, and new tools. Provides practical insights for securing IoT deployments in smart cities and industries.
The Road to Building Defendable Systems
Explore challenges faced by CISOs, including threat landscapes, expertise shortages, and compliance burdens. Learn effective strategies for building defendable systems and functioning on the razor's edge of cybersecurity.
Reimplementing Local RPC in .Net
Reimplementing Windows RPC in .NET for privilege escalation, covering ALPC implementation, NDR parsing, and PowerShell integration. Includes bug discovery and tooling demonstration.
The Impact of Blockchain and Cryptocurrencies
Explore blockchain's impact on currency, governance, and global power dynamics. Discover how this technology challenges traditional financial systems and reshapes national sovereignty.
The Sum of All Fears - When ICS - SCADA Are Compromised
Explore ICS/SCADA cybersecurity threats, attack vectors, and protection strategies. Learn to analyze industrial protocols, write exploits, and implement effective defense measures for critical infrastructure.
Vote of No Confidence - Second Factor Correctness
Explora la seguridad y verificabilidad del voto electrónico, proponiendo un innovador protocolo de autenticación de dos factores para garantizar la integridad electoral sin comprometer la privacidad.
DHCP Is Hard
Explore DHCP vulnerabilities and exploits in popular implementations, including dnsmasq, ISC DHCP, and systemd networkd, with insights on architecture and attack techniques.
Capture This - Real Time Packet Processing With FPGAs
Explore real-time packet processing using FPGAs, focusing on Ethernet connections, FPGA architecture, and implementing network applications with hardware-level optimizations.
NTLM Relay Is Dead, Long Live NTLM Relay
Explore NTLM relay attacks, their evolution, and modern exploitation techniques. Learn about vulnerabilities in Windows protocols and browsers, with insights on defense strategies.
Glitch Chronicles - Turning WebGL Into A Hammer
Explore WebGL vulnerabilities and GPU-based Rowhammer attacks in this technical deep dive on exploiting graphics hardware for security breaches.
Attacking Industrial Wireless Mesh Networks
Exploración detallada de vulnerabilidades en redes inalámbricas industriales, enfocándose en WirelessHART e ISA100.11a. Incluye demostraciones prácticas de ataques y herramientas de sniffing.
Extracting Messages From iCloud - Vladimir Katalov
Explore techniques for extracting messages from iCloud, covering iCloud security basics, data protection, and accessing stored messages. Learn about encryption, token policies, and iCloud sync settings.
IPv666 - Address of the Beast
Explore IPv6 security implications, addressing schemes, and potential vulnerabilities. Learn about honeypot servers, machine learning applications, and techniques for identifying aliased networks in IPv6 environments.