CyptoAPT - APT Attacks on Crypto Exchange Employees
Overview of recent APT attacks on cryptocurrency exchange employees, from spear phishing to Firefox 0-day exploit and malware stages. Compares perspectives of victim, attacker, and security team.
We Hacked The Planet - Now What?
Explore the evolution of cybersecurity, from hacking to bug bounties, and its impact on policy, workforce, and vulnerability management. Gain insights into future challenges and solutions.
DCART - Decoupled Components for Automated Ransomware Testing
Explore a framework for controlled ransomware testing, focusing on decoupled components for detonation and detection. Learn about design, development, and automated testing methodologies for behavioral ransomware analysis.
Car Hacking - Practical Guide to Automotive Security
Practical guide to automotive security, focusing on CAN bus hacking. Learn to reverse-engineer packets, identify arbitration IDs, perform replay attacks, and explore hardware tools for vehicle network security.
Insight Into TTPs Of A Middle Eastern Threat Actor
Insight into Middle Eastern threat actor MuddyWater's tactics, including spear-phishing, backdoors, and cyber espionage. Explores recent tool evolution, obfuscation techniques, and prevention strategies.
Exploiting Zoom on MacOS
Exploración detallada de una vulnerabilidad de ejecución remota de código en el cliente Zoom para macOS, incluyendo técnicas de ingeniería inversa y explotación aplicables a otras aplicaciones.
Securing Cyber-Physical Systems - Moving Beyond Fear
Exploring cybersecurity challenges in physical systems, this talk examines root causes of vulnerabilities and proposes systemic approaches to embed security in design, moving beyond fear-based tactics.
4G LTE Man in the Middle Attacks With a Hacked Femtocell
Explore 4G LTE vulnerabilities through femtocell hacking, including rooting techniques, portability modifications, and man-in-the-middle attacks. Learn to exploit small cell access networks for security research.
Bypassing Hardware-Based Trusted Boot Through x86 Downgrade
Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.
Creating a Fuzzer for Diameter and LTE Telecom Protocols
Explore creating a fuzzer for Diameter protocol in LTE networks, covering architecture, challenges, and lessons learned in discovering vulnerabilities in telecom equipment.
The CISO's Dilemma
Exploring CISO challenges: threat landscape, expertise shortage, product obsolescence, and compliance burdens. Insights from effective CISOs on navigating these complexities in enterprise defense.
Physical to Cyber and Back - Fingerprint Scanner Security
Exploring vulnerabilities in fingerprint scanners and access control systems, demonstrating physical-to-virtual attacks, and discussing network persistency techniques in IoT devices.
DFEx - DNS File Exfiltration
Explore DNS file exfiltration techniques, including a unique protocol for bypassing NG Firewalls. Learn about HIPS tricks and innovative approaches to data transfer across networks.
Modern Automotive Attack Surfaces
Explore modern automotive cybersecurity threats, including V2X technologies, smart batteries, and wireless keys. Learn about vulnerabilities in upcoming car features and their implications for future vehicle security.
Tracking Fake News Based on Deep Learning
Innovative deep learning model for tracking fake news authors by analyzing content and stylistic features, enabling identification of attackers spreading malicious rumors for financial gain.
Security Should Be Smarter Not Harder
Explore cybersecurity strategies, bug bounty programs, and hacker motivation with Katie Moussouris. Learn about industry myths, perverse incentives, and practical solutions for smarter security practices.
Hacking Jenkins
Exploring Jenkins vulnerabilities, including dynamic routing misuse and Groovy sandbox escape. Learn to build custom gadgets and exploit Jenkins through unconventional methods.
Binder - The Bridge To Root - Hongli Han and Mingjian Zhou
Exploración detallada de la vulnerabilidad "Waterdrop" en el controlador Binder de Android, que permite escalar privilegios y obtener acceso root en dispositivos populares, incluyendo los Pixel más recientes.
Sneaking Past Device Guard
Exploración de técnicas avanzadas para eludir Device Guard en Windows 10, incluyendo métodos que requieren privilegios de administrador y otros que utilizan aplicaciones nativas del sistema operativo.
A Successful Mess Between Hardening and Mitigation
In-depth analysis of Content Security Policy for XSS prevention, exploring its effectiveness, debunking myths, and sharing real-world data on successful XSS mitigation in sensitive applications.
Researching New Attack Interfaces on iOS and OSX
Exploración de nuevas interfaces de ataque en iOS y OSX, revelando vulnerabilidades del kernel y controladores mediante ingeniería inversa, análisis estático/dinámico y fuzzing mejorado.