Repurposing Neural Networks to Generate Synthetic Media for Information Operations
Explore the ease of generating synthetic media using neural networks, its implications for information operations, and challenges in detection and attribution.
Making an Impact from India to the Rest of the World by Building and Nurturing Women Infosec Community
Empowering women in cybersecurity: Journey of Infosecgirls community from India to global impact. Addressing challenges, fostering inclusivity, and creating opportunities for women in tech through education, mentorship, and community building.
The Paramedic's Guide to Surviving Cybersecurity
Discover techniques to improve effectiveness and mental resiliency in cybersecurity, drawing parallels from emergency medical services to enhance your career and daily practice.
The Dark Side of the Cloud - How a Lack of EMR Security Controls Helped Amplify the Opioid Crisis
Explores how manipulation of an Electronic Health Records system contributed to the opioid crisis, highlighting the role of inadequate security controls in amplifying prescription drug abuse.
CloudLeak - DNN Model Extractions from Commercial MLaaS Platforms
Explore DNN model extraction vulnerabilities in cloud-based machine learning services, examining security risks and potential countermeasures for MLaaS platforms.
Hunting Invisible Salamanders - Cryptographic Insecurity with Attacker-Controlled Keys
Explore cryptographic vulnerabilities in authenticated encryption when attackers control keys. Learn about potential risks and mitigation strategies for secure implementation.
When Lightning Strikes Thrice - Breaking Thunderbolt 3 Security
Explore Thunderspy attacks that compromise Thunderbolt security, revealing vulnerabilities in device authentication and DMA protection across Thunderbolt 1, 2, and 3 interfaces.
NoJITsu - Locking Down JavaScript Engines
Explore data-only attacks on JavaScript engines and learn defensive strategies to secure JIT compilers against modern threats in web browsers and interactive applications.
Building a Vulnerability Disclosure Program That Works for Election Vendors and Hackers
Explore the creation of effective vulnerability disclosure programs for election vendors, balancing security needs with researcher collaboration to enhance voting system integrity.
Uncommon Sense - Detecting Exploits with Novel Hardware Performance Counters and ML Magic
Explore novel hardware performance counters and machine learning techniques to detect advanced exploits like speculative execution, Rowhammer, and ROP, enhancing cybersecurity defenses against evolving threats.
Policy Implications of Faulty Cyber Risk Models and How to Fix Them
Explore data-driven analysis of cyber incidents, their economic impact, and policy implications. Learn to improve risk models for better security governance and third-party risk management.
Room for Escape - Scribbling Outside the Lines of Template Security
Explore vulnerabilities in Content Management Systems, focusing on template security issues and potential exploits in collaboration platforms. Learn about safe mode attacks and object data validation.
Breaking Brains, Solving Problems - Lessons Learned from 2 Years of Setting Puzzles for InfoSec Pros
Explore problem-solving strategies, cognitive biases, and improvement techniques for InfoSec professionals, drawing insights from puzzle-setting experiences and real-world applications.
Exploiting Excel Online
Explore Excel Online vulnerabilities, focusing on integer overflow in fnConcatenate formula. Learn about chaining formulas for remote code execution and potential security implications.
Dive into Apple IO80211FamilyV2
Explore Apple's IO80211FamilyV2 Wi-Fi architecture, its features, and potential vulnerabilities. Learn about reverse engineering, attack surfaces, and the latest security concerns in macOS Catalina.
Reversing the Root - Identifying the Exploited Vulnerability in 0-Days Used In-The-Wild
Explore techniques for identifying root cause vulnerabilities in exploited 0-days, including binary patch diffing, exploit minimization, and reverse engineering, to enhance cybersecurity analysis and threat mitigation.
Experimenting with Real-Time Event Feeds
Explore innovative approaches to real-time event feeds in cybersecurity, challenging traditional SIEM methods and addressing high-volume data management for improved threat detection.
Fooling Windows Through Superfetch
Explore Windows Superfetch service's privacy implications, forensic potential, and methods to manipulate its predictive behavior for enhanced system security and user privacy.
Hacking the Voter - Lessons from a Decade of Russian Military Operations
Explore Russian military's decade-long election interference strategies, examining GRU tactics and the role of information in shaping international relations and outmaneuvering tactical defenses.
Superman Powered by Kryptonite - Turn the Adversarial Attack into Your Defense Weapon
Explore how AI-powered attacks on security mechanisms can be turned into defensive strategies, focusing on adversarial examples and innovative countermeasures in cybersecurity.
Kr00k - Serious Vulnerability Affected Encryption of Billion+ Wi-Fi Devices
Explore the Kr00k vulnerability affecting Wi-Fi encryption on billions of devices. Learn about its impact, technical details, and see a live demonstration of exploiting this security flaw in popular Wi-Fi chips.