Make JDBC Attacks Brilliant Again
Explore advanced JDBC attack techniques, including 0day vulnerabilities in popular systems. Learn about XXE and RCE issues, and gain insights from experienced security researchers.
SHADOWPAD - Chinese Espionage Malware-as-a-Service
Comprehensive analysis of SHADOWPAD malware: its origin, usage patterns, and business model. Explores its impact on Chinese cyber espionage and the evolving threat landscape.
Breaking Siemens SIMATIC S7 PLC Protection Mechanism
Detailed analysis of vulnerabilities in Siemens SIMATIC PLC protection mechanisms, including hacking methods and security recommendations for various models. Essential for industrial control system security professionals.
Dissecting Phishing Techniques of CloudDragon APT
Análisis detallado de las sofisticadas técnicas de phishing del grupo APT norcoreano CloudDragon, incluyendo casos reales, métodos para evadir la autenticación de dos factores y propagación a sistemas Android.
A QEMU Black Box Escape Via USB Device
Exploring a QEMU virtual machine escape technique using USB device vulnerabilities, focusing on black box scenarios without prior system information for enhanced cloud security.
The Rise of Potatoes - Privilege Escalation in Windows Services
Exploring advanced privilege escalation techniques in Windows services, including a new 0day NTLM relay attack. Covers recent methods, Windows Service Hardening, and the RemotePotato0 attack vector.
Hack Out of the Box - Discovering 10+ Vulnerabilities in VirtualBox
Discover 10+ VirtualBox vulnerabilities through custom fuzzing techniques. Learn about attack surfaces, exploit primitives, and see a live box escape demonstration.
Art You Can Make by Spying on Yourself with Your Phone
Explore video art created with custom software that captures phone camera and screen activity, examining human-device interactions and digital surveillance.
Disaster Recovery Options Running Apache Kafka in Kubernetes
Explore disaster recovery strategies for Apache Kafka on Kubernetes, including active-active replication and multi-regional clusters. Learn to architect reliable deployments and leverage automation tools for mission-critical applications.
An IPC Language for the Whole Operating System
Explore Fuchsia's innovative FIDL system for unified API and ABI boundaries across the entire OS stack, from kernel to GUI apps, discussing its benefits and challenges.
Monad I Love You Now Get Out Of My Type System
Explore a novel programming paradigm that separates business logic from execution concerns, offering automated asynchronous execution, caching, and more without invasive type system changes.
Detecting and Addressing Overload in LinkedIn Microservices
Explore LinkedIn's Hodor framework for automatic detection and mitigation of microservice overloads, ensuring optimal performance without manual intervention.
A Hipster History of CORS
Explore the evolution of CORS, its historical context, and modern cross-origin standards. Gain insights into web security and learn how to design secure web applications effectively.
The Skip Ratchet
Innovative cryptographic ratchet for decentralized environments, combining hierarchical hashing and skip lists. Enables efficient key agreement, synchronization, and backward secrecy in local-first deployments.
Hedy - A Gradual Programming Language
Explore Hedy, a gradual programming language designed to bridge the gap between visual and textual coding for kids, featuring localized keywords and progressive syntax complexity.
Level Up Your Machine Learning Lifecycle
Discover a scalable ML lifecycle framework that simplifies end-to-end projects, reduces development time, and enhances code quality through modular design across data, model, and deployment stages.
What We Learned Dissecting the World's Most Popular Containers
Insights from analyzing popular container images: security risks, complexity, and trade-offs between developer experience and production readiness in Kubernetes environments.
Powering Spotify's Audio Personalization Platform
Explore Spotify's ML platform powering personalized audio recommendations for 400M+ users, featuring insights on model training, prediction serving, and engineering challenges.
The Vera C. Rubin Observatory Legacy Survey of Space and Time
Explore the groundbreaking Vera C. Rubin Observatory and its Legacy Survey of Space and Time. Learn about its advanced technology, automated operations, and potential to revolutionize our understanding of the universe.
In the Land of the Sizing, the One-Partition Kafka Topic is King
Demystifying Kafka topic partitioning: impacts on consistency, concurrency, and durability. Learn optimal sizing strategies and consequences of poor decisions for efficient system performance.
LiveViewJS is the Anti-SPA Library for Reactive App Development in NodeJS and Deno
Explore LiveViewJS, a reactive web development approach using web sockets for NodeJS and Deno. Learn about its simplified API, automatic handling of connections, and efficient UI updates.