Breaking Korea Transit Card with Side-Channel Attack - Unauthorized Recharging
Unveiling vulnerabilities in Korea's transit card system through side-channel attacks, demonstrating potential financial risks and the need for enhanced smartcard security measures.
Inside Web Attacks - The Real Payloads
Explore real-world payloads used by attackers exploiting major vulnerabilities, based on CloudFlare's unique insights from protecting millions of websites.
Driving Cyber Resiliency of IoT Devices with Active Management and Cyber Hygiene
Explore IoT device security challenges, cyber hygiene importance, and active management strategies. Gain insights from HP's framework for print security assessments and industry best practices.
Your Guide to An Integrated Threat Intelligence Strategy
Discover how to implement a holistic, integrated threat intelligence approach that combines cultural shifts and technological enhancements for proactive cybersecurity.
Securing Your Business Starts With The Basics
Learn essential cybersecurity strategies from AlienVault's CTO. Discover the importance of mastering security basics, effective breach detection, and data sharing for improved threat response across organizations.
Samsung Pay - Tokenized Numbers Flaws and Issues
Análisis de vulnerabilidades en la generación de tokens de Samsung Pay, explorando posibles fallos de seguridad y riesgos para los usuarios.
O-Checker - Detection of Malicious Documents Through Deviation From File Format Specifications
Explores detection of malicious documents by identifying deviations from file format specifications, focusing on targeted email attacks in Japan and introducing the o-checker tool for high detection rates.
Incident Response at Scale - Building a Next Generation SOC
Explore strategies for automating incident response processes in large-scale environments to improve efficiency, visibility, and organizational protection.
Android Kernel and OS Security Assessment with Iron Crow
Discover Iron Crow: a powerful tool for Android BSP developers and OEMs to detect platform-level vulnerabilities, enhancing security and protecting end users from potential exploits in customized Android environments.
Counterfeiting the Pipes with FakeNet 2.0 - Part 2
Learn to simulate networks for malware analysis using FakeNet 2.0. Capture network signatures, mimic protocols, and defeat malware through hands-on challenges with real-world samples.
Sidewinder Targeted Attack Against Android in the Golden Age of Ad Libs
Explores vulnerabilities in Android apps and ad libraries, demonstrating a targeted attack method that exploits location data and system weaknesses to compromise user privacy and device security.
Detecting Vulnerabilities in Virtual Devices with Conformance Testing
Explore techniques for detecting vulnerabilities in virtual devices using conformance testing, enhancing security in virtualized environments.
Shattering Illusions in Lock-Free Worlds - Compiler - Hardware Behaviors in OSes - VMs
Explores memory access issues in multi-threaded environments, focusing on compiler/hardware behaviors that can lead to security vulnerabilities in OSes, VMs, and applications.
Industroyer - Crashoverride - Zero Things Cool About a Threat Group Targeting the Power Grid
Análisis detallado del malware Industroyer utilizado en el ciberataque a la red eléctrica de Ucrania en 2016, sus capacidades y el grupo de amenazas detrás del ataque.
The UEFI Firmware Rootkits - Myths and Reality
Explore UEFI firmware security, vulnerabilities, and real-world applicability of attacks. Analyze rootkit scenarios and assess practical implications for system compromise at privileged levels.
Techniques to Gather Threat Intel and Track Actors
Discover 24 techniques for gathering threat intelligence and tracking actors, illustrated with 30 real-world cases. Learn about crimeware vulnerabilities, C&C misconfigurations, and underground marketplaces.
Go Get My - Vulnerabilities - An In-Depth Analysis of Go Language Runtime and the New Class of Vulnerabilities It Introduces
Explore Go language runtime vulnerabilities, their impact on applications, and potential security risks in this in-depth analysis of Golang's growing adoption across various programming domains.
Real-World Post-Quantum Cryptography - Introducing the OpenQuantumSafe Software Project
Explore OpenQuantumSafe, an open-source library for quantum-safe cryptography, including implementations, benchmarks, integration challenges, and future developments.
Hello From the Other Side - SSH Over Robust Cache Covert Channels in the Cloud
Explore practical cache covert channels in cloud environments for secret data exfiltration between isolated virtual machines, presented by security researchers at Black Hat Asia.
Testing Vehicles with CANToolz
Explore CANToolz framework for CAN bus analysis, featuring black-box testing of automotive networks and ECUs. Learn practical use-cases for vehicle security research and penetration testing.
Bypassing Secure Boot Using Fault Injection
Explore fault injection techniques to bypass Secure Boot in embedded systems, focusing on hardware-based attacks when logical vulnerabilities are absent.