Mobile Espionage in the Wild - Pegasus and Nation-State Level Attacks
Explore Pegasus, a sophisticated mobile espionage tool, its technical capabilities, and real-world impact. Learn about infrastructure tracking and malware detection in high-profile attacks.
Effective File Format Fuzzing – Thoughts, Techniques and Results
Explore advanced file format fuzzing techniques for vulnerability hunting, including setup, scalability, and achieving optimal results against modern software.
Breaking Big Data - Evading Analysis of the Metadata of Your Life
Explore techniques to protect your digital privacy and evade metadata analysis in an era of pervasive surveillance by governments and corporations.
Blue to Red - Traversing the Spectrum
Explore the importance of foundational security skills and an adversarial mindset in navigating diverse InfoSec roles, from forensics to red teaming, in this insightful keynote by Amanda Rousseau.
Breaking Encrypted Databases - Generic Attacks on Range Queries
Explore generic attacks on encrypted databases supporting range queries, focusing on common building blocks and latest solutions in commercial and academic settings.
How Do Cyber Insurers View The World
Insider perspective on cyber insurance: company assessments, pricing, claims, and industry evolution. Gain insights into how insurers evaluate and manage cyber risks.
Rogue7 - Rogue Engineering-Station Attacks on S7 Simatic PLCs
Uncovers vulnerabilities in Siemens S7 PLC systems, demonstrating potential attacks on industrial control architectures despite claimed security measures and advanced cryptographic protocols.
Flying a False Flag - Advanced C2, Trust Conflicts, and Domain Takeover
Explore advanced command and control techniques, trust exploitation, and domain takeover in cloud environments. Learn about stealthy methods and new tooling for AWS, Azure, and GCP.
Every Security Team is a Software Team Now
Exploring how cybersecurity practices evolve as companies become software-driven. Discusses cultural shifts in software engineering and their impact on security, emphasizing the need for integrated, cross-functional approaches.
The Next Arms Race
Explore the emerging cyber arms race as countries develop new offensive weapons for the Internet, challenging the notion of a borderless digital world.
BLEEDINGBIT - Your APs Belong to Us
Explore zero-day vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn about BLEEDINGBIT, its impact on enterprise APs, and potential attack scenarios.
SirenJack - Cracking a 'Secure' Emergency Warning Siren System
Uncover the SirenJack vulnerability affecting emergency warning systems, exploring how a simple setup can compromise critical infrastructure and discussing potential security implications.
Ghost Telephonist Link Hijack Exploitations in 4G LTE CS Fallback
Uncover a critical 4G LTE vulnerability allowing attackers to hijack calls and SMS. Learn about the 'Ghost Telephonist' attack and its implications for mobile network security.
Sonic Gun to Smart Devices - Your Devices Lose Control Under Ultrasound - Sound
Explore how acoustic waves can exploit vulnerabilities in MEMS sensors, causing smart devices to lose control and yield spoiled data.
IoTCandyJar - Towards an Intelligent-Interaction Honeypot for IoT Devices
Explore innovative honeypot adaptation for IoT security, addressing unique challenges and proposing intelligent interaction solutions to enhance protection of networked embedded devices.
The Adventures of AV and the Leaky Sandbox
Explore a novel data exfiltration technique exploiting cloud-enhanced antivirus sandboxes in highly secure enterprises, demonstrating vulnerabilities in seemingly protected systems.
Bug Collisions Meet Government Vulnerability Disclosure
Explore the Vulnerability Equities Process and its impact on software vulnerability disclosure, examining the likelihood of multiple parties discovering the same security flaws.
KR^X - Comprehensive Kernel Protection Against Just-In-Time Code Reuse
Explore comprehensive kernel protection against just-in-time code reuse attacks, focusing on memory corruption vulnerabilities and hardening techniques to prevent privilege escalation in kernel code.
Big Game Theory Hunting - The Peculiarities of Human Behavior in the InfoSec Game
Explore behavioral game theory in cybersecurity, examining human decision-making and its impact on defense strategies. Learn how empirical observations challenge traditional assumptions about rational behavior in InfoSec.
National Cyber-Aggression and Private-Sector Internet Infrastructure
Exploring nation-state cyber-attacks on private Internet infrastructure, misaligned military incentives, and economic impacts. Discusses past efforts and current initiatives to address these challenges.
Hacking Serverless Runtimes - Profiling AWS Lambda, Azure Functions & More
Explore techniques for auditing and defending serverless runtimes, focusing on AWS Lambda and Azure Functions, to enhance security in micro-service architectures.