Mobile Device Security Threats: Malware Distribution and Corporate Vulnerabilities - Lecture 3
Explore mobile device security vulnerabilities and malware threats like Pegasus, understanding how personal phones can compromise corporate cybersecurity through various attack vectors and data extraction methods.
Windows Hello for Business Security Analysis and Authentication Protocol Deep Dive - Lecture 10
Explore Windows Hello for Business authentication internals, security vulnerabilities, and attack vectors in Azure AD environments, focusing on key provisioning and credential management.
How Much Is The Phish? Evolving Defenses Against Evilginx Reverse Proxy Phishing
Dive into advanced techniques for defending against reverse proxy phishing attacks, focusing on Evilginx, MFA bypass methods, and implementing effective countermeasures.
Analyzing and Executing ADCS Attack Paths with BloodHound
Discover how to identify, analyze, and execute ADCS attack paths using BloodHound, while learning practical remediation strategies for defending against PKI-based privilege escalation in Active Directory environments.
Shakespeare, Bacon, and the NSA: A Journey Through Modern Cryptology
Discover the fascinating story of Elizebeth Smith Friedman, pioneering cryptologist and Nazi spy hunter, while exploring cryptography's evolution and its modern technological implications.
Threat Modeling for Complex Systems in Web3
Dive into advanced threat modeling techniques for Web3 systems, exploring security frameworks and risk assessment strategies for complex blockchain architectures.
The Internals of Veilid - A New Decentralized Application Framework
Explore the architecture and capabilities of Veilid, an open-source P2P framework enabling secure messaging and decentralized applications through private routing, strong encryption, and cross-platform compatibility.
Cracking Cicada 3301: A Journey Through the Liber Primus Cryptographic Challenge
Delve into the fascinating journey of cryptographers attempting to solve Cicada3301's Liber Primus, exploring collaborative puzzle-solving techniques, community persistence, and cryptographic challenges since 2014.
Video-Based Cryptanalysis: Extracting Keys from Power LEDs
Discover how power LED brightness variations in devices can be exploited through video footage to extract cryptographic keys, with demonstrations using smartcard readers and USB speakers.
Private Keys in Public Places - Finding and Exploiting Hidden Encryption Keys
Uncover techniques for finding hidden private keys, certificates, and encryption keys in firmware, with real-world examples from Netgear, Fortinet, and Dell's security vulnerabilities.
Malware Design: Abusing Legacy Microsoft Transports and Session Architecture
Explore advanced malware design techniques and covert communication frameworks, focusing on Windows architecture exploitation and maintaining persistent access while evading detection systems.
The Coming War on Encryption - Part 3
Explore current legislative threats to encryption, focusing on Senate proposals, FBI initiatives, and global efforts to undermine secure messaging under the pretext of fighting exploitation.
A SSLippery Slope - Unraveling Hidden Dangers of Certificate Misuse
Uncover critical vulnerabilities in digital signature validation systems and learn how attackers can exploit certificate misuse to bypass security measures for signing untrusted code.
Finding and Exploiting Local Security Vulnerabilities in 1Password for MacOS
Explore critical security vulnerabilities in 1Password's MacOS app, including local vault exploitation, IPC weaknesses, and Chrome extension flaws that could compromise password security.
Unsaflok - Hacking Millions of Hotel Locks and Electronic Access Control Systems
Discover critical vulnerabilities in dormakaba Saflok hotel locks, including key card forgery techniques, security implications, and how to verify if your room's lock has been patched for protection.
Encrypted Newspaper Ads in The Times: The Collinson Arctic Expedition Communication System (1850-1855)
Uncover the fascinating story of encrypted 1850s newspaper ads used to communicate with an Arctic explorer, their eventual decryption, and the innovative worldwide communication system they represented.
Regenerating Passwords from RoboForm's Password Generator - A Time-Based Attack
Delve into reverse engineering RoboForm's password generator vulnerability, exploring techniques to regenerate historical passwords and recover locked Bitcoin wallets through systematic analysis.
The Missing Link: How to Collect and Leverage Software Bill of Materials (SBOMs)
Discover how Schneider Electric efficiently manages software security through SBOM collection and implementation, with real-world examples from Log4j and OpenSSL vulnerability responses.
MobileMesh RF Network Exploitation - Security Analysis and Vulnerabilities in goTenna Networks
Uncover security vulnerabilities in goTenna Pro radio's mesh network encryption, including tracking, interception, and message injection methods, with practical demonstrations and mitigation strategies.
A New Side Channel Attack on AI Assistants - Exploiting Vulnerabilities in Encrypted Messages
Uncover a critical side-channel vulnerability affecting AI assistants like ChatGPT, exploring how encrypted conversations can be intercepted and the broader implications for privacy and security.
5 Easy Steps for More Secure IoT
Discover practical strategies for enhancing IoT security through a 5-step defense-in-depth approach, covering dependency management, access control, cryptography, logging, and device updates.