
Evolving APT reconnaissance techniques using malicious documents and watering hole attacks. Detailed analysis of obfuscation methods, scripting languages, and mitigation strategies for enhanced cybersecurity.

Discover simple yet effective red teaming tricks to enhance assessments, including improved USB key drops, C&C concealment, and social engineering techniques using Outlook.

Explore BearSSL, an SSL/TLS library optimized for constrained systems. Learn about secure crypto, SSL attacks and defenses, and implementing in small RAM environments.

Explore advanced attack techniques using Microsoft signed binaries and PowerShell to bypass detection, manipulate memory, and achieve persistence in Windows systems.

Explore threat modeling through Star Wars, gaining practical insights for effective offensive and defensive security strategies in software development.

Exploration of targeted cyber attacks against civil society groups, focusing on Tibetan community and Latin American cases. Discusses attacker tactics, victim impacts, and future trends.

Explore techniques to bypass application whitelisting in critical systems, including code execution, protection bypasses, and vulnerabilities in McAfee's application control.

Learn cost-effective strategies to prevent security incidents through real-world scenarios, gap analysis, and enterprise protection methods. Gain insights on leveraging incident response lessons for improved security programs.

Leveraging DevOps principles to streamline malware analysis, automate lab setup, and enhance collaboration among security researchers for more efficient threat detection and response.

Explore CANtact, an open-source tool for automotive network analysis. Learn to view, decode, and manipulate CAN traffic for reverse engineering and security testing of vehicle systems.

Explore the factors that prevented Anonymous from being labeled as cyberterrorists, despite their global political activism and masked identity. Gain insights into the complex dynamics of digital activism and cybersecurity rhetoric.

Explore vulnerabilities in IoT devices for children, including baby monitors and GPS trackers. Learn research techniques like mobile reverse engineering and network analysis to enhance IoT security.

Discover creative hacking techniques to overcome pentesting challenges. Learn RFID cloning, universal access cards, key theft methods, and advanced phishing strategies for unconventional target compromise.

Explore deserialization vulnerabilities in Java, PHP, and Python. Learn to identify and mitigate risks in enterprise applications using practical examples and tools.

Explore tools, methods, and data behind headline-making DDoS attacks, gaining insights into modern cybersecurity threats and defense strategies.

Explore mainframe security breaches, their surprising ease, and media silence. Uncover shocking methods used and understand why mainframe security deserves more attention.

Explore vulnerabilities in popular frameworks' random value generation, learning to identify and potentially exploit predictable implementations.

Explore the sophisticated Uroburos espionage software, including its rootkit, Agent.BTZ, ComRAT, and Cobra Carbon System. Gain insights into the group's infrastructure and operational methods.

Explore advanced exploitation techniques to bypass EMET 5.2 mitigation strategies, enhancing your understanding of cybersecurity vulnerabilities and defense mechanisms.

Explore post-quantum cryptography's role in defending against future quantum hackers, covering motivations, challenges, and practical implementations like Open Quantum Safe.

Discover M33tfinder: a tool for identifying vulnerable web applications. Learn offensive security techniques from an experienced researcher in this informative conference talk.