
Explore automated seccomp filter generation for Linux applications, enhancing security through sandboxing and system call restrictions without manual developer intervention.

Explore SQL injection vulnerabilities in IIS and SQL Server, uncovering unexpected attack vectors and their implications for Microsoft's ecosystem security.

Explore advanced threat hunting techniques in Active Directory, focusing on attacker persistence methods, privilege escalation, and covert system control. Learn to detect and mitigate sophisticated APT threats.

Explore a new method to hide C2 traffic using CDN, circumventing censorship and detection. Learn about domain borrowing, HTTPS certificate abuse, and CDN vulnerabilities for red team operations.

Explore reverse engineering techniques applied to compliance standards, shifting from checkbox mentality to understanding the spirit of requirements for more effective security practices.

Discover the B-MAD approach to threat modeling, exploring its pitfalls and organizational impacts. Learn effective strategies for implementing threat modeling across your organization and improving overall security.

Explores security vulnerabilities in cross-vendor IoT access control, focusing on delegation chains and authorization flaws in smart home devices and cloud platforms.

Explore security and privacy risks of motion sensors in IoT devices, including attacks on integrity, availability, confidentiality, and user privacy. Learn about implications and potential vulnerabilities.

Explore supply chain risks, their consequences, and industry mitigation strategies in light of recent challenges. Gain insights into software integrity and future security measures.

Explore HTTP/2 vulnerabilities, implementation flaws, and RFC imperfections. Learn advanced request smuggling techniques and their impact on major platforms like Netflix and Amazon.

Explore a novel attack on macOS Safari sandbox using Cross-Site Scripting, achieving native code execution outside the sandbox without re-exploiting WebKit twice.

Explore IoT security threats, automated threat hunting techniques, and advanced analysis methods to protect against malicious actions targeting millions of connected devices.

Explores vulnerabilities in Bluetooth stacks, focusing on Host-Controller Interface (HCI) and vendor-specific commands. Demonstrates attack techniques and discusses security implications for MacOS and iOS devices.

Explore methodologies to reverse engineer and bypass next-generation anti-virus (NGAV) models, focusing on adversary learning techniques and challenges in cybersecurity.

Explores ECDSA vulnerabilities, focusing on nonce leakage attacks. Presents LadderLeak, a novel technique breaking ECDSA with minimal nonce exposure, and discusses implications for cryptographic implementations.

Explore the vulnerabilities of Point of Sale terminals, uncovering security flaws in hardware, software, and file systems that enable cloning and fraud in the dark market.

Explore latest cybersecurity developments in government, risk management at scale, and collaboration with industry and hackers. Learn about hacking mindset and cyber volunteering.

Explore critical vulnerabilities in embedded TCP/IP stacks, their impact on system security, and techniques for analysis and mitigation in networked embedded systems.

Explore cutting-edge brain-machine interactions with leading neuroscientists and experts, discussing advancements in neural technology, consciousness replication, and the future of human-machine integration by 2050.

Exploring vulnerabilities in Terminal Management Systems for card payments, revealing potential security risks in acquiring bank infrastructure and POS terminals.

Explore SAP vulnerabilities: authentication bypass, OS command injection, and privilege escalation. Learn to decrypt sensitive files, manipulate security reports, and implement protective measures.