
Explore unintentional human-generated identifiers in digital security, their uses in attack and defense, and countermeasures. Gain insights into "human side-channels" and their privacy implications.

Discover new techniques to exploit NTLM authentication, including a critical zero-day vulnerability enabling domain-wide machine takeover, even with strict security configurations.

Explore Intel's internal architecture, PCH devices, and security-sensitive data access. Learn to read signals from internal buses and discover hidden components within Intel chips.

Explore human side-channels: unintentional digital identifiers from human behaviors, their implications for security and privacy, and potential countermeasures.

Explore YARA rules for extracting malware samples from VirusTotal, learning techniques to identify attacker infrastructure and analyze real-world threats.

Explore techniques to identify and exploit algorithmic complexity vulnerabilities, focusing on inefficient worst-case scenarios and their impact on program performance and security.

Electromagnetic fault injection attack on Trezor Bitcoin wallet revealed, allowing seed extraction without physical tampering. Implications for embedded USB stacks and cryptocurrency security explored.

Uncover vulnerabilities in Boeing 787's Core Network through reverse engineering, revealing security flaws and their implications for aircraft systems and passenger safety.

A novel exploit breaking advanced rowhammer defenses, allowing unprivileged applications to gain root and kernel privileges. Stealthier and more efficient than existing exploits, this talk presents key steps and implications.

Explore PicoDMA, a compact FPGA-based platform for DMA attacks. Learn about its capabilities, hardware, and potential security implications using the affordable PicoEVB board.

Explores RSA signature forgery vulnerabilities, revealing new CVEs and discussing prevention strategies through dynamic symbolic execution analysis of signature verification implementations.

Explore critical vulnerabilities in SSO implementations, focusing on token parsing issues in major libraries. Learn about potential attacks and their impact on authentication systems.

Explore innovative techniques for detecting AI-generated speech using biological systems, focusing on mice's auditory perception and neural responses to distinguish authentic from synthetic voices.

Explore common attacks on Microsoft Cloud, learn effective defenses, and gain insights into securing Office 365 and Azure AD environments. Applicable to other cloud providers.

Discover file privilege escalation bugs automatically in Windows services using Advanced Local Procedure Call analysis and process monitoring techniques for enhanced system security.

Explore techniques for attacking Active Directory forests from UNIX systems integrated with AD, examining tools and procedures that bridge these two worlds in cybersecurity.

Practical side-channel attack to identify social web service accounts of website visitors, compromising anonymity through user profiles and activities.

Explore techniques to reduce container vulnerabilities by analyzing and removing unnecessary dependencies, binaries, and permissions, enhancing security beyond namespace isolation.

Explore AI-driven phishing simulation techniques, including neural networks and URL prediction, to enhance cybersecurity defenses against sophisticated email-based attacks.

Systematic assessment of Apple's kernel security, demonstrating bypasses through ipc_port Kernel Object-Oriented Programming and showcasing realistic attack scenarios for full XNU control.

Upgrade your security approach with collaboration, innovation, and risk-based technology. Learn to adapt to business needs, find the right solutions, and move beyond traditional "no" responses.