
Detailed analysis of Blue Coat ProxySG systems, exploring OS mechanisms, file system internals, and security features. Insights for IT professionals managing web traffic proxying and filtering.

Exploit memory deduplication to defeat ASLR in cloud environments, leaking randomized base addresses of libraries and executables in neighboring VMs using a side-channel attack.

Uncover vulnerabilities in LastPass password manager, including methods to steal master passwords, bypass 2FA, and access encrypted vaults, highlighting the importance of robust security measures.

Explore new techniques to bypass XNU kernel exploit mitigations in El Capitan, including KASLR and SMEP, and learn how to overcome System Integrity Protection through a real kernel exploit demonstration.

Explore critical cybersecurity vulnerabilities in oil and gas industries, focusing on SAP and Oracle systems. Learn about potential attacks, their impacts, and strategies for protecting vital infrastructure and operations.

Explore SED vulnerabilities, their impact on data protection, and strategies for safeguarding against new threats in enterprise environments.

Celebrating excellence in information security with humor and recognition for groundbreaking achievements and epic fails in the cybersecurity industry.

Exploring DHS's vision for rapid, widespread cybersecurity information sharing across sectors. Discusses challenges and the goal of making threat indicators a public good for enhanced network defense.

Innovative defensive strategy to break attack payloads by removing unused code and APIs from application processes, enhancing security without runtime overhead or file modifications.

Explores overlooked iOS 8 vulnerabilities through fuzzing and code auditing, revealing system daemon crashes and memory corruption errors triggerable via XPC, plus an iOS kernel 0day.

Explore BGP Stream: real-time detection of potentially malicious BGP/ASN changes for enhanced network security and traffic flow monitoring.

Learn to set up Kali Linux on USB with persistent storage and LUKS Nuke support. Explore live boot options, create persistence files, and handle emergency situations for secure, portable penetration testing.

Comprehensive analysis of security threats in Software Defined Networking, exploring vulnerabilities, potential attack scenarios, and providing recommendations for effective countermeasures.

Explore the risks of third-party libraries in software, analyzing vulnerability metrics and exposure times. Learn strategies to mitigate risks and improve security practices in your organization.

Versatile CPU emulator framework supporting multiple architectures and platforms. Offers clean API, thread-safety, and language bindings for building advanced security tools and research.

Explore cryptographic entropy usage, sources, and management across systems. Learn to analyze and improve random number generation for enhanced security in modern IT infrastructures.

Uncover obfuscated API functions in modern packers using memory access analysis and iterative run-until-API methods. Learn techniques to deobfuscate Themida 32/64 packed binaries for effective malware analysis.

Explore techniques for detecting vulnerabilities and backdoors in embedded device firmware using static binary analysis, focusing on challenges and automated solutions for complex binary blobs.

Explore EdgeHTML's attack surface, compare it with MSHTML, and analyze exploit mitigations in Windows 10's new rendering engine for enhanced web security understanding.

Explore techniques to detect, bypass, and exploit honeypot technologies, turning defensive tools against defenders. Includes global honeypot mapping and vulnerability analysis.

Explore vulnerabilities in software-defined networks, focusing on ONIE and network operating systems. Learn about potential exploits, malware persistence, and strategies for securing control plane networks.