
Explore Windows 10's virtualization-based security, its implementation details, and potential vulnerabilities. Includes demonstrations of exploits against VBS and firmware, with a focus on platform complexity issues.

Explore Schannel's internal security, CNG key caching, and forensic implications. Learn to extract and leverage TLS/SSL connection data for decryption and analysis of ephemeral key exchanges.

Explore Android's evolving security landscape, examining threats, vulnerabilities, and defensive measures. Learn how the Android Security Team addresses challenges and implements new features to protect users.

Explore advanced techniques for injecting CAN messages into vehicle networks, bypassing restrictions on physical control systems like brakes, steering, and acceleration.

Comprehensive survey of TCP injection attacks, revealing commercial and non-commercial false content injections on the web. Explores detection methods, identifies injectors, and proposes client-side mitigation techniques.

Explore remote exploitation of unattended computers using rogue Domain Controllers. Learn technical details, attack vectors, and prevention methods for enterprise security.

Explore a critical verification bypass bug in Xen hypervisor, allowing malicious PV guest OS to control the hypervisor and other guest operating systems. Learn about exploitation vectors and payloads.

Explore strategies for achieving defensible cyberspace through innovative technologies, operational improvements, and public policies that provide cost-effective security at scale.

Explore digital forensics for industrial control systems, focusing on embedded devices in critical infrastructure. Learn data collection and analysis techniques for RTUs in electric substations.

Explore a generic unpacking algorithm for Windows executables using Dynamic Binary Instrumentation. Learn to detect and defeat popular packing techniques, reconstruct working PEs, and handle IAT obfuscation.

Explore Keystone, a multi-architecture assembler engine with clean API, native support for various platforms, and bindings for multiple programming languages. Ideal for reverse engineering and security research.

Innovative security training using role-playing game to teach basic principles through building attack/defense scenarios. Engages neophytes by drawing parallels between game and real-world security challenges.

Explore the evolution of DNS-based attacks, including random subdomain techniques, and learn about detection and mitigation strategies for protecting against these sophisticated cyber threats.

Explore how commodity malware breaches are reclassified and upgraded for targeted attacks, and learn detection techniques to prevent threat escalation in organizational networks.

Explore a risk-based approach to combat spear phishing, introducing the Cyber Risk Index for personalized training and access management to enhance organizational cybersecurity.

Discover a critical Windows flaw affecting multiple systems and applications. Learn about its wide-ranging impact and how to defend against this pervasive threat, even on unsupported systems.

Learn techniques for detecting next-gen exploit kits by simulating obfuscators. Explore implementation, evaluation, and evolution of obfuscators for 6 notorious exploit kit families to enhance cybersecurity protection.

Explore DDOS attacks, their evolution, and novel techniques for measuring, studying, and attributing them. Learn about honeypots, attack testing, and the individuals behind these cyber threats.

Explore forensic linguistics in cybersecurity, analyzing language patterns of phone scammers to enhance human-level defense against social engineering attacks.

Explore cheap hardware attacks on embedded devices and industrial control systems, including privilege escalation, kernel patching, and wireless control of PLCs. Learn about design decisions to reduce vulnerabilities.

Explores WPAD protocol vulnerabilities through experiments, revealing widespread risks in networks and DNS. Presents surprising findings and discusses implications for cybersecurity.