
Revealing Android security vulnerabilities: analysis of missing patches in vendor firmwares, enabling users to verify patch levels and improve overall protection.

Exploring the risks of "logo disclosure" in cybersecurity marketing, analyzing authentic bug bounty programs, and discussing the impact of aggressive marketing on security research.

Discover methods for finding vulnerabilities in Javascript Engines through fuzzing techniques, including crash classification, parallel fuzzing, and custom pattern generation for enhanced web browser security.

Explore advanced cmd.exe obfuscation techniques used by threat actors, including string manipulation and encoding methods. Learn about a new framework for payload obfuscation and its detection implications.

Demonstration of real-world attack against globally deployed Secure Element, allowing adversary impersonation of secured devices. Explores vulnerabilities in scaling secure elements for global deployments.

Introduces EasyROP, a tool for automating ROP attacks by finding gadgets in binary files. Analyzes Windows libraries for attack feasibility and demonstrates a real-world application on CVE-2010-3333.

Exploring vulnerabilities in IoT speakers, focusing on Sonos and Bose systems. Covers configuration flaws, diagnostic tools, API issues, and device location. Discusses broader implications for IoT security.

Unveiling Keynterceptor: A stealthy keyboard implant that captures and injects keystrokes, communicates wirelessly, and bypasses current USB security mechanisms, demonstrating advanced USB attack vectors.

Explore vulnerabilities in keyless entry systems for vehicles, including attack methods and potential security improvements for automotive manufacturers.

Exploring iOS vulnerabilities beyond containerized apps, revealing multiple privilege escalation flaws affecting all devices and demonstrating a chained exploit to bypass security mitigations.

Exploring Facebook's role as a platform for cyber criminals and hacktivists in Asia, examining its similarities to the dark web and its appeal for organizing illicit activities.

Unveiling critical vulnerabilities in collaborative robots across industries, demonstrating potential threats and exploitation scenarios to emphasize the urgent need for enhanced security measures in robotic ecosystems.

Discover the world of Threat Hunting: skills, daily tasks, and techniques for proactively identifying advanced persistent threats. Learn from industry experts and real-world case studies.

Exploring URL scheme vulnerabilities in web exploits, including SSRF and XXE attacks. Analyzes browser-specific attack surfaces and introduces a new Firefox 0day for arbitrary code execution.

Learn to build a secure 'magic mirror' using Raspberry Pi, exploring its construction, security enhancements, and potential sci-fi-inspired upgrades from an experienced software security expert.

Exploring ARM debug components for security primitives and information flow tracking. Demonstrates a portable approach to enhance runtime security monitoring in ARM-based systems.

Technical overview of macOS malware from 2016, including infection vectors, persistence mechanisms, and features. Discusses security mitigations, detection methods, and best practices for Mac users.

Katie Moussouris discusses the evolution of hacker perception, from criminals to valuable assets, highlighting the first US government bug bounty program and the future of cybersecurity collaboration.

Runtime memory analysis tool for mobile apps, automating common checks during penetration testing. Simplifies reverse engineering of obfuscated code for iOS and Android, tracking app behavior changes in real-time.

Explore vehicle architecture, CANbus protocol, CAN frames, and car hacking tools in this hands-on virtual lab. Learn from experts in automotive security and gain practical skills in vehicle system penetration testing.

Exploración de códigos secretos en dispositivos Android, revelando vulnerabilidades de seguridad y métodos de bypass en teléfonos de principales fabricantes. Incluye demostraciones prácticas y herramientas de fuzzing.