
Integrating APIs into External Attack Surface Management to improve security posture. Discover and assess exposed assets, including APIs, for better protection and risk mitigation.

Fireside chat with security experts Cristofaro Mune and Adam Laurie, discussing their extensive experience in hardware hacking, embedded systems security, and reverse engineering techniques.

Fireside chat with cybersecurity experts Stefano Zanero and Marco Balduzzi, discussing their research, experiences, and insights in malware analysis, cyberphysical security, and emerging threats in the digital landscape.

Explores coordinated military efforts in the GCC region, focusing on biological weapons development and information warfare strategies for national defense. Insights from field experience shared.

Hands-on workshop on extracting and emulating ARM IoT firmware using ARMX. Covers firmware extraction, unpacking, file system analysis, and device emulation. Practical experience with real IoT devices and tools.

Explore IoT security with EXPLIoT framework. Learn key concepts, tools, and protocols for penetration testing and exploit development in IoT environments. Hands-on workshop for security researchers and pentesters.

Explore advanced techniques to bypass Endpoint Detection and Response (EDR) systems, including PID spoofing, DLL blocking, and syscalls. Learn from experts and get inspired to innovate in cybersecurity.

Explores attack surfaces and vulnerabilities in automated manufacturing systems, discussing potential impacts on product quality, plant safety, and industrial espionage in Industry 4.0 environments.

Explore innovative approaches to cybersecurity for complex systems using knowledge graphs, graph theory, and machine learning. Learn to plan and execute effective engagements across diverse technological landscapes.

Exploring the risks of BYOD policies and the potential for malicious apps to create targeted attacks on corporate devices, highlighting covert channels and opportunistic permissions.

Explores physical layer security challenges and solutions for embedded devices, focusing on authentication schemes, feature extraction from wireless modules, and practical implementation methodologies.

Exploring Telegram's animated stickers implementation in E2EE chats, uncovering 13 zero-day vulnerabilities through advanced fuzzing techniques and binary exploitation.

Explore innovative machine learning techniques for detecting malicious infrastructure in HTTP responses, focusing on uniqueness and header order features to identify command and control servers.

Exploring key trends in alternative payments and cryptocurrencies, including industry perspectives, future directions, and challenges for investors in this rapidly evolving financial landscape.

Discover advanced techniques for identifying and mitigating critical vulnerabilities in embedded systems, focusing on NicheStack TCP/IP stack vulnerabilities and automated vulnerability detection methods.

Explore overlooked attack surfaces on macOS through fuzzing techniques. Learn to bypass security protections, debug effectively, and use new tools for crash triage in Apple core apps and services.

Exploiting a 10-year-old Use-After-Free vulnerability in Android's xt_qtaguid kernel module, demonstrating local privilege escalation on Mi9 device using ret2bpf technique to bypass protections.

Explore advanced JDBC attack techniques, including 0day vulnerabilities in popular systems. Learn about XXE and RCE issues, and gain insights from experienced security researchers.

Comprehensive analysis of SHADOWPAD malware: its origin, usage patterns, and business model. Explores its impact on Chinese cyber espionage and the evolving threat landscape.

Análisis detallado de las sofisticadas técnicas de phishing del grupo APT norcoreano CloudDragon, incluyendo casos reales, métodos para evadir la autenticación de dos factores y propagación a sistemas Android.

Exploring advanced privilege escalation techniques in Windows services, including a new 0day NTLM relay attack. Covers recent methods, Windows Service Hardening, and the RemotePotato0 attack vector.