
Explore medical device security, debunk myths, and learn about a real software bug. Gain insights on improving device security and proper vulnerability disclosure to the FDA.

Explore OLAP technology vulnerabilities in Business Intelligence systems, focusing on MDX-related attacks, code injection, and data retrieval vectors. Learn practical exploitation techniques for critical corporate data.

Análisis de seguridad del protocolo inalámbrico M-Bus para medidores inteligentes, revelando vulnerabilidades que amenazan la privacidad, integridad y fiabilidad de las redes eléctricas avanzadas.

Explore advanced strategies to detect and prevent Pass-The-Hash attacks in Windows networks, addressing vulnerabilities and enhancing enterprise security against lateral movement.

Innovative binary analysis toolset for cross-platform programs. Integrates with IDA Pro, enabling interactive visualization and on-demand analysis for efficient reverse engineering and vulnerability detection.

Explore Pass the Hash attacks and Microsoft's recommended mitigations, including credential theft prevention, authentication policies, and platform changes for enhanced cybersecurity.

Explores advanced techniques used by malware to evade automated analysis systems, including extended sleep calls, mouse click triggers, and timed activation. Provides insights for security professionals on evolving threats.

Comprehensive analysis of BlackBerryOS 10's security architecture, exploring attack surfaces, privilege escalation, remote entry points, rootkit persistence, and the effectiveness of BlackBerry Balance.

Explore data mining and NLP techniques to profile online activity, creating digital fingerprints for enhanced social engineering. Learn to analyze user interactions, vocabulary, and communication patterns.

Explore the future of password hashing, its challenges, and the Password Hashing Competition initiative to develop improved methods for securing digital systems.

Innovative approach to discovering kernel vulnerabilities using CPU-level instrumentation and memory access pattern analysis. Introduces "Bochspwn" project, which identified numerous Windows kernel vulnerabilities.

Explore mobile malware threats, limitations of traditional antivirus methods, and innovative approaches like cloud-based screening and hardware-supported security solutions for protecting mobile devices.

Explore IEEE's CMX system for efficient software whitelisting, reducing false positives in security through metadata exchange without copyright concerns.

Exploiting vulnerabilities in forensic software file viewers through malicious files, demonstrating code execution and DoS attacks. Includes fuzzing techniques, vulnerability analysis, and countermeasures.

Comprehensive analysis of real-world XSS vulnerabilities and attacks, presenting advanced protection methods and introducing detectXSSlib, a new tool for real-time XSS detection.

Comprehensive analysis of a Domain Generating Algorithm malware family, covering deobfuscation, DGA analysis, sinkholing, and attribution of the malware's author and accomplices.

Explore flaws in common PRNGs, learn to identify and reverse-engineer them through black-box analysis, and discover efficient algorithms for predicting past and future outputs.

Unveiling mainframe security: Learn configuration, access methods, and potential vulnerabilities in this eye-opening talk for IT security professionals unfamiliar with mainframe systems.

Celebrate and roast the best and worst in information security at the annual Pwnie Awards ceremony, featuring humor, recognition, and industry insights.

Discover stochastic forensics: a novel technique for detecting insider data theft by analyzing statistical patterns in file systems, even months after the incident occurs.

Explore the historical power dynamics of information advantage and its impact on societal shifts, drawing parallels to today's digital revolution and its implications for the future.