
Explainable AI-powered incident inspector combining language models and association mining for robust, interpretable cybersecurity analysis of large-scale events.

Explore BTD, a decompiler for deep neural network executables, enabling reverse engineering of compiled DL models on various hardware platforms to enhance security and transparency.

Behind-the-scenes look at GitHub's 2FA initiative: strategic considerations, challenges, and lessons learned from scaling security measures for millions of developers.

Explore AWS environment attacks using MITRE ATT&CK, learn prevention strategies, and understand the complexities of cloud security through the lens of the SugarCRM 0-day vulnerability.

Explore the impact of public vulnerability disclosure on bug bounty programs, examining its effects on hacker participation and organizational security strategies.

Explore advanced Windows kernel post-exploitation techniques, including 0-day vulnerability exploitation, DKOM for altering OS telemetry, and NDIS modules for disrupting EDR cloud telemetry and establishing covert persistence.

Uncover a massive cryptojacking attack on government websites, explore its investigation, and learn preventive measures against similar threats in this eye-opening cybersecurity presentation.

Explore GitHub's efforts to secure the Javascript ecosystem through provenance integration and Sigstore partnership, enhancing npm's security against malware and supply chain attacks.

Explore NSA's Codebreaker Challenge: a competitive program mimicking real-world cybersecurity problems, featuring code analysis and reverse engineering tasks of increasing difficulty for US students.

Explore AI-generated voice phishing attacks, their psychological and technical aspects, and the growing threats of generative AI on decision-making, personal security, and organizational trust.

Explore techniques for monitoring and defending against RPC-based attacks, including traffic analysis, signature detection, and mitigation strategies for Windows environments.

Explore Apple UserFS architecture, its impact on filesystem security, and potential vulnerabilities. Gain insights into iOS security through reverse-engineering and analysis of this userspace filesystem implementation.

Explore the potential and limitations of using large language models for offensive security operations, including techniques for finding vulnerabilities and ethical considerations.

Explore a new resilience-based paradigm for systems defense, focusing on nimble, empirical approaches to outmaneuver attackers through accelerated operational tempo and design-based solutions.

Explore local-first software architecture for simpler, faster app development. Learn about CRDTs, cryptography, and auth advancements enabling offline, peer-to-peer, and federated experiences beyond traditional cloud computing.

Explore Windows Defender's architecture, signature database, and update process. Learn about a critical 0day vulnerability affecting Windows and Microsoft 365 Defender, posing risks to enterprise machines.

Unveils critical security flaws in popular RTOSes, demonstrating exploitation techniques for privilege escalation and arbitrary read/write access through live demos on real-world products.

Explore low-level RASP for enhanced application security across multiple high-level programming languages, offering improved defense capabilities compared to traditional WAF and HIPS solutions.

Uncover security risks of Azure AD guest accounts and learn how undocumented APIs can be exploited to gain unauthorized access to sensitive enterprise resources.

Explore lesser-known aspects of JSON Web Tokens, including implementations beyond JWS, and their practical applications in authentication and information transmission.

Comprehensive exploration of CSRF attacks, from traditional to modern API-based vulnerabilities. Learn about attack patterns, defense mechanisms, and best practices to secure web applications effectively.