
Exploring the evolving cyber kill chain in SaaS-native organizations, discussing new attack vectors, lateral movement techniques, and persistent threats in cloud-based environments.

Insider tales from 7 years of physical penetration testing, revealing techniques for breaching high-security facilities and debunking myths about physical security across various industries.

Explore overlooked security vulnerabilities and potential attack vectors in software systems with insights from a leading cybersecurity expert.

Explore memory corruption vulnerabilities in ncurses, their impact on system security, and the journey of discovery from environment variable to potential privilege escalation.

Explore ghidriff, an open-source Python package for efficient binary diffing using Ghidra. Learn about its command-line interface, function matching heuristics, and markdown output for simplified patch analysis and vulnerability research.

Explore the mobile industry's collaboration with hackers to enhance security, from informal relationships to a cross-industry vulnerability disclosure scheme, featuring key hacks and future challenges.

Explore WebSocket security risks, vulnerabilities in enterprise applications, and a new Burp Suite extension for improved pentesting of real-time communications.

Explore ethical hacking, bug bounties, and cybersecurity with experts. Learn practical tips, essential skills, and valuable resources to enhance your hacking prowess and protect digital assets.

Insightful discussion on the evolving role of security in software development, emphasizing the shift towards developer responsibility and strategies for making informed security decisions.

Explore container security fundamentals, shared kernel implications, and best practices for assessing and mitigating risks in containerized applications with experts Liz Rice and Eoin Woods.

Explore privacy-enhancing technologies for data protection, balancing privacy and utility in software development. Learn open-source tools and best practices for implementing privacy by design in data science projects.

Découverte de 16 vulnérabilités zero-day dans CODESYS, un framework logiciel pour automates programmables industriels, affectant potentiellement des millions d'appareils dans divers secteurs industriels.

Discover three novel attacks on JSON Web Tokens, exploring vulnerabilities in authentication and session management. Gain insights into cryptographic design flaws and complexity issues in JWT implementations.

Explore cross-core attacks on complex smartphone SoCs, examining vulnerabilities in multi-processor systems and their impact on overall device security. Learn about real-world examples and potential defense strategies.

Explore Android Red Team's proactive security approach for Google Pixel devices, focusing on modem vulnerabilities and protection strategies against remote compromises.

Explore Chrome vulnerabilities in V8's Maglev compiler, uncovering security risks in JS optimization and compilation processes for advanced browser exploitation techniques.

Explore the effectiveness of AI-generated phishing emails compared to traditional methods, revealing surprising results and implications for cybersecurity strategies.

Encryption essentials for developers: cryptography basics, zero trust security, key management, and data storage best practices to prevent breaches and secure sensitive information.

Explore reverse engineering techniques for Mitsubishi PLCs, uncovering protocol details and vulnerabilities without firmware access. Learn about breakthrough methods and discovered CVEs.

Explore Linux kernel keystore's secure credential management, integration with hardware security modules, and benefits for application development in cloud-native environments.

Explore secure container image creation using Chainguard's tools. Learn to build minimal, auditable images with SBOMs, manage ca-certs, and enhance supply-chain security through practical demonstrations.