Optical Espionage: Using Lasers to Hear Keystrokes Through Glass Windows
Discover how lasers and physics enable remote keystroke detection through windows, exploring side-channel attacks, signal interpretation, and modern espionage techniques for data extraction.
Reverse Engineering and Hacking Ecovacs Robots - Security Vulnerabilities and Privacy Concerns
Dive into the security vulnerabilities of Ecovacs robots, exploring broken encryption, unauthorized camera access, and privacy concerns while learning techniques for privacy-preserving usage and rooting.
Unraveling the Threads of USPS Smishing and Fighting Back - Reverse Engineering SMS Phishing Kits
Dive into the technical investigation of USPS-themed SMS phishing attacks, exploring vulnerability exploitation, reverse engineering techniques, and methods to combat scammer operations targeting US consumers.
Defeating EDR Evading Malware with Memory Forensics
Discover advanced memory forensics techniques to detect and analyze EDR-evading malware, including system call manipulation, module overwriting, and debug register abuse.
Outlook Unleashing RCE Chaos: Exploiting CVE-2024-30103
Dive into the critical Outlook security vulnerabilities, exploring remote code execution exploits through COM objects, NTLM leaks, and essential mitigation strategies for enterprise protection.
Exposing Attacks Hiding in the Sheer Noise of False Positives - Using Data Science for Security Operations
Discover how data science transforms overwhelming security data into actionable insights, helping identify coordinated attacks amid false positives using open-source models and security knowledge encoding.
Navigating the Turbulent Skies of Aviation Cyber Regulation
Dive into the complex landscape of aviation cybersecurity policy, exploring technical challenges and regulatory frameworks shaping the future of civil aviation safety across the US and Europe.
Using Bloodhound as a Defender: Tips from the Red Team
Discover how to leverage BloodHound from a red team perspective to identify and remediate critical Active Directory security flaws, with practical insights using the new ad-recon automation tool.
Getting Started in Industrial Control Systems Cybersecurity - Beyond Engineering
Discover how to break into Industrial Control Systems (ICS) cybersecurity, exploring career paths, debunking myths, and gaining practical insights for protecting critical infrastructure.
Password Cracking 201 - Beyond the Basics
Advanced techniques for password cracking, exploring methods beyond basic approaches. Enhance your cybersecurity skills and learn to identify vulnerabilities in password systems.
Network Forensic Analysis in an Encrypted World
Explore network forensics in encrypted environments, focusing on metadata analysis, hunting techniques, and leveraging encryption for defense. Learn to adapt and thrive in modern cybersecurity landscapes.
Protecting Windows Credentials - An Excessive Guide for Security Professionals
Comprehensive guide for security professionals on safeguarding Windows credentials, covering architecture, isolation, exploit mitigation, and containment strategies for enhanced system protection.
Rethinking Password Strength Beyond Brute-force Entropy
Explore password security beyond entropy, challenging conventional wisdom and offering insights on effective strategies for creating and managing strong passwords.
G1234! - F! Passwords!
Explore password security challenges, best practices, and innovative solutions for robust authentication in the digital age.
The Leverage of Language, or, How I Realized Information Theory Could Save Information Security
Explore how information theory can revolutionize cybersecurity through language leverage, visualization, and innovative approaches to incident response and threat intelligence.
Mainframed - The Forgotten Fortress
Explore mainframe security vulnerabilities, including password limitations and hashing weaknesses. Learn about the Master Console, ISPF file editor, and using Netcat on UNIX systems for mainframe penetration testing.
How I Learned to Stop Worrying and Love the Smart Meter
Explore smart meter vulnerabilities, AMI systems, and Zigbee security. Learn attack vectors, access methods, and common security issues in utility infrastructure.
Shot With Your Own Gun - How Appliances Are Used Against You
Explore how everyday appliances can be exploited for malicious purposes, uncovering vulnerabilities and discussing potential security risks in common household devices.
Mirror Mirror - Reflected PDF Attacks Using SQL Injection
Explore advanced SQL injection techniques for exploiting PDF vulnerabilities, focusing on reflected attacks and their potential impact on web application security.
Breaking Microsoft Dynamics Great Plains - An Insider's Guide
Insider's guide to exploiting vulnerabilities in Microsoft Dynamics Great Plains, revealing security weaknesses and potential attack vectors in this widely-used ERP system.
Lotus Notes Password Hash Redux
Explore Lotus Notes security vulnerabilities, focusing on password hashes. Learn about enumeration techniques, tools, and mitigation strategies for this widely-used enterprise software.