Vulnerability Management: Zero-Day, Today and Tomorrow
Dive into modern vulnerability management strategies, exploring zero-day threats and future security challenges in blockchain systems with insights from OpenZeppelin's expertise.
Threat Modeling for Complex Systems in Web3
Dive into advanced threat modeling techniques for Web3 systems, exploring security frameworks and risk assessment strategies for complex blockchain architectures.
The Internals of Veilid - A New Decentralized Application Framework
Explore the architecture and capabilities of Veilid, an open-source P2P framework enabling secure messaging and decentralized applications through private routing, strong encryption, and cross-platform compatibility.
New Isn't Always Novel - Finding Basic Vulnerabilities in Enterprise Software
Discover how basic vulnerabilities in enterprise software led to a successful Pwn2Own contest entry, featuring a command injection exploit in Lexmark printers and practical security insights.
Living Next Door to Russia - A History of Cyber Relations and Future Implications
Explore Finland's complex relationship with Russia through cybersecurity expert Mikko Hypponen's firsthand insights on Russian cyber programs, hacker groups, and geopolitical developments following Finland's NATO membership.
Evolution of Cellular Networks: From 2G to 5G - Understanding Attack Surfaces and Security
Explore the evolution of cellular networks from 2G to 5G, understanding network vulnerabilities, attack surfaces, and security mitigations across each generation of mobile telecommunications.
Social Engineering and Real-Time Malware Attack Strategies - War Stories
Explore real-world social engineering tactics in targeted malware attacks, where attackers use direct communication and psychological manipulation to achieve successful system compromises.
Hacking War Stories: From Prison Systems to Tech Companies - A Series of Unfortunate Events
Dive into real-world hacking adventures, from prison systems to major tech companies, exploring identification, exploitation techniques, and potential impact across different organizational contexts.
Growing the Community of AI Hackers with Generative Red Team Testing
Dive into the groundbreaking world of AI security testing, exploring red team methodologies, algorithmic bounties, and practical strategies for evaluating Large Language Models beyond basic exploits.
Smashing the State Machine: Advanced Web Race Condition Attacks
Discover advanced web race-condition attack techniques, from limit-overrun exploits to state machine manipulation, with practical methodologies and tools for identifying and exploiting vulnerabilities.
Unparalleled RDP Monitoring to Reveal Attackers' Tradecraft
Dive into advanced RDP attack monitoring techniques and threat actor behaviors through a unique D&D-themed analysis of cybersecurity tradecraft and defensive strategies.
Physical Attacks Against Smartphones: Android Security Vulnerabilities and Exploits
Discover physical attack vulnerabilities in Android smartphones, from Recovery mode exploits using SD cards to USB stack weaknesses in secondary bootloaders for achieving root access and code execution.
Game Changing Advances in Windows Shellcode Analysis Using SHAREM Framework
Discover groundbreaking advances in Windows shellcode analysis through SHAREM framework, offering enhanced emulation, complete code coverage, and superior disassembly capabilities for security professionals.
Video-Based Cryptanalysis: Extracting Keys from Power LEDs
Discover how power LED brightness variations in devices can be exploited through video footage to extract cryptographic keys, with demonstrations using smartcard readers and USB speakers.
Private Keys in Public Places - Finding and Exploiting Hidden Encryption Keys
Uncover techniques for finding hidden private keys, certificates, and encryption keys in firmware, with real-world examples from Netgear, Fortinet, and Dell's security vulnerabilities.
The Importance of Arts and Crafts in ThreatOps - Effective Visual Communication for Cybersecurity Analysis
Master effective visualization techniques for cybersecurity incidents and threat intelligence, enhancing your ability to communicate complex security concepts through clear, standardized diagrams.
Retro Exploitation - Vintage Computing as a Vulnerability Research Playground
Explore vulnerability research and exploit development through vintage computing, focusing on the Commodore Amiga platform and practical demonstrations of retro software exploitation techniques.
Securing Critical Versions of Your Reality - Extended Reality in Critical Infrastructure
Explore how Extended Reality (XR) technology impacts critical infrastructure security and operations through expert insights on implementation, risks, and protective measures.
Analyzing Science Fiction Hacking vs Real-World Cyber Attacks - A Comparative Study
Explore the fascinating relationship between science fiction and real-world hacking through analysis of 200 fictional and 800 real cyberattacks, revealing predictive patterns and societal impacts.
Mapping IDs and Monitoring User Presence in the Azure Ecosystem
Uncover powerful techniques for large-scale Azure user enumeration, focusing on OneDrive, Teams, and Graph vulnerabilities to map organizational relationships and monitor user presence without authentication.
Breaking Microsoft Teams and SharePoint Through Migration APIs
Uncover critical security vulnerabilities in Microsoft SharePoint Online's migration APIs and learn how threat actors can exploit these features to compromise Microsoft 365 services and Azure Active Directory.