Exploiting the Lexmark PostScript Stack
Explore Lexmark PostScript stack exploitation, covering internals, language basics, mitigations, and achieving remote code execution through out-of-bounds read and type confusion vulnerabilities.
Embracing Failure to Be a Better Hacker and Human
Explore how embracing failure can enhance hacking skills and personal growth. Learn from real-world examples and gain insights into overcoming challenges in the hacking world.
A Tale of Lazarus and His Family - Hack.lu 2023
Explore the pervasive influence of Lazarus and related threat actors in cybersecurity, uncovering their tactics, techniques, and global impact on digital landscapes.
Exploring Data Collection, Analysis and Security - Hack.lu 2023
Explore data collection, analysis, and security techniques with experts Ventuzelo and Laucournet in this insightful conference talk from Hack.lu 2023.
Connecting CTI and SOC Teams - MISP42
Explore strategies for bridging the gap between Cyber Threat Intelligence and Security Operations Center teams, enhancing collaboration and threat response capabilities.
Building a Collaborative, Trustable, and Crowdsourced Cyber Threat Intelligence - Hack.lu 2023
Explore collaborative approaches to building trustworthy, crowdsourced Cyber Threat Intelligence (CTI) in this insightful presentation from Hack.lu 2023.
Yeti - Old Dog, New Tricks in Cybersecurity
Explore Yeti's latest advancements in threat intelligence, including new features and capabilities for enhanced cybersecurity analysis and investigation.
Turbocharging IOC Validation - Become a More Efficient CTI Analyst
Enhance your Cyber Threat Intelligence skills with advanced IOC validation techniques, improving efficiency and accuracy in threat analysis and response.
JTAN - Data Sharing Network
Explore JTAN, an innovative data sharing network, with experts Paweł Pawliński and Alexandre Dulaunoy. Learn about its features, applications, and potential impact on information exchange.
Unraveling the Cyber Battle Between Ukraine and Russia
Explore the ongoing cyber conflict between Ukraine and Russia, analyzing tactics, impacts, and implications for global cybersecurity in this insightful conference presentation.
FIDO2: The Superior Multi-Factor Authentication Framework
Explore FIDO2, a superior multi-factor authentication framework. Learn its functionality, benefits over traditional methods, and see demos of setup and configuration, including passwordless authentication and passkeys.
Using Data-Driven Metrics to Anticipate and Prevent Security Incidents
Learn how GitHub's PSIRT Engineering team uses data-driven metrics and variant analysis to anticipate and prevent security incidents, reducing pressure on incident response and enhancing product security.
Building Beyond the Login Box - Developing Flexible and Scalable Authentication
Explore advanced authentication beyond login boxes, including passkeys, flexible features, and authorization. Learn how Okta's CIC enhances developer productivity for future challenges.
Enable Modern Privileged Access Management with HashiCorp Boundary
Discover modern privileged access management with HashiCorp Boundary, enabling identity-driven secure user access across dynamic environments while adopting zero trust security strategies.
Unveiling the Trails of Infostealer Malware Ecosystems
Unveiling infostealer malware ecosystems: types, operations, and YouTube spread. Explores Traffer Groups, defense strategies, and a case study on execution and impact of significant attacks.
The Future of Hacking: OpenAI's GPT-4 Code Interpreter - Cybersecurity Applications
Explore AI's potential in cybersecurity with GPT-4 Code Interpreter. Learn to simplify complex issues, analyze diverse programming languages, and manage cryptocurrency data for enhanced bug hunting and communication.
A Practical Method of Finding Vulnerabilities in IoT Devices
Practical methodology for identifying IoT vulnerabilities and intrusion artifacts, focusing on data collection procedures to improve acquisition methods for general IoT devices.
B(l)utter - Reversing Flutter Applications - HITB2023HKT COMMSEC Day 2
Innovative approach to reverse engineering Flutter apps using Dart runtime source code. Introduces B(l)utter tool for metadata extraction, code analysis, and Frida script generation.
Silent Spring: What if the GDPR Was Real? - SREcon23 Europe/Middle East/Africa
Exploring potential consequences of strict GDPR enforcement on multinational companies and data practices, drawing parallels to Rachel Carson's "Silent Spring" and environmental impacts.
When One Line Took Thousands of Websites Offline - Lessons from a Kubernetes Incident
Explore a critical incident where a single configuration change caused widespread website outages, examining the recovery process, lessons learned, and subsequent improvements in Kubernetes infrastructure.
SRE for Cybersecurity - Lessons from Google's Infrastructure Security
Lessons learned from leading Google's SRE teams for infrastructure security, Cloud Security products, and global resilience, with insights for enterprise CISOs and Boards of Directors.