The Fault in Our Metrics - Rethinking How We Measure Detection and Response
Rethinking cybersecurity metrics: A practical framework for developing effective detection & response measurements that incentivize progress and tell a compelling story to leadership.
Security for AI Basics - Unconventional Strategies and Humor
Explore unconventional AI security strategies through humorous scenarios, from dancing self-driving cars to gossiping chatbots, in this entertaining and informative 101 talk.
Defensive Counting - Quantifying ICS Exposure on the Internet
Explore techniques for accurately quantifying ICS exposure on the Internet, addressing challenges like honeypots and non-critical devices to provide a comprehensive yet measured analysis of real ICS vulnerabilities.
Passwordless Authentication: Challenges and Solutions for Account Recovery
Explore challenges in account recovery and identity verification as passwordless authentication becomes prevalent, addressing industry impacts and legacy application concerns.
Homicideware: From Y2K to Modern Cybersecurity Challenges - Keynote
Explore the evolution of computer security policy and its impact on modern threats. Learn from historical safety responses to shape a safer digital future.
CVE Hunting: Wi-Fi Routers, OSINT and The Tyranny of the Default
Explore CVE hunting techniques for Wi-Fi routers, focusing on default credential vulnerabilities and OSINT strategies to uncover critical security flaws across manufacturers.
Hell-0 World - Hacking IoT Weather Stations
Uncover IoT vulnerabilities in Tuya-based devices, focusing on weather stations. Learn to manipulate device operations through firmware extraction and reverse engineering techniques.
Security Pitfalls with Exec Commands in Software Integrations - A Quick Story
Explore security risks in software integrations, focusing on command injection attacks. Learn detection methods, prevention techniques, and real-world vulnerability analysis through a case study.
The Dark Side of TheMoon - Uncovering Botnets and Criminal Proxy Networks
Uncover the resurrection of "TheMoon" botnet and its connection to "Faceless," a growing criminal proxy network. Learn about botnet mechanics, proxy dangers, and router vulnerabilities.
The B-Side of Ransomware - Exploring Lesser-Known Threats
Explore lesser-known ransomware attacks, their tactics, and why they failed to gain notoriety. Gain insights into the evolving threat landscape and enhance cybersecurity preparedness against diverse potential attacks.
Security Trek: The Next Generation - Teaching Resilience Beyond Data Security
Explore the evolution of cybersecurity education, shifting focus from data protection to holistic resilience and recovery strategies for the next generation of security professionals.
Nothing Went to Plan - Creating an Effective Incident Response Strategy
Discover essential steps for creating an effective incident response plan, ensuring clear decision-making processes and defined roles to minimize damage during cybersecurity crises.
Finding and Exploiting Critical Vulnerabilities in RPC Services - NorthSec 2023
Comprehensive walkthrough of finding, exploiting, and reporting critical vulnerabilities in an RPC service, covering reverse engineering, authentication bypass, and coordinated disclosure.
Using Game Theory to Study the Evolution of Ransomware - Checkmate
Explore ransomware evolution through game theory, analyzing attacker-defender dynamics and recurring tactics to improve cybersecurity strategies and balance the odds against multiple threats.
SystemUI as EvilPiP - Hijacking Attacks on Modern Mobile Devices
Reveals new Android attack surface 'PiP', exploiting vulnerabilities to bypass security measures and perform stealthy hijacking attacks on modern devices without permissions or user awareness.
LLM4Shell - Discovering and Exploiting RCE Vulnerabilities in LLM-Integrated Frameworks
Uncover critical RCE vulnerabilities in LLM-integrated frameworks and apps. Learn automated exploitation methods, potential impacts, and essential mitigation strategies for securing AI-powered systems.
LLMs at the Core - From Attention to Action in Scaling Security Teams
Explore practical tools leveraging LLMs to scale security teams, streamline workflows, and enhance decision-making in complex environments. Gain insights on automating tasks and improving security processes.
From BYOVD to 0-Day - Unveiling Advanced Exploits in Cyber Recruiting Scams
Unveiling sophisticated cyber-attacks disguised as job recruitment, featuring 0-day exploits and advanced rootkit capabilities. Explores novel attack methods targeting Asia, bypassing security measures.
EDR Reloaded - Exploiting Endpoint Security Vulnerabilities for Remote Data Erasure
Unveils critical vulnerability allowing remote data deletion in endpoint security products. Demonstrates attack vectors, explains root cause, and showcases bypass of Microsoft patch, impacting databases and system logs.
Chinese APT - Exploiting Edge Devices for Surveillance and Attacks
Revelación de ataques de APT chinos a dispositivos de borde, incluyendo un 0-day en routers de vigilancia. Se analizan casos de estudio y se proponen estrategias de mitigación.
China's Military Cyber Operations - Strategic Support Force's Evolution and Challenges
Análisis de las operaciones cibernéticas militares de China y el papel de la Fuerza de Apoyo Estratégico, examinando su evolución, capacidades y desafíos en el contexto geopolítico del Indo-Pacífico.