Operation So-seki: Investigating Pro-Russian Hacktivist DDoS Attacks
Investigación detallada sobre un grupo hacktivist pro-ruso, sus ataques DDoS y tácticas. Análisis de infraestructura, herramientas y contramedidas basado en el seguimiento de más de 1000 ataques durante un año.
PhishDefend - A Reinforcement Learning Framework for AI-Augmented Phishing Detection and Response
Explore a reinforcement learning framework for measuring AI-augmented phishing detection and response, enhancing cybersecurity strategies against evolving threats.
Chrome Cookie Theft on macOS and Prevention Techniques
Explore techniques for Chrome cookie theft on macOS and learn effective prevention methods using open-source tools like Santa and osquery for enhanced cybersecurity.
Hacking Trust Establishment - Tactics for Social Engineering and Business Relationships
Explore tactics for quickly building trust in professional relationships, enhancing social operations, sales, management, and executive support.
One Port to Serve Them All - Google GCP Cloud Shell Abuse
Uncovers security vulnerabilities in GCP Cloud Shell, demonstrating how attackers can exploit a public-facing port to access internal services and bypass authentication, potentially leading to data leaks and network attacks.
Navigating the Changing Cyber Landscape - Trends, Costs, and Risk Mitigation Strategies
Explore 2023's cyber landscape: record-breaking events, evolving threats, and risk mitigation strategies. Learn about costs, trends, and how top companies quantify potential risks.
Defending Critical Infrastructure: Deep Enumeration and Proprietary Protocol Analysis
Explore deep enumeration and proprietary protocol analysis to enhance critical infrastructure security. Learn methodologies for dissecting protocols and understanding their potential vulnerabilities and defensive applications.
ZERO-RULES Alert Contextualizer and Correlator for Detecting Multi-Stage Cyber Attacks
Leveraging AI models to connect security events into MITRE ATT&CK campaigns, enhancing detection of multi-stage cyber attacks and shifting focus from individual incidents to targeted campaigns.
Devising and Detecting Spear Phishing Using Data Scraping, Large Language Models, and Personalized Spam Filters
Explore AI-powered phishing techniques and countermeasures, including automated email creation, personalized spam filters, and digital footprint optimization for enhanced cybersecurity.
How We Accidentally Became Hardware Hackers - A Journey Through Cybersecurity
Journey from servers to hardware hacking: Two engineers share lessons learned through mistakes, encouraging aspiring hackers to embrace trial and error in hardware development and security.
101 Things Your Application is Doing Without Your Knowledge
Uncover hidden behaviors in your applications, including unexpected file operations and network connections, even when using trusted dependencies. Learn to identify and manage these covert activities.
Hacking Arcade Cashless Systems: Vulnerabilities and Exploits
Explore vulnerabilities in global arcade cashless systems, covering API security, access control, and NFC. Learn how to exploit weaknesses for potential free play in amusement parks worldwide.
Securing Cloud-Native DevOps - A Zero Trust Approach
Explore Zero Trust principles for securing cloud-native DevOps environments, addressing challenges like supply chain attacks and lateral movement in microservices and serverless architectures.
Standardizing Password Surveys - Improving Reliability and Comparability
Standardizing password surveys to improve reliability and enable cross-organizational comparisons. Open-source initiative for better data collection and analysis in password security research.
Intel-Driven Adversary Simulation for A Holistic Approach to Cybersecurity
Explore intelligence-driven adversary simulation for comprehensive cybersecurity risk management. Learn to integrate threat intelligence, best practices, and cross-functional teams to enhance organizational security posture.
Getting Serious: (Un)-Resilience of Lifeline Critical Infrastructure
Explore critical infrastructure vulnerabilities and resilience strategies. Learn about urgent challenges in food, water, healthcare, and energy sectors, with a focus on actionable plans for 2027 and beyond.
Spear-Phishing at Scale Using Generative AI - EHLO World
Explore how Generative AI enhances email-based attacks, enabling sophisticated phishing campaigns at scale. Learn about real-world examples and future implications for cybersecurity.
Zero Downtime Credential Rotation - Strategies and Benefits
Learn strategies for safe credential rotation in complex systems without downtime. Explore design techniques to enhance system security and resilience while minimizing disruptions.
Using Generative AI and Databricks Workloads to Manage Sensitive Data
Explore solutions for managing sensitive data using Databricks' Unity Catalog. Learn how to leverage AI and organizational capabilities to protect data throughout its lifecycle while enabling processing and operational use.
Generative AI and Advanced Machine Learning in Telecommunications
Exploring Generative AI and ML's impact on telecom: network optimization, customer service enhancement, and operational efficiency, with case studies and future trends.
AI-Powered EDR: Streamlining Blackberry Cybersecurity with Databricks
Discover how Databricks optimized Blackberry's EDR system, improving incident detection speed, reducing query latency by 20%, and cutting costs by 30% while enhancing data management and cybersecurity capabilities.