The Achilles Heel of the macOS Gatekeeper
Explore macOS Gatekeeper's vulnerabilities, recent bypasses, and a novel 0day. Learn about detection heuristics for enhanced system security on Apple devices.
Historias de 0days, Disclosing y Otras Yerbas
Experiencias y anécdotas sobre descubrimiento de vulnerabilidades, divulgación responsable y aspectos éticos en la seguridad informática.
Token Kidnapping's Revenge
Explore advanced Windows privilege escalation techniques and token manipulation vulnerabilities with security expert Cesar Cerrudo in this in-depth conference presentation.
Understanding the Low Fragmentation Heap
Explore the intricacies of the Low Fragmentation Heap with security expert Chris Valasek, gaining insights into its structure, functionality, and potential vulnerabilities.
Padding Oracles Everywhere
Explore padding oracle attacks in cryptography, their widespread impact, and practical exploitation techniques in various systems and protocols.
WPA Migration Mode - WEP is Back to Haunt You
Explore WPA Migration Mode vulnerabilities and how WEP weaknesses resurface, compromising network security. Learn about potential risks and mitigation strategies.
Understanding the Win SMB NTLM Weak Nonce Vulnerability
Explore the Win SMB NTLM weak nonce vulnerability, its implications, and potential exploits in this technical deep dive from security experts Ochoa and Azubel.
SAP Backdoors - A Ghost at the Heart of Your Business
Explore SAP system vulnerabilities and potential backdoors, uncovering hidden threats to business operations and data security in enterprise environments.
Jackpotting Automated Teller Machines
Explore ATM security vulnerabilities and hacking techniques demonstrated by renowned security researcher Barnaby Jack at Ekoparty 2010, including the infamous "Jackpotting" exploit.
Transferring Files on Isolated Remote Desktop Environments
Explore techniques for transferring files in isolated remote desktop environments, enhancing security and efficiency in restricted network setups.
Exploiting Digital Cameras
Explore vulnerabilities in digital cameras and potential exploitation techniques, focusing on security implications for modern imaging devices.
Hanging on a ROPe
Explore advanced Return-Oriented Programming (ROP) techniques for exploiting vulnerabilities in software systems, presented by security expert Pablo Sole at Ekoparty 2010.
It Takes a Village to Get Security Right - Building Collaborative IAM Solutions
Explore trends in Identity and Access Management, including multi-factor authentication and perimeter-less security. Learn about specialized IAM solutions and industry efforts for interoperability among vendors.
Hacking JavaScript Desktop Apps with XSS and RCE
Explore techniques for auditing Electron apps, understanding XSS in desktop environments, and exploiting vulnerabilities to achieve remote code execution in JavaScript-based applications.
Mr. Lord Goes to Washington, or Applying Security Outside the Tech World
Insights on applying enterprise security practices to political organizations, addressing phishing, best practices implementation, and disinformation campaigns. Valuable for SMBs and tech product developers.
In Curation We Trust - Generating Contextual and Actionable Threat Intelligence
Optimizing threat intelligence with MISP: Learn to curate, contextualize, and automate TI feeds for actionable insights, reducing false positives and enhancing SOC, IR, and malware analysis collaboration.
Understanding the Discipline to Optimize Cyber Defense Collaboration
Explore the Cyber Threat Intelligence Analyst role, its competencies, and how it intersects with other cybersecurity disciplines to enhance collaboration and organizational security posture.
The Story Continues - Hacking Some More Secure Portable Storage Devices
Exposé sur les failles de sécurité des dispositifs de stockage portables "sécurisés" avec chiffrement matériel AES, démontrant leur vulnérabilité malgré les promesses des fabricants.
INCONTROLLER - New Malware Developed to Target Industrial Control Systems
Analysis of INCONTROLLER: a rare and dangerous state-sponsored malware targeting industrial control systems, with focus on its components, attack scenarios, and implications for cybersecurity professionals.
LOLDocs - Sideloading in Signed Office Files
Exploring innovative phishing techniques using code side-loading in signed Office documents, focusing on vulnerabilities in Microsoft-signed add-ins and their potential exploitation for malicious purposes.
I Am Become Loadbalancer, Owner of Your Network
Explore load balancer vulnerabilities, architecture, and post-breach tactics. Learn about high-profile exploits, device deployment, and how to navigate these critical network components for both offensive and defensive purposes.