Adaptive Adversaries
Explore the evolution of cyber threats and defense strategies, focusing on adaptive adversary techniques and the future of cybersecurity. Learn to build more effective defenses against sophisticated attacks.
Defeating EDRs Using Dynamic Invocation in C#
Explore advanced techniques for bypassing Endpoint Detection and Response systems using Dynamic Invocation in C#, enhancing your understanding of cybersecurity vulnerabilities and defenses.
A Critical Assessment of Supply Chain Intrusion Vectors
Critical analysis of supply chain attacks, distinguishing between modification and third-party compromise. Explores functionality, execution, and defensive measures, providing insights for risk assessment and mitigation strategies.
The Risk of CI - CD Pipeline Poisoning via CodeBuild
Explore CI/CD pipeline vulnerabilities in AWS services, focusing on CodeBuild abuse. Learn how small decisions can compromise security, bypass controls, and potentially lead to pipeline poisoning.
Visibility Beyond Perimeters - Detecting C2 at Time of Execution
Innovative network-based threat detection technique providing real-time alerting without endpoint software. Leverages internet infrastructure to detect malicious activity across organizational boundaries, augmenting existing EDR solutions.
PIC Your Malware
Explore advanced techniques for building and hiding custom malware, including position independent code and automated payload generation, to evade detection by security products and analysts.
Hacktivism During a Global Pandemic
Explore hacktivism's evolution from website attacks to shaping policies and protecting hospitals during crises. Discover the impact of idealistic tech enthusiasts in addressing global challenges.
Black Ops of TCP/IP 2011
Explore advanced TCP/IP techniques and vulnerabilities with renowned security expert Dan Kaminsky in this thought-provoking keynote address from BruCON 0x03.
Incident Response in the Cloud - Foggy with a Ray of Sunshine
Explore challenges and solutions for incident response in cloud environments, focusing on logging options, visibility issues, and automated response techniques for improved security operations.
Atomic Threat Coverage - Being Threat Centric
Atomic Threat Coverage framework: Automatically generate actionable analytics to combat threats based on MITRE ATT&CK model, unifying detection, response, mitigation, and simulation for efficient security operations.
Weaknesses in WPA3's Dragonfly Handshake
Uncovers critical vulnerabilities in WPA3's Dragonfly handshake, demonstrating password partitioning attacks and discussing practical implications for Wi-Fi security. Explores countermeasures and assesses WPA3's effectiveness as a modern security protoco…
Defeating Bluetooth Low Energy 5 PRNG for Fun and Jamming
Uncover vulnerabilities in Bluetooth Low Energy 5's PRNG, enabling sniffing and jamming of BLE 5 connections. Learn to exploit weaknesses and use updated tools for IoT security testing.
Automated Adversary Emulation Using Caldera
Explore automated adversary emulation with MITRE Caldera 2.0, focusing on extending its capabilities, improving reporting, and overcoming security controls for enhanced ATT&CK coverage and adoption.
Catching WMI Lateral Movement in an Enterprise Network
Detecting WMI lateral movement in enterprise networks: overview, challenges, and custom IDS fingerprints for improved security. Practical insights for SOC analysts to enhance threat detection capabilities.
Human Side-Channels and Their Implications for Security and Privacy
Exploring non-physical human identifiers in digital security: forensic linguistics, behavioral signatures, and cultural references. Implications for tracking threat actors and privacy protection.
IoT RCE, a Study With Disney
Exploring IoT vulnerabilities using Disney Circle and Foscam devices as case studies, highlighting novel attack techniques and discussing the security implications of IoT in home networks.
Outside the Box - Breakouts and Privilege Escalation in Container Environments
Explore real-world container escapes and privilege escalation techniques in popular solutions like Docker and Kubernetes. Learn methodologies for assessing containerized environments and implementing secure configurations.
Crypto Crumple Zones - Protecting Encryption in a Time of Political Uncertainty
Exploring technical solutions for balancing encryption and government access, proposing "crypto crumple zones" to maximize privacy while allowing limited exceptional access in politically uncertain times.
Cryptographically Secure Data Analysis for Social Good
Secure multi-party computation enables analysis of sensitive salary data to calculate pay disparities while maintaining confidentiality, demonstrating potential for social impact in privacy-constrained contexts.
When Malware is Packin' Heat
Exploring packing in malware and benign applications, its impact on anti-virus systems, and the challenges in distinguishing between packed malicious and legitimate software.
Going Nuclear - Programmatic Protections against Extreme Vetting, Social Pressures, and Coercion
Explore programmatic options for protecting sensitive data against forced access, including a "nuclear" option to revoke access and wipe data when under threat.