What Do Hackers See When They Look at the Clouds
Explore cloud security vulnerabilities, historical incidents, and protective measures. Learn to identify abandoned subdomains and bypass firewalls in this eye-opening talk on hacker perspectives.
Why Security-as-a-Feature Will Never Happen
Explore why secure coding remains elusive, examining cultural issues, industry challenges, and potential solutions for integrating security into software development practices.
DeepFake Cyber Security Threats and Opportunities
Explore deepfake technology's impact on cybersecurity, covering threats like fraud and fake content, as well as opportunities in biometrics and network traffic analysis.
Playbook on How to Be the First Security Engineer at a Company
Learn strategies for being a pioneering security engineer, covering impact, documentation, data storage, education, automation, and corporate security initiatives.
CAN Bus Basics With Hands On Fuzzing
Explore CAN bus fundamentals and hands-on fuzzing techniques for automotive systems, covering ECUs, attack surfaces, and practical demonstrations using various tools and setups.
Dial V for Vulnerable - Attacking VoIP Phones
Explore VoIP phone vulnerabilities, attack methods, and security recommendations. Learn firmware access, emulation approaches, and exploit development for various VoIP devices.
BYOI Payloads - Fusing the Power of .NET With a Scripting Language of Your Choosing
Explore .NET assembly generation, embedding scripting languages, and advanced techniques for creating versatile payloads in this cybersecurity-focused talk on BYOI (Bring Your Own Interpreter).
Throw Open The Gates - Trading Control For Visibility
Explore innovative approaches to enterprise security, focusing on visibility over control, with insights from Heroku's security transformation and practical lessons for implementation.
BaRMIe - Poking Java’s Back Door
Explore Java's Remote Method Invocation security vulnerabilities, enumeration techniques, and exploitation tools with BaRMIe. Learn about common mistakes and potential solutions in RMI implementations.
Cisco ASA Episode 2 - Striking Back - Internals and Mitigations
Explore Cisco ASA internals, reverse engineering techniques, and custom tools for exploit development. Gain insights into vulnerability analysis and mitigation strategies for network security professionals.
Red Team Revenge - Attacking Microsoft ATA
Explore techniques for attacking Microsoft Advanced Threat Analytics, including alert suppression, identity exemption, and remote control. Learn about ATA's vulnerabilities and defensive strategies.
Cracking HiTag2 Crypto - Weaponising Academic Attacks for Breaking and Entering
Explore HiTag2 RFID encryption vulnerabilities and learn to implement attacks for cloning secure building access tags, based on academic research and practical demonstrations.
Secrets Of The Motherboard - Shit My Chipset Says
Explore motherboard intricacies, security features, and hidden functionalities. Uncover potential exploits, design pitfalls, and challenges in hardware security through chipset analysis and datasheet discoveries.
Penetration Testing Considered Harmful
Critique of penetration testing practices, exploring limitations, misconceptions, and potential harm in cybersecurity. Proposes alternative approaches and challenges industry norms.
USB Flash Drive Forensics
Explore USB flash drive forensics, covering hardware, software, file systems, and forensic techniques. Learn about write blockers, Windows registry analysis, and open-source tools for digital investigations.
Systems Applications Proxy Pwnage
Explore SAP system vulnerabilities, compression algorithms, and attack techniques. Learn about authentication bypass, validation issues, and practical demonstrations for enhanced security awareness.
I Am Become Loadbalancer, Owner of Your Network
Explore load balancer architecture, deployment, and post-breach access. Learn to navigate systems, avoid detection, and exploit configurations across various platforms for enhanced network control.
The Risks of RDP and How to Mitigate Them
Explore RDP security risks, attacks, and mitigation strategies. Learn to deploy secure RDP servers and detect potential threats in Windows remote environments.
Authentication Challenges in SaaS Integration and Cloud Transformation
Explore authentication challenges in SaaS integration and cloud transformation, focusing on security pitfalls, unmanaged cloud identities, and the importance of cloud-based Identity Provider solutions.
Unmasking the Chameleons of the Criminal Underground
Unmasking cybercriminals' sophisticated techniques for account takeover attacks, focusing on machine fingerprint markets, their impact on Canadians, and strategies for protection against this growing threat.
Bypassing Advanced Device Profiling with DHCP Packet Manipulation
Explore advanced device profiling bypass techniques using DHCP packet manipulation for Network Access Control systems. Learn about implementation, mechanics, and risk mitigation strategies.