See Something, Say Something? - The State of Coordinated Vulnerability Disclosure in Canada’s Federal Government
Exploring coordinated vulnerability disclosure in Canada's federal government, highlighting gaps and recommending policy frameworks to enhance cybersecurity and protect security researchers.
Critical Vulnerabilities in Network Equipment - Past, Present, and Future
Explore critical vulnerabilities in network equipment, from routers to firewalls. Learn about common patterns, historical context, and future trends in cybersecurity for these essential devices.
Social Bots - Malicious Use of Social Media
Analyse de l'utilisation malveillante des médias sociaux pendant l'élection fédérale canadienne de 2019, examinant le rôle des bots sociaux dans la manipulation du discours politique et la désinformation.
Privacy Without Monopoly - Beyond Feudal Security
Exploring the tension between privacy and monopoly in tech, advocating for interoperability as a solution to enhance security without compromising user rights or enabling corporate dominance.
Damn GraphQL - Attacking and Defending APIs
Explore GraphQL security: attack vectors, defense strategies, and hands-on learning with the Damn Vulnerable GraphQL Application. Gain insights into protecting this emerging API technology.
Repo Jacking - How Github Usernames Expose Projects to RCE
Explore 'repo jacking', a widespread supply chain vulnerability affecting 70,000+ open-source projects. Learn its causes, exploitation methods, and mitigation strategies to protect your GitHub-dependent projects.
How Crypto Gets Broken - by You
Explore cryptography fundamentals, encryption methods, and attack techniques in this comprehensive workshop. Learn about hashing, ciphers, and practical approaches to breaking crypto systems.
Regions Are Types, Types Are Policy, and Other Ramblings
Explore innovative software hardening using typed region-based policies. Learn how to apply this approach to protect against vulnerabilities and enhance system security beyond traditional compiler techniques.
IOMMU and DMA Attacks
Exploring IOMMU and DMA attacks, focusing on security implications, operating system integration, and techniques to bypass protections, particularly on macOS up to version 10.12.4.
High Speed Fingerprint Cloning - Myth or Reality
Explore the impact of 3D printing on fingerprint cloning and its security implications for devices. Learn about real-world attack scenarios and the level of sophistication needed to bypass biometric authentication.
Stay Quantum Safe - Future-Proofing Encrypted Secrets
Explore quantum-safe cryptography's progress, standardization, and implementation in TLS, SSH, and VPN. Learn to future-proof encrypted data against potential quantum computer decryption.
The Long Journey to a Multi-Architecture Disassembler
Explore multi-architecture disassembly techniques, from intuitive strategies to advanced concepts like non-returning calls, type libraries, and identifying library routines.
Password Surveys Are Shit
Explore the flaws in password surveys and their impact on security practices. Learn about better approaches to assess and improve password policies.
Beyond Logs and Time Series - Observability for Security & Privacy
Explore advanced observability techniques for enhanced security and privacy, moving beyond traditional logs and time series data to improve threat detection and investigation.
Target Rich Cyber Poor
Explore cyber hygiene services, software bill of materials, and sector-specific advice for resource-constrained organizations. Learn about challenges and solutions in cybersecurity for critical infrastructure.
Penetration Testing Experience and How to Get It
Discover strategies for gaining and showcasing penetration testing experience, overcoming imposter syndrome, and navigating HR in the cybersecurity field.
Code Dependency - Chinese APTs in Software Supply Chain Attacks
Explore Chinese APTs' tactics in software supply chain attacks, examining notable incidents, code breakdowns, and open-source vulnerabilities to understand and mitigate these sophisticated threats.
Breaking the Giants With Logic
Explore logic-based vulnerabilities in major platforms, focusing on duplicates and business logic flaws. Learn techniques to identify and exploit these weaknesses through real-world case studies.
Do You Understand the Words That Are Coming Out of My Mouth
Explore effective communication strategies in cybersecurity, addressing business impacts, vulnerabilities, and solutions for various threats including phishing, insider risks, and ransomware attacks.
All Software is Open Source - An Introduction to Reverse Engineering
Explore reverse engineering fundamentals, tools, and strategies for information security. Learn legal aspects, safe practices, and real-world applications through war stories and CTF challenges.
A Serverless SIEM - Detecting All Baddies
Explore a serverless SIEM for efficient threat detection, covering log ingestion, analysis, notifications, and automations in cloud-native environments.