Ghost DMA Attack & The SeDeFuS Conundrum
Explore Ghost DMA attacks, their mechanisms, and mitigations. Learn about the SeDeFuS conundrum and its implications for system security in this technical presentation.
Latest Threats and Vulnerabilities to Mission-Critical SAP Applications
Explore latest threats to mission-critical SAP applications, including cloud vulnerabilities, attack lifecycles, and remediation strategies. Gain insights from research labs and real-world examples.
You Don't Have to Be Crazy to Work Here - An Honest Talk About Mental Health
Honest discussion on mental health in cybersecurity, exploring challenges, personal experiences, and effective self-care strategies for professionals in the field.
Your Critical System Is - Not? - Vulnerable - CSAF, VEX, SBOM and the Future of Advisories
Explore the future of vulnerability advisories with CSAF, VEX, and SBOM. Learn about critical system security, risk assessment, and automation in the evolving landscape of cybersecurity.
Revenge on the Worms! Towards Deception Against Automated Adversaries
Explore deception strategies against automated adversaries, focusing on finite state machines, multiple plans, and automated planners. Learn test setups, results, and future implications.
Search Engine Deoptimization with Gootloader
Explore search engine deoptimization techniques used by Gootloader malware, including compromised WordPress sites, malicious SEO, and process hollowing. Learn about server infrastructure and potential countermeasures.
AI and Machine Learning Implications
Explore AI and machine learning's rapid progress, corporate deployment challenges, public concerns, and the balance between competitive advantages and risk management in this insightful talk.
Privacy in a World of Exponential Data
Explore the evolution of payment systems, privacy challenges in digital transactions, and the future of mobile payments with insights from MobileCoin's co-founder.
Why Does Strategic Threat Intelligence Matter?
Explore the importance of strategic threat intelligence, covering key concepts like CTI, Pyramid of Pain, and influence operations in cybersecurity and market expansion.
Ethical Internet Scanning in 2022
Explore ethical approaches to internet-wide scanning, including best practices, vulnerability assessment, and measuring risk exposure in the digital landscape.
Generating MITRE ATT&CK DNA for Groups of Actors
Explore techniques for generating MITRE ATT&CK DNA profiles of threat actor groups, analyzing similarities, and addressing challenges in attribution and emulation.
Piercing the Veil - Server Side Request Forgery Attacks on Internal Networks
Explore esoteric SSRF entry points, internal service vulnerabilities, and mitigation strategies in ethical hacking and bug bounty programs.
Defeating APT10 Compiler-level Obfuscations
Explore techniques to overcome compiler-level obfuscations used by APT10, enhancing your ability to analyze and defend against advanced persistent threats.
DeTT&CT - Mapping Your Blue Team to MITRE ATT&CK
Explore MITRE ATT&CK framework for blue team mapping, focusing on attack techniques, gap analysis, and event query language to enhance cybersecurity defenses.
What The Log - So Many Events, So Little Time
Explore efficient event logging strategies and tools for enhanced cybersecurity, including Microsoft Security Compliance Toolkit, EventList, and Sigma.
Kill MD5 - Demystifying Hash Collisions
Demystify hash collisions and explore the vulnerabilities of MD5 in this engaging talk. Learn about identical prefixes and gain insights into cryptographic security.
Say Cheese - How I Ransomwared Your DSLR Camera
Explore DSLR camera vulnerabilities and ransomware techniques in this cybersecurity talk, covering PTP protocols, firmware updates, and responsible disclosure practices.
ReconPi
Explore ReconPi, a tool for efficient reconnaissance in cybersecurity, with insights on its inspiration, functionality, and practical applications.
Modern Pentest Tricks for Faster, Wider, Greater Engagements
Discover cutting-edge pentest techniques for efficient and comprehensive engagements, focusing on CSV tools, parallel execution, and innovative applications.
Take Your Path Normalization Off and Pop 0days Out
Explore path normalization vulnerabilities in web frameworks, including real-world examples and case studies of critical security flaws leading to remote code execution and access control bypass.
Finding the Best TI Provider for a Specific Purpose
Explore methodologies for evaluating and selecting the most suitable Threat Intelligence provider, focusing on comparison metrics, data analysis, and key takeaways for various cybersecurity roles.