Bypassing Malware Analysis Sandboxes Is Easy - Let’s Discuss How They Are Doing It and Why It Works
Explore techniques used by malware to evade analysis sandboxes, comparing various sandbox solutions and their effectiveness in detecting and analyzing different types of malware.
Assessing the Embedded Devices On Your Network
Explore embedded device security challenges, threat modeling, and assessment techniques through a VoIP phone case study. Learn hardware tricks, debugging methods, and potential mitigations for vulnerabilities.
When Bandit Strikes - Defend Your Python Code
Discover and defend against common security flaws in Python code using Bandit. Learn customization, CI pipeline integration, and extension techniques for enhanced code security.
A Year in the Wild - Fighting Malware at the Corporate Level
Explore Yelp's automated malware defense system, featuring in-house tools like AIR and OSXCollector, complemented by open-source solutions for swift threat detection and response in corporate networks.
Sweet Security - Deploying a Defensive Raspberry Pi
Explore open-source tools and inexpensive hardware like Raspberry Pi to monitor, protect, and mitigate threats in IoT environments, addressing security challenges of outdated devices.
Fraud Detection and Real-time Trust Decisions
Explore fraud detection techniques in online commerce, from traditional attacks to real-time marketplace challenges. Learn about combating fraud and its parallels with network security.
Elliptic Curve Cryptography for Those Who Are Afraid of Math
Demystifying Elliptic Curve Cryptography: Learn the basics, understand its applications, and grasp the importance of ECC expertise without delving into complex mathematics.
Digital Intel Gathering - OSINT for Blue - Red Teams
Explore OSINT techniques for cybersecurity, leveraging social media and public records to enhance threat intelligence and defensive strategies.
Using Behavior to Protect Cloud Servers
Explore behavior-based analytics for cloud server security, focusing on dynamic privilege management to identify and prevent insider threats and privilege escalation attacks in real-time.
Creating Data-Driven Threat Intelligence Signals in a Zero Trust Environment
Explore dynamic, data-driven threat intelligence signals for "Zero Trust" environments, reshaping security approaches for modern network architectures.
The Red Square - Mapping the Connections Inside Russia’s APT Ecosystem
Explore Russian APT ecosystem analysis, learn about open-source tools for investigating cyber attacks, and gain insights into the connections within this complex landscape.
So You’re the First Security Hire - Creating a Security Program and Integrating Security into Your Company’s Culture
Guidance for pioneering security professionals on establishing a robust security program, integrating it into company culture, and balancing protection with business needs.
Operation PZCHAO - Dissecting a Cyber-Attack
Explore a sophisticated cyber-attack targeting Asian institutions, dissecting its modules, capabilities, and impact on victims' data in this in-depth analysis of Operation PZCHAO.
Owning the Smart Home with Logitech Harmony Hub
Explore reverse engineering of Logitech's Harmony smart home hub, uncovering vulnerabilities and discussing their implications for device security and potential exploitation.
DNS Attacks - Past, Present, and Future
Explore DNS vulnerabilities, their historical impact, and potential future threats in this comprehensive overview of attack techniques and pentesting applications.
Breaking VSM by Attacking SecureKernel
Explore vulnerabilities in Windows 10's SecureKernel, potentially compromising Virtualization-Based Security. Learn exploitation techniques and the process of finding and fixing critical security flaws.
Practical Defenses Against Adversarial Machine Learning
Explore real-world attacks on ML systems, from recommendation engines to email filters, and learn practical defense strategies against adversarial machine learning threats.
Detecting Access Token Manipulation
Demystifying Windows access token manipulation attacks and providing effective detection strategies for defensive practitioners in enterprise environments.
Finding New Bluetooth Low Energy Exploits via Reverse Engineering Multiple Vendors' Firmwares
Explore Bluetooth Low Energy vulnerabilities through firmware reverse engineering, uncovering remote code execution exploits at the protocol's lowest levels without authentication or pairing.
Election Security - Securing America's Future
Explore the US government's efforts to secure elections, including intelligence sharing, cybersecurity services, and collaboration with state and local officials to protect against malicious activities.
EdTech - The Ultimate APT
Explore the privacy and security risks of educational technology implementation in schools, highlighting concerns and potential actions for improvement.