The Faces of MacOS Malware - Detecting Anomalies in a Poisoned Apple
Explore macOS malware detection techniques, built-in utilities exploited by threat actors, and strategies to identify suspicious activity on Apple systems in this comprehensive security analysis.
Contextomy - Let's Debug Together
Explore a critical iOS design flaw allowing remote code execution through debug session hijacking. Learn about the vulnerability's discovery, research, exploitation, and Apple's fix.
A UEFI Firmware Bootkit in the Wild
Explore the inner workings and mysterious history of CosmicStrand, a sophisticated UEFI firmware bootkit that provides deep persistence on select motherboards, evading detection and surviving OS reinstallations.
Bheem OS - A Next-Gen Reasonably Secure OS
Explore Bheem OS, a next-gen secure operating system that isolates apps in MicroVMs, offering enhanced security, usability, and performance. Learn about its architecture, features, and advantages over traditional systems.
Introduction to the OWASP ModSecurity Core Rule Set
Learn about OWASP ModSecurity Core Rule Set, a powerful open-source web application firewall. Discover key features like paranoia levels and anomaly scoring, and see its effectiveness in protecting against various attacks.
Jailbreaking the AppleTV3 - Tales From A Full Stack Hack
Explore the full stack hack of AppleTV3, uncovering vulnerabilities and jailbreaking techniques. Learn tricks for attacking restricted devices and gain insights into iOS security.
Hunting Evasive Vulnerabilities - Finding Flaws That Others Miss
Explore techniques for uncovering elusive web vulnerabilities, from advanced methods to overlooked basics. Learn strategies to enhance your security auditing skills and find flaws others miss.
What is Cyber Threat Intelligence
Discover cyber threat intelligence essentials, including analyst skills, frameworks, daily tasks, and maintaining anonymity. Learn to put intelligence into action for effective cybersecurity.
macOS Security Features Bypasses by Example
Explore macOS security features, vulnerabilities, and bypass techniques with a Microsoft security expert. Gain insights into SIP, TCC, and potential exploit avenues for researchers and professionals.
Retail Store POS Penetration Testing
Explore POS system vulnerabilities, security controls, and network testing techniques for retail environments. Learn effective recommendations to enhance POS security.
An ACE in the Hole - Stealthy Host Persistence via Security Descriptors
Explore stealthy host persistence techniques using security descriptors, focusing on offensive implications, methodologies, and case studies for various Windows objects and services.
CredDefense Toolkit
Explore advanced techniques for defending against credential theft, including password filtering, Kerberos, and Responder Guard, with insights from cybersecurity experts.
Introducing DeepBlueCLI v2 Now Available in PowerShell and Python
Explore DeepBlueCLI v2's enhanced features for Windows malware detection, including PowerShell and Python implementations, regex improvements, and automated whitelisting techniques.
Purpose Driven Hunt - What Do I Do With All This Data
Explore data-driven threat hunting techniques, focusing on hypothesis-driven approaches to enhance cybersecurity efforts and streamline the analysis process.
Fileless Malware - The New Cyber Threat
Explore the evolution, types, and stages of fileless malware attacks, including delivery, execution, and persistence mechanisms, with insights on defense strategies.
VMware Escapology - How to Houdini The Hypervisor
Explore VMware architecture, vulnerabilities, and escape techniques. Learn about backdoors, PCI, HDFS, and Host Open exploits. Includes live demo and Metasploit module discussion.
Subverting Trust in Windows - A Case Study of the How and Why of Engaging in Security Research
Explore Windows security research through a case study on subverting trust, covering dynamic analysis, code signatures, and PowerShell, with insights on validating trust and lessons learned.
Blue Teamin on a Budget of Zero - Kyle Bubp
Learn essential blue team security practices and tools for organizations with limited budgets, covering frameworks, documentation, network mapping, vulnerability scanning, and intrusion detection.
Does DoD Level Security Work in the Real World
Exploring DoD-level security's real-world effectiveness, risk parameters, and building a culture of security through a comprehensive lifecycle approach.
VLAN Hopping, ARP Poisoning, and Man In The Middle Attacks in Virtualized Environments
Explore VLAN hopping, ARP poisoning, and man-in-the-middle attacks in virtual environments. Learn about test scenarios, hardware specs, and mitigation techniques for network security professionals.
A Day in the Life of a Security Analyst
Explore a day in the life of security analysts, covering key aspects like governance, compliance, data access, and security controls implementation.