A New RISC
Exploring RISC-V: A new open-source processor architecture, its security attributes, potential vulnerabilities, and impact on computing platforms. Includes demonstrations of attacks and discussions on privilege models and future implications.
Low Cost Open Source Spectrum Monitoring
Explore low-cost open-source spectrum monitoring techniques using SDR platforms to detect unauthorized RF devices and secure wireless infrastructure. Learn about tools for analyzing and profiling signals in real-time.
Exploiting Windows Automatic Wireless Association
Exploiting Windows automatic wireless association with "Lure10" technique. Demonstrates man-in-the-middle attack using Wifiphisher tool. Discusses WiFi security, countermeasures, and protection strategies across operating systems.
Breaking Apple's iCloud Keychain
Discover techniques for accessing and analyzing data stored in Apple's iCloud, including synced information, backups, and keychain contents. Learn about vulnerabilities in two-factor authentication.
Fault Injection Attacks on Secure Boot
Exploring fault injection attacks on secure boot, this talk introduces techniques, impacts, and practical mitigation strategies for embedded systems security, with real-world examples and key takeaways.
iOS 10 Kernel Heap Revisited
Detailed exploration of iOS 10 kernel heap implementation, discussing Apple's counter-measures against exploitation techniques and potential attacker adaptations in iOS 9 and 10 beta versions.
Reverse Engineering Swift Applications
Exploring Swift app reverse engineering: class info extraction, Objective-C bridging, runtime manipulation, and function hooking for security professionals and pentesters.
Data Driven Software Security
Explore Microsoft's data-driven approach to software security, including new mitigation techniques in Windows 10 and analysis of real-world exploits to enhance protection against vulnerabilities.
Cache Side Channel Attacks - CPU Design As A Security Problem
Explore CPU cache vulnerabilities and side-channel attacks, their impact on security, and potential mitigations in modern computing environments like cloud and multi-user systems.
Forging a Wireless Time Signal to Attack NTP Servers
Forging wireless time signals to disrupt NTP servers and consumer devices. Explores vulnerabilities in radio timing services and demonstrates low-cost methods to spoof GPS, WWVB, and other signals used for time synchronization.
Adaptive Android Kernel Live Patching
Adaptive Android kernel live patching framework for securing devices against vulnerabilities, enabling hotpatching without source code access and automatic adjustment to different models and versions.
Using the Observer Effect and Cyber Feng Shui - Jacob Torrey
Explore techniques for detecting system monitoring and creating secure environments. Learn about architectural "tells", physical unclonable functions, and strategies for evading analysis in computer systems.
CSP Oddities
Explore Content Security Policy intricacies, common pitfalls, and innovative solutions. Learn to deploy effective CSP policies and discover potential vulnerabilities in web application security.
Kernel Exploit Hunting and Mitigation
Explore kernel exploit hunting and mitigation techniques, focusing on identifying and analyzing malware that leverages Windows kernel vulnerabilities for system compromise and evasion of security measures.
Anatomy of an APT Attack
Explore tactics of APT attacks, including state-sponsored hackers and organized crime. Learn about real-world compromises, remediation processes, and the global impact of cybercrime.
Pentesting ChatOps
Explore ChatOps for penetration testing: streamline workflows, automate tasks, and enhance team collaboration using chatbots and custom scripts in a distributed environment.
CyptoAPT - APT Attacks on Crypto Exchange Employees
Overview of recent APT attacks on cryptocurrency exchange employees, from spear phishing to Firefox 0-day exploit and malware stages. Compares perspectives of victim, attacker, and security team.
We Hacked The Planet - Now What?
Explore the evolution of cybersecurity, from hacking to bug bounties, and its impact on policy, workforce, and vulnerability management. Gain insights into future challenges and solutions.
DCART - Decoupled Components for Automated Ransomware Testing
Explore a framework for controlled ransomware testing, focusing on decoupled components for detonation and detection. Learn about design, development, and automated testing methodologies for behavioral ransomware analysis.
Car Hacking - Practical Guide to Automotive Security
Practical guide to automotive security, focusing on CAN bus hacking. Learn to reverse-engineer packets, identify arbitration IDs, perform replay attacks, and explore hardware tools for vehicle network security.
Insight Into TTPs Of A Middle Eastern Threat Actor
Insight into Middle Eastern threat actor MuddyWater's tactics, including spear-phishing, backdoors, and cyber espionage. Explores recent tool evolution, obfuscation techniques, and prevention strategies.