Infrared - Old Threat Meets New Devices
Exploring infrared technology's resurgence in smart devices, examining potential security vulnerabilities, and demonstrating innovative attack vectors using IR transmitters and receivers.
Taking Over Telecom Networks
Explore telecom network vulnerabilities, attack vectors, and security best practices in this comprehensive overview of mobile infrastructure risks.
Auditable & Provable Privacy of Smart Speakers
Explore smart speaker privacy vulnerabilities, including skill squatting and eavesdropping, and learn about potential solutions like hardware mic disconnects and user awareness.
Hacking Chemical Plants for Competition and Extortion
Explore cyber-physical attacks on industrial systems, from initial espionage to targeted economic damage. Learn attacker strategies, defense opportunities, and the complexities of manipulating chemical processes.
Dreamboot - A UEFI Bootkit
Exploración detallada de la arquitectura UEFI y desarrollo de un bootkit para Windows 8 x64, analizando riesgos de seguridad y demostrando payloads maliciosos como escalada de privilegios y bypass de autenticación.
Swiping Through Modern Security Features
Exploring iOS 6 security features and jailbreak techniques, including kernel ASLR, code signing, and exploit methods. Insights from expert developers on bypassing modern mobile security protections.
Aircraft Hacking - Practical Aero Series
Practical demonstration on remotely attacking and controlling aircraft systems, exploring vulnerabilities in aviation security through hacking techniques and protocols like ADS-B and ACARS.
Analysis to Remote Root 0day in a SSL-VPN Appliance
Análisis detallado de vulnerabilidades en un dispositivo SSL-VPN líder, revelando fallas de seguridad y demostrando la explotación para obtener acceso root remoto no autenticado.
LTE Pwnage - Hacking Core Network Elements
Explore LTE network vulnerabilities, legacy protocols, and security challenges in telecom core elements. Learn about DoS attacks, equipment vulnerabilities, and practical approaches to telecom product security lifecycle.
Page Fault Liberation Army
Explore x86 processor memory translation logic and MMU as a Turing-complete processor. Learn about innovative security approaches and computational possibilities in virtual memory systems.
SSRF PWNs - New Techniques and Stories
Découvrez de nouvelles techniques d'attaques SSRF, leurs impacts sur la sécurité des applications web et des exemples concrets d'exploitation, présentés par deux experts en sécurité informatique.
Embracing the Uncertainty of Attacks with Big Data Analytics
Exploring big data analytics to combat advanced cyber threats, reduce uncertainty, and transform security programs through intelligence-driven detection approaches and innovative strategies.
Behind Enemy Lines
Mikko Hypponen explores the evolving online threat landscape, categorizing attackers into criminals, hacktivists, and nation-states. He analyzes their motives, methods, and future trends in cybersecurity.
Study of Malware Obfuscation Techniques
Comprehensive analysis of malware obfuscation techniques, cataloging evasion methods used by malware authors and presenting findings from a study of 4 million samples to improve security tools and processes.
A Short History of the JavaScript Security Arsenal
Explore the evolution of JavaScript security tools and techniques over six years, from basic port scanners to advanced frameworks, with insights from expert Petko D. Petkov.
Hacking in the Far East
Explore security challenges and hacking techniques in Japan, South Korea, and Hong Kong. Gain insights into corporate policies, smart cards, social engineering, and unique cultural aspects affecting cybersecurity in East Asia.
OPSEC - Because Jail is for wuftpd
Practical operational security measures for hacktivists to maintain online anonymity and avoid detection by law enforcement, drawing from real-world cases and counter-intelligence techniques.
Harmony In Motion
Exploring the challenges of seamless user experience in the metaverse, focusing on IoT integration, connectivity, and security in a fully connected, intelligent world.
Trustworthy Shield – A Cheap TPM Module for Older Systems
Explore a cost-effective TPM module for older systems, enhancing security without hardware changes. Learn about trusted computing technology and its applications in IoT and embedded systems.
Growing Network Security Specialists for Our Enterprise
Explore enterprise network security strategies, including bug bounty platforms, vulnerability detection, and building expert security teams. Learn from industry leader Xinhua Cai's insights on fostering innovation and collaboration.
Copy-Paste Vulnerabilities
Explores copy-paste vulnerabilities in software development, their impact, detection challenges, and mitigation strategies. Includes case studies and recommendations for prevention.