Dive into Apple IO80211FamilyV2
Explore Apple's IO80211FamilyV2 Wi-Fi architecture, its features, and potential vulnerabilities. Learn about reverse engineering, attack surfaces, and the latest security concerns in macOS Catalina.
Reversing the Root - Identifying the Exploited Vulnerability in 0-Days Used In-The-Wild
Explore techniques for identifying root cause vulnerabilities in exploited 0-days, including binary patch diffing, exploit minimization, and reverse engineering, to enhance cybersecurity analysis and threat mitigation.
Experimenting with Real-Time Event Feeds
Explore innovative approaches to real-time event feeds in cybersecurity, challenging traditional SIEM methods and addressing high-volume data management for improved threat detection.
Fooling Windows Through Superfetch
Explore Windows Superfetch service's privacy implications, forensic potential, and methods to manipulate its predictive behavior for enhanced system security and user privacy.
Hacking the Voter - Lessons from a Decade of Russian Military Operations
Explore Russian military's decade-long election interference strategies, examining GRU tactics and the role of information in shaping international relations and outmaneuvering tactical defenses.
Superman Powered by Kryptonite - Turn the Adversarial Attack into Your Defense Weapon
Explore how AI-powered attacks on security mechanisms can be turned into defensive strategies, focusing on adversarial examples and innovative countermeasures in cybersecurity.
Kr00k - Serious Vulnerability Affected Encryption of Billion+ Wi-Fi Devices
Explore the Kr00k vulnerability affecting Wi-Fi encryption on billions of devices. Learn about its impact, technical details, and see a live demonstration of exploiting this security flaw in popular Wi-Fi chips.
A Little Less Speculation, a Little More Action - A Deep Dive into Fuchsia's Mitigations for Specific CPU Side-Channel Attacks
Explore Fuchsia's approach to mitigating CPU side-channel attacks, including enumeration, implementation, and testing of protective measures across x86 and ARM processors.
Exploiting Kernel Races through Taming Thread Interleaving
Explore advanced techniques for exploiting kernel race conditions by manipulating thread interleaving, overcoming limitations of conventional brute-force methods and addressing challenging vulnerabilities.
The Next Gen PlugX - ShadowPad - A Dive into the Emerging China-Nexus Modular Trojan, Pangolin8RAT
Explore the emerging Pangolin8RAT trojan, its potential as a successor to PlugX and ShadowPad in Chinese cyber operations, and its attack timeline from 2020 to 2021.
From Coordinated Disclosure to Cooperative Vulnerability Research When Dealing with Critical Software Stacks
Explore evolving approaches to vulnerability disclosure in critical software, emphasizing early cooperation between researchers and vendors for improved security outcomes.
A Universal Way to Exploit Android PendingIntents in High-profile and System Apps
Explore Android PendingIntent vulnerabilities in high-profile apps, learn exploitation techniques, and discover security implications for developers and system integrity.
The Black Hat Europe NOC Report
Explore the evolution of Black Hat's Network Operations Center, adapting to virtual events while maintaining security. Learn about infrastructure, tools, and challenges in managing a notorious network.
Building Better CSIRTs Using Behavioral Psychology
Explore behavioral psychology insights to improve CSIRT effectiveness, addressing team dynamics, communication, and collaboration challenges for enhanced incident response.
Message in a Broken Bottle - Exploring the Linux IPC Attack Surface
Explore Linux's IPC attack surface, focusing on systemd and dbus-daemon. Discover vulnerabilities in system services and learn about potential security risks in Linux's userspace processes.
How We Can Power Real Security Machine Learning Progress Through Open Algorithms and Benchmarks
Explore the need for transparency in security machine learning, discussing challenges, benefits, and strategies for fostering openness to drive real progress in the field.
Exploiting CSP in WebKit to Break Authentication and Authorization
Uncover a critical WebKit vulnerability that compromises authentication and authorization in web applications, exposing weaknesses in browser security features and their implementation.
Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
Explore new Active Directory protocol injection attacks, focusing on NTLM and Kerberos vulnerabilities. Learn about attack scenarios, mitigation strategies, and essential tips for defenders.
A Deep Dive into Privacy Dashboard of Top Android Vendors
Uncovers flaws in Android vendors' privacy dashboards, revealing how malicious apps can bypass monitoring and benign apps trigger false alarms. Explores implementation differences across top vendors.
ChaosDB - How We Hacked Databases of Thousands of Azure Customers
Uncover the critical ChaosDB vulnerability in Azure Cosmos DB, allowing unauthorized access to thousands of customer databases. Learn about the discovery, exploitation, and implications of this unprecedented cloud security flaw.
Picking Lockfiles - Attacking & Defending Your Supply Chain
Explore supply chain vulnerabilities in open source software, focusing on lockfile attacks. Learn offensive and defensive techniques to enhance project security.