Hacking Democracy - On Securing an Election
Explore cybersecurity challenges in elections, including disinformation, voting machine vulnerabilities, and election manipulation. Experts discuss threats, solutions, and the role of hackers in building voter trust.
Knowing the Unfuzzed and Finding Bugs with Coverage Analysis
Explore automated coverage analysis for efficient fuzzing, using bncov plugin for Binary Ninja to identify prime fuzz targets and uncover hidden vulnerabilities in software.
Between Two Moose - ShmooCon 2020
Insightful panel discussion featuring cybersecurity experts sharing career journeys, industry perspectives, and contemporary security topics, interspersed with lighthearted games and irreverent humor.
The Cyberlous Mrs. Maisel
A satirical exploration of information warfare, covering Russian tactics like maskirovka and disinformation. Uses humor to raise awareness about technology engagement and cybersecurity challenges in the Information Age.
Face/Off - Action Plan for Perils & Privileges of Facial Recognition
Explore facial recognition technology's widespread use, potential risks, and regulatory concerns. Learn about error rates, privacy issues, and strategies to responsibly implement this technology in various applications.
Extracting an ELF From an ESP32
Detailed exploration of extracting ELF files from ESP32 firmware images, covering binary format analysis, conversion processes, and tools for reverse engineering IoT device firmware.
Banjo - An Android Disassembler for Binary Ninja
Explore Banjo, a Binary Ninja plugin for interactive Smali disassembly, enhancing Android app reverse engineering with features like references, graph mode, and Python 3 API.
SBOM - Screw It, We'll Do It Live!
Exploring Software Bill of Materials (SBOM) concept, its potential impact on software supply chain transparency, and its crucial role in enhancing healthcare sector security. Insights on implementation and overcoming reluctance.
Battling Supermutants in the Phishing Wasteland
Explore the modern phishing landscape, its economy, and key players. Learn about phishing kit authors, their tactics, and strategies to combat this persistent cybersecurity threat.
Five-Sigma Network Events - and How to Find Them
Discover techniques for identifying unusual network behavior using Python. Learn to create custom tools for anomaly detection, scaling approaches, and data analysis in complex network systems.
Reversing SR IOV For Fun and Profit
Explore PCIe device reverse engineering, focusing on SR-IOV standard. Learn techniques to analyze vulnerabilities and extract valuable information from these interconnected components.
Incident Response and the Attorney Client Privilege
Explore legal protection of incident reports through attorney-client privilege. Learn when it applies, its limitations, and best practices for collaborating with attorneys during security incidents.
Post-Quantum Crypto - Today’s Defense Against Tomorrow’s Quantum Hacker
Overview of post-quantum cryptography and its practical applications in securing today's data against future quantum threats. Includes lessons from real-world integrations and demonstrations of quantum-safe alternatives.
The Ethics of Prosecuting an Offensive Security Campaign
Explore ethical considerations in offensive security campaigns, including impacts on company morale, deception tactics, and maintaining professional integrity. Learn best practices for conducting ethical red team engagements.
What's the Latest 411 on 419s?
Explore the latest tricks used by online scammers and learn three crucial OpSec strategies to protect yourself in an increasingly hostile digital environment.
Weapons of Text Destruction
Explore the hidden offensive capabilities of Vim for red team engagements. Learn how this popular text editor can be leveraged as a powerful tool in unconventional security operations.
Ground Truth - 18 Vendors, 6000 Firmware Images, 2.7 Million Binaries, and a Flaw in the Linux-MIPS Stack
Presentation of data from analysis of 6000+ firmware images, revealing trends in software hardening and a critical flaw in Linux/MIPS stack affecting security across embedded devices.
The APT at Home - The Attacker That Knows Your Mother's Maiden Name
Explores how traditional security measures fail victims of domestic violence and the need to rethink security approaches for vulnerable populations facing proximity-based threats.
Voting in 2019 - Bad or Worse
Explore electronic voting system vulnerabilities, their exploitation in 2018, and prospects for improvement before 2020 with cybersecurity expert Matt Blaze.
Deconstructing DeFeNeStRaTe.C
Dive into mainframe security with an analysis of DeFeNeStRaTe.C, exploring privilege escalation, APF unix programs, buffer overflows, and ACEE manipulation on IBM z/OS systems.
Between Two Moose
Insightful interviews with security industry leaders discussing career journeys, formative experiences, and contemporary issues, blending professional insights with lighthearted banter.