CryptoLocker Deep-Dive - Tracking Security Threats on the Bitcoin Public Ledger
Explore WhiteRabbit, an open-source tool for tracking ransomware payments on Bitcoin's public ledger. Learn to leverage blockchain data for threat intelligence and cybersecurity investigations.
Patchwerk - Kernel Patching for Fun and Profit
Explore techniques for patching and securing Linux kernels on IoT devices without source code. Learn to inspect, compile, and apply patches to vendor OEM kernels for vulnerability mitigation and reverse engineering.
How the Press Gets Pwned
Explore real-world cyberattacks on journalists and learn effective tools for protecting press freedom. Gain insights on digital security measures for at-risk media professionals.
Patching - It's Complicated
Explore the complexities of patching in cybersecurity, addressing challenges, best practices, and innovative solutions for various devices and systems to enhance organizational security.
The First Thing We Do, Let's Kill All The CISOs
Provocative discussion on the effectiveness of CISOs in improving cybersecurity, questioning the role's impact and exploring alternative approaches to address industry challenges.
Your Defense Is Flawed - and It's Only Kinda Your Fault
Discover how attackers exploit enterprise defenses and why zero breach mentality fails. Learn to think like a hacker and understand the limitations of security products.
Everything You Wanted to Know About Creating an Insider Threat Program - But Were Afraid To Ask
Comprehensive guide to establishing an effective insider threat program, covering key steps, strategies, and considerations for organizational security.
Meatbag Systems - How Our Reliability Culture & Practice Evolved over Time
Exploring the evolution of reliability culture through major incidents, emphasizing the human aspect in maintaining production systems and aligning reliability with customer value.
How We Drained Every Backbone Router Simultaneously
Exploring Meta's 2021 outage: causes, cascading effects, and lessons learned. Insights into network infrastructure, disaster recovery, and future improvements for preventing similar incidents.
An SRE Guide to Linux Kernel Upgrades
Demystifying Linux kernel releases: Learn to safely and timely update your systems, balancing security patches with stability concerns for high-profile services and applications.
CONIKS - Bringing Key Transparency to End Users
Explore CONIKS, an innovative key verification service for end-to-end encrypted communication systems, addressing privacy and efficiency challenges in user key binding consistency and provider auditing.
The Moral Character of Cryptographic Work
Exploring cryptography's political and moral dimensions, emphasizing its power to reshape societal structures and calling for a renewed focus on addressing mass surveillance through innovative research and ethical considerations.
Practical Kubernetes Security Learning using Kubernetes Goat
Explore Kubernetes security vulnerabilities using Kubernetes Goat, a "vulnerable by design" environment. Learn to assess and improve cloud-native infrastructure security posture through hands-on practice.
Pages from a Sword-Maker's Notebook Part II
Explore covert intelligence gathering techniques, from anti-virus evasion to counter-intelligence, with practical code examples in Golang. Learn methodologies and technical solutions for long-term surveillance operations.
This Is Not Your Grandfather's SIEM
Explore modern CSOC analytic platforms, their design considerations, and evolving approaches to security event monitoring, analysis, and response in complex cybersecurity environments.
Profiling and Detecting All Things SSL with JA3
Explore SSL/TLS fingerprinting with JA3, learn its capabilities for detecting malware and C2 servers, and discover the new JA3S for server fingerprinting. Enhance your network security skills.
IOT RCE - A Study With Disney
Explore IoT device vulnerabilities using Disney's Circle and Foscam as case studies. Learn novel attack techniques, including SSL bypasses, SSID injection, and cloud routing abuse. Discuss IoT devices' use of offensive tools.
Quantitative Comparable Software Risk Reporting
Automated analysis frameworks for assessing software security, empowering consumers and professionals with scientific data on effectiveness of security techniques and overall product safety.
AFL-Unicorn - Fuzzing the 'Unfuzzable'
Explore afl-unicorn, a tool bridging manual research and AFL's automation for vulnerability discovery in complex systems, with practical workflow insights for various targets.
The State of Secure Messaging
Comprehensive overview of secure messaging protocols, encryption techniques, and privacy challenges in modern communication platforms.
So You Want to Hack Radios
Explore radio hacking techniques and insights from experts Marc Newlin and Matt Knight in this Shmoocon 2017 presentation, covering essential concepts for aspiring radio hackers.