Fast Chat with Austin Murphy - CrowdStrike’s VP & GM - Falcon Complete
Explore the evolving ransomware threat landscape and learn effective defense strategies from CrowdStrike's VP & GM of Falcon Complete.
Forget Zero Trust - Aim to "Control the Controllables"
Explore strategies to prepare for future supply chain attacks, focusing on controlling key vulnerabilities and leveraging breach and attack simulation techniques.
Patching Loopholes - Finding Backdoors in Applications
Explore techniques for identifying hidden vulnerabilities and backdoors in applications, enhancing your ability to secure digital transactions and sensitive data storage.
Hack Different - Pwning iOS 14 with Generation Z Bug
Explore innovative iOS 14 exploitation techniques, focusing on alternative attack vectors beyond traditional Safari exploits. Learn about new vulnerabilities and advanced hacking strategies for mobile security.
Let's Attack Let's Encrypt
Explore vulnerabilities in Let's Encrypt's distributed domain validation, revealing downgrade attacks that compromise its security measures against on-path MitM adversaries.
Securing Open Source Software - End-to-End, at Massive Scale, Together
Explore challenges and strategies for securing open source software at scale, drawing insights from major vulnerability remediations and discussing industry-wide coordination efforts.
ProxyLogon is Just the Tip of the Iceberg - A New Attack Surface on Microsoft Exchange Server
Discover a new attack surface on Microsoft Exchange Server, exploring critical vulnerabilities beyond ProxyLogon and their implications for government and enterprise security.
Safeguarding UEFI Ecosystem - Firmware Supply Chain is Hardcoded
Explore UEFI ecosystem complexities, supply chain vulnerabilities, and challenges in firmware security. Learn about patch cycles, fix verification, and the impact of vulnerabilities on the entire ecosystem.
Qualcomm WiFi - Infinity War
Explore critical security vulnerabilities in Qualcomm WiFi chips, focusing on 0-click remote attacks and their potential impact on millions of smartphone users worldwide.
Reverse Engineering the M1
Explore Apple's M1 chip architecture, including ARM variant quirks, memory access issues, and the AMX vector instruction set. Gain insights into reverse engineering proprietary hardware.
Lessons From 11 Billion Breached Records
Insights from analyzing 11 billion breached records, revealing causes and ongoing impacts of data breaches. An eye-opening look at cybersecurity challenges and their far-reaching consequences.
Investigating and Breaking Widevine on QTEE
Explore vulnerabilities in Widevine DRM on Qualcomm's QTEE, uncovering security flaws and exploiting them to extract sensitive data from trusted storage. Learn advanced techniques in reverse engineering and exploit development.
X-in-the-Middle - Attacking Fast Charging Piles and Electric Vehicles
Explore security vulnerabilities in DC fast charging protocols for electric vehicles, uncovering potential risks and attack vectors in the rapidly evolving EV charging infrastructure.
Apple Neural Engine Internal - From ML Algorithm to HW Registers
Explore the inner workings of Apple's Neural Engine, from machine learning algorithms to hardware registers, with insights into FaceID's neural network and SEP firmware security.
How Did the Adversaries Abusing the Bitcoin Blockchain Evade Our Takeover
Explore how cybercriminals leverage Bitcoin blockchain for C&C communication, evading traditional defenses. Learn about this innovative malware tactic and its implications for cybersecurity.
A New Era of One-Click Attacks - How to Break Install-Less Apps
Explore novel attack methods against Install-Less apps, including vulnerabilities in Apple App Clips, Google PWA, Google Instant App, and QuickApp. Learn about emerging security risks in this new app paradigm.
Mem2Img - Memory-Resident Malware Detection via Convolution Neural Network
Innovative framework using convolutional neural networks to detect memory-resident malware, overcoming limitations of traditional antivirus software and handcrafted feature-based approaches.
Anti-Forensics - Reverse Engineering a Leading Phone Forensic Tool
Explore vulnerabilities in Cellebrite UFED through reverse engineering, uncovering potential impacts on court cases and discussing the ethical implications of forensic software flaws.
Scavenger - Misuse Error Handling Leading to Qemu - KVM Escape
Explore how mishandled error codes in hypervisors can lead to security vulnerabilities, including guest-to-host escape exploits in Qemu/KVM environments.
Mining and Exploiting Mobile Payment Credential Leaks in the Wild
Explores prevalence and security impacts of payment credential leaks from mobile apps, revealing vulnerabilities in third-party payment systems serving billions of users globally.
The Rise of Potatoes - Privilege Escalations in Windows Services
Explore recent privilege escalation techniques in Windows services, focusing on methods attackers use to gain full system control from lower-privileged access.