A Security RISC? The State of Microarchitectural Attacks on RISC-V
Systematic investigation of microarchitectural attack surface on 64-bit RISC-V CPUs, exploring vulnerabilities and security implications as RISC-V architecture gains popularity in commercial processors.
Millions of Patient Records at Risk - The Perils of Legacy Protocols
Explore DICOM protocol vulnerabilities, their impact on patient data security, and methods to bypass controls, based on internet-wide research and vendor statements.
Panda to Gibbon Is the Least of Your Worries - Why Securing AI Is Not What You Think
Explore AI security best practices, attack history, and organizational strategies. Learn to secure AI implementations across platforms, debunking misconceptions and focusing on practical approaches.
How I Met Your Data
Explore data breaches with Troy Hunt: from initial chaos to dealings with cybercriminals and law enforcement. Gain insights, anecdotes, and practical wisdom for navigating digital security challenges.
Reverse Engineering the Customized Pointer Authentication Hardware Implementation on Apple M1
Uncover Apple M1's customized Pointer Authentication implementation, exploring its unique security features and cross-attack mitigations through advanced reverse engineering techniques.
The Accidental Discovery of a New Vulnerability in Google's OAuth Implementation
Discover a client impersonation vulnerability in Google's OAuth implementation, its implications for enterprise security, and lessons learned from this cautionary tale of cloud provider security.
International Threat Actors Are Targeting Children to Steal Money from Banks and Major Corporations
Explore how cyber criminals target children and gamers through sophisticated scams, exploiting legitimate infrastructure to commit financial fraud and spread malware. Learn about the growing threat of "Malicious Marketing as a Service."
What We Can Learn from Ukraine's Cyber Defenders about Building a More Resilient Future
Insights from Ukraine's cyber defense strategies for building resilience against infrastructure attacks, featuring discussions on preparedness, response, recovery, and lessons learned for future threat mitigation.
National Cybersecurity Strategy and Workforce Efforts
Explore the National Cybersecurity Strategy Implementation Plan and Workforce Strategy with Acting National Cyber Director Kemba Walden, focusing on key details and future implications.
Forward Focus - Perspectives on AI, Hype, and Security
Exploring AI's impact on security: hype, adoption challenges, privacy concerns, regulations, and legal issues. Experts discuss implications for the security industry and professionals.
Idea to Realization - Cybersecurity Entrepreneurship
Successful cybersecurity entrepreneurs share practical advice on transforming ideas into reality, overcoming industry challenges, and starting the entrepreneurial journey.
Unlocking the Secrets of Cybersecurity Entrepreneurship
Gain insights on transitioning from security engineer to cybersecurity entrepreneur and venture capitalist. Learn about industry trends, challenges, and opportunities from Zane Lackey's experience at Andreessen Horowitz and Etsy.
Traceable Cryptocurrencies & Cryptojacking
Explore cyber crimes, cryptocurrency anonymity, and blockchain's impact on security with experts Andy Greenberg and Scott Helme. Uncover famous cryptojacking attacks and the potential of crime organizations leveraging cryptocurrencies.
Lessons Learned from the KA-SAT Cyberattack - Response, Mitigation and Information Sharing
Detailed analysis of the 2022 KA-SAT cyberattack, exploring malware deployment, network-based attacks, real-time response strategies, and ongoing mitigation efforts by Viasat's operational teams.
Bridging Cyber and Insurance
Explore the intersection of cybersecurity and insurance, examining risk assessment, policy frameworks, and emerging trends in digital protection and financial safeguards.
Leverage and Demonstrate Value with Your Cyber Insurance Renewal
Discover strategies to maximize cyber insurance renewals, showcasing your organization's value and security measures for optimal coverage and rates.
The State of Application Security 2023 - Learnings from 4 Million Scanned Services - Unveiling the Power of Proactive Cybersecurity Investments
Unveiling key vulnerabilities from a global scan of 4 million web services, this talk explores prevalent cyber risks, offering insights on file leaks, DNS vulnerabilities, and cross-site scripting with real-world examples and demos.
Why Cyber Insurance Should Be Your SOC's New Best Friend
Explore how cyber insurance can enhance your SOC's effectiveness, providing insights on risk management, incident response, and cybersecurity best practices.
Sure, Let Business Users Build Their Own. What Could Go Wrong?
Explore the risks and security implications of business users creating applications with low-code/no-code platforms, and learn strategies to mitigate potential vulnerabilities in enterprise environments.
TSSHOCK - Breaking MPC Wallets and Digital Custodians for Billion Dollar Profit
Unveils critical vulnerabilities in MPC wallets and digital custodians, demonstrating potential billion-dollar cryptocurrency theft through 0-day attacks on Threshold Signature Schemes used by major institutions.
A SSLippery Slope - Unraveling the Hidden Dangers of Certificate Misuse
Explore the hidden risks of certificate misuse, focusing on digital signatures, code signing, and SSL/S/MIME certificates. Learn about authentication challenges and potential security vulnerabilities.