Synthetic Trust - Exploiting Biases at Scale
Explore AI-generated voice phishing attacks, their psychological and technical aspects, and the growing threats of generative AI on decision-making, personal security, and organizational trust.
Lifting the Fog of War - Monitoring, Identifying and Mitigating MS-RPC Based Threats
Explore techniques for monitoring and defending against RPC-based attacks, including traffic analysis, signature detection, and mitigation strategies for Windows environments.
Dive into Apple UserFS - Userspace Filesystem
Explore Apple UserFS architecture, its impact on filesystem security, and potential vulnerabilities. Gain insights into iOS security through reverse-engineering and analysis of this userspace filesystem implementation.
How NOT to Train Your Hack Bot - Dos and Don'ts of Building Offensive GPTs
Explore the potential and limitations of using large language models for offensive security operations, including techniques for finding vulnerabilities and ethical considerations.
Fast, Ever-Evolving Defenders - The Resilience Revolution
Explore a new resilience-based paradigm for systems defense, focusing on nimble, empirical approaches to outmaneuver attackers through accelerated operational tempo and design-based solutions.
The Jump to Hyperspace - Light Speed, User Agency, & Moving Past the Cloud
Explore local-first software architecture for simpler, faster app development. Learn about CRDTs, cryptography, and auth advancements enabling offline, peer-to-peer, and federated experiences beyond traditional cloud computing.
Defender-Pretender - When Windows Defender Updates Become a Security Risk
Explore Windows Defender's architecture, signature database, and update process. Learn about a critical 0day vulnerability affecting Windows and Microsoft 365 Defender, posing risks to enterprise machines.
Kill Latest MPU-Based Protections in Just One Shot - Targeting All Commodity RTOSes
Unveils critical security flaws in popular RTOSes, demonstrating exploitation techniques for privilege escalation and arbitrary read/write access through live demos on real-world products.
Low-Level RASP - Protecting Applications Implemented in High-Level Programming Languages
Explore low-level RASP for enhanced application security across multiple high-level programming languages, offering improved defense capabilities compared to traditional WAF and HIPS solutions.
All You Need is Guest
Uncover security risks of Azure AD guest accounts and learn how undocumented APIs can be exploited to gain unauthorized access to sensitive enterprise resources.
Do You Really Know JWT?
Explore lesser-known aspects of JSON Web Tokens, including implementations beyond JWS, and their practical applications in authentication and information transmission.
The Past, Present, and Future of Cross-Site - Cross-Origin Request Forgery
Comprehensive exploration of CSRF attacks, from traditional to modern API-based vulnerabilities. Learn about attack patterns, defense mechanisms, and best practices to secure web applications effectively.
EDR - Erase Data Remotely, By Cooking An Unforgettable Byte Signature Dish
Discover a new vulnerability allowing remote deletion of critical files through endpoint security controls' byte signature detection logic, potentially causing severe data loss and DOS attacks.
Into the Hive of eBPF
Explore eBPF's fundamentals, architecture, and real-world applications in cloud-native environments for enhanced observability, security, and performance analysis without code instrumentation.
Wargames - Java Vulnerabilities and Why You Should Care
Explore Java security vulnerabilities, understand related acronyms, and learn about tools to check for known issues in your applications. Gain insights into making Java more secure.
Cryptocurrencies Are Traceable & What Is Cryptojacking?
Explore cryptocurrency traceability, cryptojacking, and ransomware with experts Andy Greenberg and Scott Helme. Gain insights into blockchain's impact on cybersecurity and the future of Bitcoin in this informative discussion.
Compromising LLMs - The Advent of AI Malware
Explore the security risks of AI integration, focusing on prompt injections and potential malware in language models. Learn about future challenges and consequences for AI assistants.
Nothing but Net - Leveraging macOS's Networking Frameworks to Heuristically Detect Malware
Explore macOS network frameworks for malware detection, focusing on unauthorized access and traffic analysis techniques to enhance security on Apple systems.
Mac-ing Sense of the 3CX Supply Chain Attack - Analysis of the macOS Payloads
Detailed analysis of the 3CX supply chain attack's macOS payloads, exploring the first "chained" supply chain attack and its impact on macOS systems. Insights into advanced cybersecurity threats and defenses.
Physical Attacks Against Smartphones
Explore vulnerabilities in modern Android smartphones, focusing on Recovery mode exploits and physical access attacks, despite existing security measures.
Civil Cyber Defense - Use Your Resources to Defend Non-Profits as They Combat Human Trafficking and Subvert Authoritarian Regimes
Volunteers and students use cyber skills to protect non-profits, activists, and journalists from threats like human trafficking and authoritarian regimes, utilizing academic resources and open-source tools to defend human rights.