Apple's Predicament - NSPredicate Exploits on iOS and macOS
Explore NSPredicate vulnerabilities in iOS and macOS, including FORCEDENTRY sandbox escape and new research on circumventing Apple's restrictions for potential code execution in privileged processes.
Harry Parser and the Cursed Tracker - Breaking the Spell of Online Data Collection
Uncover hidden secrets of online tracking and data collection. Learn about first-party and third-party trackers, regulatory loopholes, and OSINT techniques to understand how companies collect and share your online data.
Small Leaks, Billions of Dollars - Practical Cryptographic Exploits That Undermine Crypto Wallets
Explore vulnerabilities in Multi-Party Computation protocols used by major cryptocurrency wallets, revealing potential security risks and challenges in protecting billions in digital assets.
Route to Bugs - Analyzing the Security of BGP Message Parsing
Explore vulnerabilities in BGP message parsing, crucial for Internet routing and data center operations. Uncover security risks in open-source implementations following Network Function Disaggregation trends.
Evasive Maneuvers - Trends in Phishing Evasion & Anti-Evasion
Explore cutting-edge phishing evasion tactics and anti-evasion strategies across various digital channels. Learn to identify and counter sophisticated threats in today's evolving cybersecurity landscape.
Access Control in Message-Driven Systems
Securing message-driven architectures: Implementing token-based access control with Open Policy Agent for asynchronous communication flows, addressing challenges of different message types and zero trust principles.
Second Breakfast - Implicit and Mutation-Based Serialization Vulnerabilities in .NET
Novel attacks against .NET serialization bypassing current mitigations, including exploits on platforms without well-known serializers and mutation attacks. Demonstrates vulnerabilities in popular databases and serializers.
Make KSMA Great Again - The Art of Rooting Android Devices by GPU MMU Features
Explores advanced Android rooting techniques using GPU MMU features, overcoming hardware and software mitigations in Android 13 devices through innovative exploitation methods.
Poisoning Web-Scale Training Datasets is Practical
Explore strategies for creating large datasets and two attacks exploiting these mechanics, revealing vulnerabilities in deep learning models trained on internet-sourced data.
Video-Based Cryptanalysis - Recovering Cryptographic Keys from Device Using Video of Power LED
Innovative cryptanalysis technique exploits power LED video footage to recover secret keys from devices, using rolling shutter for high-speed sampling and RGB analysis for key extraction.
The Living Dead - Hacking Mobile Face Recognition SDKs with Non-Deepfake Attacks
Explore vulnerabilities in mobile face recognition systems, focusing on non-deepfake attacks that bypass liveness detection. Learn about security flaws in popular SDKs and their implications for critical applications.
CodeQL - Also a Powerful Binary Analysis Engine
Unveiling CodeQL's potential as a binary static analysis tool, exploring its engine capabilities and applications beyond traditional static analysis for enhanced software security.
Lost Control - Breaking Hardware-Assisted Kernel Control-Flow Integrity with Page-Oriented Programming
Explore techniques to bypass hardware-assisted kernel control-flow integrity using page-oriented programming, revealing vulnerabilities in modern operating system security mechanisms.
Diving into Windows Remote Access Service for Pre-Auth Bugs
Explore unauthenticated remote code execution vulnerabilities in Windows Remote Access Service, focusing on high-impact bugs and their implications for offensive and defensive security research.
Oven Repair - The Hardware Hacking Way
Discover how hardware hacking techniques like power analysis and firmware reverse engineering can be used to repair a malfunctioning oven, saving it from becoming e-waste.
Unlocking the Web - Exploring WebAuthn & Beyond
Dive into WebAuthn, passwordless authentication, and cloud computing's future with experts Eli Holderness and Mark Rendle. Explore data privacy, security tokens, and WebAssembly's potential impact on web development.
AI Assisted Decision Making of Security Review Needs for New Features
Explore AI-assisted decision-making for identifying security review needs in new features, addressing challenges in modern SDLC and improving security oversight in fast-paced development environments.
MaginotDNS - Attacking the Boundary of DNS Caching Protection
Unveils MaginotDNS, a potent cache poisoning attack exploiting DNS server vulnerabilities. Demonstrates how attackers can compromise entire DNS zones, including top-level domains, surpassing previous attack capabilities.
MoustachedBouncer - AitM-Powered Surveillance via Belarus ISPs
Uncovers advanced espionage group using AitM attacks and ISP-level tampering in Belarus to target diplomats with custom malware, highlighting sophisticated surveillance techniques.
Shuffle Up and Deal - Analyzing the Security of Automated Card Shufflers
Explore security vulnerabilities in automated card shufflers used in casinos, including communication protocols, hardware analysis, and potential exploits, with insights on improving gambling security.
Weaponizing Plain Text - ANSI Escape Sequences as a Forensic Nightmare
Explore how ANSI escape sequences can be exploited to inject, vandalize, and weaponize logfiles, combining old terminal injection techniques with modern features to create chaos in cloud CLIs and DevOps environments.