Realtime Communications, Realtime Risks
Explore WebSocket security risks, vulnerabilities in enterprise applications, and a new Burp Suite extension for improved pentesting of real-time communications.
Hack Like a Pro - Bug Bounties, Web Vulnerabilities & More
Explore ethical hacking, bug bounties, and cybersecurity with experts. Learn practical tips, essential skills, and valuable resources to enhance your hacking prowess and protect digital assets.
Software Security
Insightful discussion on the evolving role of security in software development, emphasizing the shift towards developer responsibility and strategies for making informed security decisions.
Container Security
Explore container security fundamentals, shared kernel implications, and best practices for assessing and mitigating risks in containerized applications with experts Liz Rice and Eoin Woods.
Practical Data Privacy
Explore privacy-enhancing technologies for data protection, balancing privacy and utility in software development. Learn open-source tools and best practices for implementing privacy by design in data science projects.
16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code Execution
Découverte de 16 vulnérabilités zero-day dans CODESYS, un framework logiciel pour automates programmables industriels, affectant potentiellement des millions d'appareils dans divers secteurs industriels.
Three New Attacks Against JSON Web Tokens
Discover three novel attacks on JSON Web Tokens, exploring vulnerabilities in authentication and session management. Gain insights into cryptographic design flaws and complexity issues in JWT implementations.
Core Escalation - Unleashing the Power of Cross-Core Attacks on Heterogeneous System
Explore cross-core attacks on complex smartphone SoCs, examining vulnerabilities in multi-processor systems and their impact on overall device security. Learn about real-world examples and potential defense strategies.
Over the Air, Under the Radar - Attacking and Securing the Pixel Modem
Explore Android Red Team's proactive security approach for Google Pixel devices, focusing on modem vulnerabilities and protection strategies against remote compromises.
The Hat Trick - Exploit Chrome Twice from Runtime to JIT
Explore Chrome vulnerabilities in V8's Maglev compiler, uncovering security risks in JS optimization and compilation processes for advanced browser exploitation techniques.
Devising and Detecting Phishing - Large Language Models vs. Smaller Human Models
Explore the effectiveness of AI-generated phishing emails compared to traditional methods, revealing surprising results and implications for cybersecurity strategies.
Don't Throw Away the Key - What Developers Should Know about Encryption
Encryption essentials for developers: cryptography basics, zero trust security, key management, and data storage best practices to prevent breaches and secure sensitive information.
Hacking Mitsubishi PLC Without Access To Firmware
Explore reverse engineering techniques for Mitsubishi PLCs, uncovering protocol details and vulnerabilities without firmware access. Learn about breakthrough methods and discovered CVEs.
What is Linux Kernel Keystore and Why You Should Use It in Your Next Application
Explore Linux kernel keystore's secure credential management, integration with hardware security modules, and benefits for application development in cloud-native environments.
Building Secure & Auditable Container Images Using Chainguard's Tooling - Melange, Apko & Wolfi
Explore secure container image creation using Chainguard's tools. Learn to build minimal, auditable images with SBOMs, manage ca-certs, and enhance supply-chain security through practical demonstrations.
Playing Video Games One Frame at a Time
Explore how programmers can create tools to assist in playing video games, including code injection and system interactions, with examples in C++.
Single Instruction Multiple Data Leaks in Cutting-edge CPUs - AKA Downfall
Unveiling Downfall attacks: new transient execution vulnerabilities in Intel CPUs. Exploits Gather instruction to leak data across security boundaries, defeating previous defenses and necessitating critical hardware fixes.
Dismantling DDoS - Lessons in Scaling
Explore global DDoS attack trends, their impact on cybercrime, and insights into future threats through data analysis and geopolitical context.
Craig's Angular - Rust Spectacular
Explore Rust programming from an Angular developer's perspective, comparing it to TypeScript and discussing its potential impact on front-end development.
ODDFuzz - Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing
Innovative approach to efficiently detect Java deserialization vulnerabilities using structure-aware directed greybox fuzzing, addressing challenges in existing tools and improving precision in gadget chain hunting.
Reflections on Trust in the Software Supply Chain
Explore software supply chain security challenges, evaluate current efforts, and discover promising solutions like binary-source validation to enhance trustworthiness in software development.