Zero-Touch-Pwn - Abusing Zoom's Zero Touch Provisioning for Remote Attacks on Desk Phones
Uncover vulnerabilities in Zoom's Zero Touch Provisioning for desk phones, exploring potential remote attacks and security implications in cloud communication platforms.
Chained to Hit - Discovering New Vectors to Gain Remote and Root Access in SAP Enterprise Software
Unveiling critical vulnerabilities in SAP enterprise software through analysis of the "P4" protocol, demonstrating tactics and techniques for remote and root access exploitation in mission-critical business systems.
Software Supply Chain Security for Those in a Rush
Concise overview of software supply chain security concepts like SBOM, SLSA, and GUAC. Gain insights into emerging cybersecurity threats and their importance in the industry.
How Hacking Works
Explore software exploitation, hacking techniques, and tools to enhance system security. Learn through gamified environments to develop skills for creating safer software.
The Convergence of eBPF, Buildroot, and QEMU for Automated Linux Malware Analysis
Explore eBPF, Buildroot, and QEMU for automated Linux malware analysis. Learn about ELFEN sandbox and see demonstrations of analyzing popular malware families like Mirai and AvosLocker.
Return Oriented Programming, an Introduction
Learn the mechanics of Return Oriented Programming, an exploitation technique. Explore examples demonstrating code execution in contexts with non-executable stacks.
OSXCollector - Forensic Collection and Automated Analysis for OS X
Explore OSXCollector, an open-source toolkit for automated forensic evidence collection and analysis on OS X, streamlining incident response processes for digital investigators.
DNS Spikes, Strikes, and The Like
Explore DNS query patterns to identify potential threats using unsupervised learning methods. Learn to analyze traffic trends and distinguish malicious domains from benign spikes.
Ask the EFF
Explore digital civil liberties with EFF experts, covering surveillance, intellectual property, privacy, and security research. Gain insights on law and technology issues through Q&A.
Human Hunting
Explores the importance of human-driven cybersecurity analysis over automated tools, emphasizing the need for skilled analysts to detect and counter human adversaries effectively in information security.
How SecOps Can Convince DevOps To Believe In The Bogeyman
Discover strategies for bridging the gap between security and development teams, fostering a collaborative approach to cybersecurity in organizations.
F-ck These Guys - Practical Counter Surveillance
Practical strategies for protecting online privacy and resisting mass surveillance through encryption and privacy technologies. Learn to safeguard your digital rights and opt out of bulk data collection.
Collective Action Problems in Cybersecurity
Explore collective action challenges in cybersecurity with Allan Friedman, examining strategies for improved collaboration and shared responsibility in addressing digital threats.
Lessons Learned from Building and Running MHN, the World's Largest Crowd-sourced Honeynet
Explore insights from building the world's largest crowdsourced honeynet. Learn about deploying diverse honeypots globally, analyzing security data, and creating a distributed sensor network for tracking threats.
Intrusion Detection in the Clouds
Explore cloud-based intrusion detection strategies for shared hosting environments, addressing security challenges and implementing effective monitoring solutions.
Securing the Hastily Formed Network - Infosec for Disaster Relief and Emergency Response
Explore security challenges and solutions for emergency response networks, from Hurricane Katrina to the Ebola crisis. Learn how to protect vital connectivity in disaster zones.
Student Surveillance - How Hackers Can Help Protect Student Privacy
Explore how educational technologies impact student privacy, examining the risks of data-intensive tools in classrooms and discussing ways hackers can help protect students' personal information.
Phighting Phishers Phake Phronts
Explore modern phishing techniques, from simple HTML to sophisticated dynamic sites. Learn about IoCs, detection methods, and potential victim impacts in this cybersecurity deep dive.
Ground Zero Financial Services - The Latest Targeted Attacks from the Darknet
Análisis de ataques dirigidos al sector financiero desde la Darknet, explorando cómo se crean, prueban y refinan estas amenazas por parte de atacantes motivados económicamente.
Stick a Pin in Certificate Pinning - How to Inspect Mobile Traffic and Stop Data Exfiltration
Learn how certificate pinning in mobile apps can bypass security controls and explore solutions for inspecting encrypted traffic to prevent data exfiltration and attacks.
Your Users Passwords Are Already Stolen
Explore password security vulnerabilities, database breaches, and human behavior in cybersecurity. Learn about common weaknesses and real-world examples to improve organizational defenses against unauthorized access.