DirectX - The New Hyper-V Attack Surface
Explore vulnerabilities in Hyper-V's GPU-Paravirtualization feature, examining 4 fixed DirectX component issues and their implications for virtualization security.
Chasing Your Tail With a Raspberry Pi
Methodology for detecting wireless signal tracking using low-cost hardware and Python. Covers SIGINT techniques, MAC address randomization, and provides code for DIY implementation.
Eliminating Triage Intermediaries for Zero-day Exploits Using a Decentralised Payout Protocol
Explore a protocol for collectivizing security bounties, enabling companies to showcase software security and ethical hackers to retrieve bounties without ambiguity, eliminating subjectivity in triage processes.
Déjà Vu - Uncovering Stolen Algorithms in Commercial Products
Techniques for detecting unauthorized use of algorithms in commercial products, including search methods, reverse-engineering, and a real-world case study. Provides strategies for addressing IP theft and prevention.
Ghost in the Wireless - iwlwifi Edition
Explore Intel Wi-Fi chip vulnerabilities through reverse-engineering, uncovering firmware exploits and code execution risks in complex features like Wake-on-WLAN and TDLS.
How Firefox Uses In-process Sandboxing to Protect Itself From Exploitable Libraries
Explore Firefox's innovative approach to mitigating zero-day attacks using in-memory sandboxes for third-party C libraries, enhancing security against memory safety vulnerabilities.
All Your Devices Can Be Hacked
Cybersecurity expert reveals vulnerabilities in everyday devices, from pacemakers to cars, highlighting the growing risks in our increasingly connected world.
What Will a Future Without Secrets Look Like?
Explore the blurred line between public and private in the digital age, examining research on privacy implications and the ease of matching strangers' photos with sensitive personal information.
Everyday Cybercrime - and What You Can Do About It
Discover everyday cybersecurity risks and learn practical strategies to protect yourself from malware, data breaches, and sophisticated cybercriminals in this eye-opening talk by security expert James Lyne.
Messing with Forensic Analysts - Modifying VSS Snapshots
Learn techniques to modify Volume Shadow Copy snapshots, understand VSS basics, and explore methods to detect tampering in forensic analysis.
Automating Crypto Bugs Discovery
Explore automated techniques for discovering cryptographic vulnerabilities, focusing on differential fuzzing and CDF interfaces to enhance security testing efficiency.
Least Authority File System
Explore the Least Authority File System, a secure and privacy-focused approach to data storage and sharing, presented by Zooko at BSidesLV 2013.
Noobs - Training the Next Generation of Security Engineers
Discover strategies for effectively training and mentoring new security engineers, fostering their growth and success in the rapidly evolving cybersecurity landscape.
Satellite Vulnerabilities 101
Explore satellite vulnerabilities and security challenges in space-based systems. Learn about potential threats, attack vectors, and protective measures for satellite infrastructure.
Mining Software Vulnerabilities in SCCM / NIST's NVD - The Rocky Road to Data Nirvana
Explore software vulnerability mining in SCCM and NIST's NVD, uncovering challenges and insights in the journey towards comprehensive data analysis and improved cybersecurity practices.
Purple Team - How This Color Can Help You And Your Organisation Learn and Get Better
Explore how Purple Team strategies enhance organizational cybersecurity through risk assessment, communication, mentoring, and gamification techniques.
Pwn All The Mobile Porn Apps
Explore vulnerabilities in adult mobile apps and learn techniques for ethical hacking and security testing of sensitive applications.
How to Escalate Privileges to Administrator in Latest Windows
Learn techniques for escalating privileges to administrator level in recent Windows versions, including Microsoft Bounty Program insights and live demonstrations.
Destructive Malware and Interstate Rivalries - The Evolution of Digital Weapons and Geopolitical Conflict
Explore the evolution of destructive malware in geopolitical conflicts, analyzing key attacks and their impact on interstate rivalries and future cybersecurity challenges.
Abusing Webhooks for Command and Control
Explore techniques for exploiting webhooks as command and control channels in cybersecurity. Learn about potential vulnerabilities and defensive strategies.
Information Sharing, or "I've got 99 problems and they're probably pretty similar to yours"
Explore common cybersecurity challenges and solutions through collaborative information sharing in this insightful BSidesLV conference talk by Chris Mills.