All Your Emails Belong to Us - Exploiting Vulnerable Email Clients via Domain Name Collision
Explore email vulnerabilities and domain name collisions as potential security threats, focusing on protecting email accounts from advanced persistent threats and exploitation techniques.
Securely Implementing Network Protocols - Detecting and Preventing Logical Flaws
Explore model-based testing techniques to detect logical bugs in SSL/TLS and Wi-Fi implementations, enhancing network protocol security and implementation.
Orange is the New Purple - How and Why to Integrate Development Teams with Red - Blue Teams to Build More Secure Software
Explore a new paradigm for integrating development teams with offensive and defensive teams to enhance software security throughout the development lifecycle, fostering knowledge sharing and strengthening defenses.
Myth and Truth About Hypervisor-Based Kernel Protector - The Reason Why You Need Shadow-Box
Explore hypervisor-based kernel protection, its limitations, and the need for higher-privilege solutions like Shadow-Box to combat rootkits and kernel exploits effectively.
Hack Microsoft Using Microsoft Signed Binaries
Explore advanced hacking techniques using Microsoft-signed tools, including PowerShell and debuggers, to achieve various attacks and persistence on Windows systems.
Never Let Your Guard Down - Finding Unguarded Gates to Bypass Control Flow Guard with Big Data
Explore techniques to bypass Control Flow Guard in Windows using big data analysis, focusing on unguarded gates and indirect branches for enhanced security understanding.
MASHaBLE - Mobile Applications of Secret Handshakes Over Bluetooth LE
Explore cryptographic secret handshakes for mobile devices using Bluetooth LE, enabling mutual authentication between untrusted parties in virtual secret communities.
CTX - Eliminating BREACH with Context Hiding
Explore advanced techniques to mitigate BREACH attacks in web applications using compression and encryption. Learn about Context Hiding and its implementation in practical scenarios.
Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE
Explore Kerberos delegation vulnerabilities in Windows networks, learning techniques for unauthorized impersonation and remote code execution. Gain insights into potential security risks and mitigation strategies.
Detach Me Not - DoS Attacks Against 4G Cellular Users Worldwide from Your Desk
Explores DoS attacks on 4G cellular networks, revealing vulnerabilities in mobile communication systems and their potential for user tracking and manipulation. Discusses implications for security and privacy in telecommunications.
Build a Secure Developer Platform Using Argo, Istio and Vault
Explore building a secure developer platform using Argo, Istio, and Vault. Learn automated deployment, secure connectivity, multi-tenancy, and secrets management for efficient application production.
Emerging Threats Against Cloud Application Identities and What You Should Do About It
Explore emerging threats to cloud application identities, learn detection techniques, and discover strategies for recovery and defense in this comprehensive cybersecurity session.
NOPASSWD - Building a Passwordless Cloud Infrastructure
Explore passwordless authentication for cloud infrastructure, covering FIDO standards, security risks, and implementation strategies for teams of all sizes.
Flexible Authorisation with ASP.NET Core 7.0
Explore permission-based authorization in ASP.NET Core 7.0 to enhance flexibility and visibility of access control, overcoming limitations of traditional role-based approaches.
Don't Panic - A Developer's Guide to Building Secure GraphQL APIs
Explore secure GraphQL API design through case studies, OWASP risks, and proactive threat planning. Learn about unique challenges and security risks compared to other API standards.
Crypto Heist - The Aftermath of a Government Website Cryptojacking Attack
Investigación de un ataque de cryptojacking masivo que afectó a miles de sitios web gubernamentales. Análisis del descubrimiento, impacto y medidas de prevención contra ataques similares.
OAuth2 on a National Level - How to Secure Extremely Sensitive APIs
Exploring HelseID's enhanced OAuth security profile for sharing sensitive health data across Norway's healthcare systems, addressing strict requirements and future developments.
Abusing GitHub for Fun and Profit - Actions and Codespaces Security
Explore security vulnerabilities in GitHub Actions and Codespaces, including real-world exploitation scenarios and practical tips for protecting your software supply chain and development pipelines.
Are Your Secrets Secure? How Mobile Applications Are Leaking Millions of Credentials
Explore how mobile apps leak sensitive credentials, analyzing real breaches, source code vulnerabilities, and Play Store security risks. Learn actionable steps to protect your app's secrets.
Demystifying OAuth, JWTs and Azure AD
Uncover common errors in Azure Active Directory setup, understand AAD applications, service principals, MSAL vs ADAL, V1 and V2 endpoints, OAuth2 scopes, and roles in this live-coding session.
Warpforge - Decentralized Supply Chain Management for Building Everything
Explore Warpforge, a build sandbox tool enhancing software creation with reproducibility, decentralized package management, and flexible filesystem composition for improved supply chain security.