Hello From the Other Side - SSH Over Robust Cache Covert Channels in the Cloud
Explore practical cache covert channels in cloud environments for secret data exfiltration between isolated virtual machines, presented by security researchers at Black Hat Asia.
Lessons From 11 Billion Breached Records
Insights from analyzing 11 billion breached records, revealing causes and ongoing impacts of data breaches. An eye-opening look at cybersecurity challenges and their far-reaching consequences.
IAM Concerned - OAuth Token Hijacking in Google Cloud
Explore OAuth token hijacking vulnerabilities in Google Cloud, understanding attack vectors and mitigation strategies for enhanced GCP environment security.
Walking Your Dog in Multiple Forests - Breaking AD Trust Boundaries through Kerberos Vulnerabilities
Explore Kerberos vulnerabilities in Active Directory forest trusts, revealing how attackers can breach trust boundaries in enterprise environments with multiple AD forests.
Mainframe Z-OS Reverse Engineering and Exploit Development
Explore mainframe security vulnerabilities, reverse engineering techniques, and exploit development for z/OS systems, challenging common assumptions about mainframe invulnerability.
Bring Your Own Token to Replace the Traditional Smartcards for Strong Authentication and Signing
Explore Cisco's innovative BYOT solution replacing traditional smartcards, enabling self-provisioned digital identities for enhanced authentication and cryptographic functions using USB tokens.
Booting the iOS Kernel to an Interactive Bash Shell on QEMU
Explore iOS kernel emulation on QEMU, achieving interactive bash shell and live kernel debugging. Discover groundbreaking research towards a full open-source iOS system emulator.
Exploiting Windows Hello for Business
Uncover vulnerabilities in Windows Hello for Business and learn to scan and secure corporate environments with a new toolset for enhanced Active Directory visibility.
Escaping Virtualized Containers
Explore container security, focusing on shared kernel vulnerabilities that may allow processes to escape and compromise the host system. Learn about potential risks and mitigation strategies.
Decade of the RATs – Custom Chinese Linux Rootkits for Everyone
Uncovers a decade-long, state-sponsored cyber espionage campaign targeting Linux servers, revealing custom malware and rootkits used in strategic attacks on government and industry infrastructure.
Slippery When Wet - A Dirty Little Pigment Story
Explore the paradox of digital signatures vs. wet ink, examining trust issues, security concerns, and the future of identity verification in everyday transactions.
Old Dog, New Tricks - Forensics With PowerShell
Explore PowerForensics: a PowerShell-based toolset for live digital forensics and incident response, enabling efficient investigation of advanced cyber threats without system imaging.
DDoS Mitigation Epic Fail Collection
Explore 10 critical DDoS mitigation failures, their technical details, and recommended solutions. Learn from industry leaders' mistakes to enhance your defense strategies against sophisticated attacks.
Trusts You Might Have Missed
Demystifying domain trusts: Enumeration, visualization, and exploitation techniques for red teams. Learn to leverage trust relationships for domain takeover without exploits.
PinPadPwn
Explore vulnerabilities in payment terminals, including memory corruption and code execution risks. Learn about attack surfaces, research approaches, and potential payloads in chip-and-pin systems.
Why Integrity Is Left Alone and Not Given the TLC It Deserves
Exploring the neglected aspect of data integrity in information security, its importance for business decisions, and practical solutions for ensuring data accuracy.
Methodology for Creation and Practical Applications of Polyglots
Explore the creation and applications of polyglots - data parsed as multiple formats. Learn techniques, historical uses, and future potential in computer security.
Hack Wars - A New Hope
Jedi RAPst4r leads a fun-filled journey through the CyberUniverse, showcasing how to combat cyber threats with the help of allies. Learn about the "New Hope" in cybersecurity and its importance.
Threat Modeling for Linux Containers LXC, Docker and the Cloud
Explore threat modeling for complex cloud systems, focusing on Linux containers and OpenStack. Learn innovative approaches beyond traditional data flow diagrams for effective security analysis.
The Imitation Game - Emulating Attackers
Explore realistic attacker emulation using CALDERA, implementing techniques, modeling groups, and executing end-to-end attack paths to improve defenses and investigate new threats.
There Is No Security Without Privacy
Explore the intricate relationship between privacy and security, examining legal precedents, surveillance impacts, and practical steps to protect personal information in the digital age.