Windows Systems and Code Signing Protection - Hack.lu 2016
Explores Windows code signing mechanisms, kernel implications, rootkit bypass techniques, and user-land protections, focusing on authenticode and its impact on system security.
Sneaky Extensions - Bypassing MV3 Security in Browser Extensions
Discover how browser extensions can exploit security vulnerabilities in MV3, including webcam hijacking, credential theft, and arbitrary code execution, while learning protective measures against these threats.
Serverless Infections - Malware in Serverless Computing Environments
Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.
Kernelspace Fault Injection with KRF - Discovering Vulnerabilities Through System Call Errors
Explore kernelspace fault injection with KRF to discover vulnerabilities and improve software resilience through targeted system call error induction and analysis.
Breaking Business as Usual: Attacking Android Enterprise Solutions
Explore Android Work Profiles' security, threats, and vulnerabilities in enterprise settings. Learn about stakeholder perspectives, potential exploits, and actionable steps for enhancing mobile security configurations.
The Anatomy of Cloud Attacks
Uncover cloud attackers' tactics and mindsets through honeypot analysis. Learn key defense strategies against threats like Headcrab Kinsing and Teamtnt in this insightful session on cloud security.
In-Depth Study of Linux Rootkits: Evolution, Detection, and Defense
Dive into Linux rootkit security, exploring their evolution, detection methods, and defensive strategies for protecting systems against sophisticated kernel-level threats.
The GitHub Actions Worm - Understanding CI/CD Platform Vulnerabilities
Dive into the security vulnerabilities of GitHub Actions, exploring how malicious code can spread through Action dependencies and learning essential defense strategies against CI/CD platform attacks.
Securing CI/CD Runners Through eBPF Agent
Explore eBPF agent implementation for securing CI/CD runners. Learn about attack vectors, open-source ecosystem threats, and practical strategies for enhancing pipeline security.
Stegosploit - Hacking with Pictures
Explore innovative hacking techniques using steganography to hide exploits within images, blending cybersecurity with digital art for covert attacks and data exfiltration.
IoT Security Risks - A Cybercriminal's Paradise
Explore IoT vulnerabilities, malware threats, and attack scenarios in this talk. Learn about risks to home and corporate users, and discover recommendations for better protection against these dangerous attacks.
bpftime - Fast Uprobes with User Space BPF Runtime
Explore bpftime, a userspace eBPF runtime offering faster uprobes and syscall hooks. Learn about its performance benefits, implementation techniques, and compatibility with existing eBPF toolchains.
Tracing: The Bane of Security Folks - Understanding Kernel Tracing Techniques
Explore kernel tracing techniques, their security implications, and the tension between transparency and protection in Linux systems. Learn about live patching and function tracing methods.
Fileless Malware Infection and Linux Process Injection in Linux OS
Explore fileless malware and process injection techniques in Linux systems, enhancing your understanding of advanced cybersecurity threats and defense strategies.
AWS GuardDuty - Post-DNS Era Covert Channel For C&C
Exploring advanced covert communication techniques for malware, including DNS tunneling, cloud services exploitation, and AWS GuardDuty evasion. Discusses mitigation strategies and common security pitfalls.
Detection and Efficiency Testing of Endpoint Security Sensors
Evaluación comparativa de soluciones de seguridad de endpoints, simulando ataques dirigidos para medir la eficacia en detección de amenazas mediante firmas, NGAV y aprendizaje automático.
Russian Malware in the Ukraine War
Explore Russian cyber tactics in Ukraine, including malware attacks on critical infrastructure and the interplay between kinetic and digital warfare. Gain insights into the evolving landscape of modern conflict.
Defending Human Rights in the Age of Targeted Attacks
Exploring targeted attacks on human rights defenders, evolving threats, and Amnesty International's response strategies. Insights on digital surveillance and tools for protecting vulnerable activists.
The State of Malware from the Eye of the Tiger
Comprehensive overview of global malware trends in 2019, focusing on India and the subcontinent. Explores attack methods, vulnerabilities, and successful malware strategies from basic to advanced threats.
Hardware Backdooring is Possible
Demonstration of permanent hardware backdooring using Rakshasa malware, exploring BIOS vulnerabilities and implications for computer security and forensics practices.
Tell How You Attack and I Will Tell You Who You Are
Explore attacker profiling through analysis of attack methods, uncovering insights into cybercriminal identities and motivations. Learn techniques for understanding and predicting adversary behavior.