Bypassing NGAV for Fun and Profit
Explore methodologies to reverse engineer and bypass next-generation anti-virus (NGAV) models, focusing on adversary learning techniques and challenges in cybersecurity.
Insecurity in 2017 - 0 Days Are the Least of Our Problems
Exploring the cyclical nature of cybersecurity threats, this talk emphasizes the importance of basic security practices over obsession with zero-day vulnerabilities, using recent events as examples.
Behind Enemy Lines
Mikko Hypponen explores the evolving online threat landscape, categorizing attackers into criminals, hacktivists, and nation-states. He analyzes their motives, methods, and future trends in cybersecurity.
Hiding in Plain Sight - PhantomLance Comes into Play
Uncover the sophisticated PhantomLance Android spyware, its evolution, deployment tactics, and connections to other malware campaigns in this cybersecurity investigation presentation.
The Air-Gap Jumpers
Explore covert channels for breaching air-gap isolation, including electromagnetic, acoustic, and optical methods. Learn about 'Bridgeware' malware and new air-jumping techniques.
Hack Your ATM with Friend's Raspberry Pi
Explore ATM vulnerabilities and hacking techniques using Raspberry Pi, focusing on device interfaces and communication protocols. Learn about potential security risks and countermeasures in ATM systems.
Exploring Yosemite - Abusing Mac OS X 10.10
Comprehensive analysis of Mac OS X 10.10 Yosemite's security features, demonstrating vulnerabilities, offensive techniques, and introducing a new security tool for detecting rootkits and abnormalities.
Vulnerability Exploitation in Docker Container Environments
Explore Docker container vulnerabilities, exploitation techniques, and security risks. Learn about cgroups, namespaces, and mitigation strategies for protecting critical data in containerized environments.
Hiding In Plain Sight - Advances In Malware Covert Communication Channels
Explores recent malware techniques using steganography and covert channels to evade detection. Analyzes real-world examples from cybercrime and targeted attacks, detailing implementation and discussing implications.
Cybercrime in the Deep Web
Explore automated detection of cybercrime in anonymous networks beyond TOR, including I2P and FreeNET. Learn about DeWA system for identifying emerging threats in the Deep Web.
Android Commercial Spyware Disease and Medication
Explores Android vulnerabilities exploited by spyware and proposes a detection method using fuzz testing to mitigate risks and protect user privacy on smartphones.
Decentralized Malware on the Blockchain
Explore the potential threat of embedding malware in blockchain transactions, its implications for cybersecurity, and possible solutions to mitigate risks in decentralized systems.
Staying Persistent in Software Defined Networks
Explore vulnerabilities in software-defined networks, focusing on ONIE and network operating systems. Learn about potential exploits, malware persistence, and strategies for securing control plane networks.
How Malware Uses and Abuses Your Software
Explore malware tactics, forensic challenges, and strategies to protect software from exploitation. Learn to secure build environments and implement third-party validation for robust cybersecurity.
Hacking the Next Generation
Explore innovative strategies for engaging and educating the next generation of cybersecurity professionals, focusing on effective teaching methods and bridging the skills gap.
Deception at Scale - How Malware Abuses Trust
Explore evolving techniques used by attackers to disguise malware as legitimate, including stolen certificates, hiding in legitimate apps, and exploiting trusted distribution channels. Learn about trends and countermeasures.
Utilizing Lol-Drivers in Post Exploitation Tradecraft
Exploring kernel-mode attack techniques using signed drivers for post-exploitation, including credential dumping, process injection, and C2 communication. Demos showcase practical applications for red teams.
PEsidious - Create Mutated Evasive Malware Using AI
Explore AI-powered malware mutation techniques using Generative Adversarial Networks and Deep Reinforcement Learning to create evasive samples, challenging traditional detection methods and enhancing cybersecurity defenses.
Where Malware Meets Murphy
Exploring worst-case scenarios in ransomware incidents, this talk discusses security infrastructure failures, first responder mistakes, and unexpected challenges in malware recovery.
Simple Spyware - Androids Invisible Foreground Services and How to Abuse Them
Explore Android's permission vulnerabilities, invisible foreground services, and spyware risks. Learn detection methods and protective measures for enhanced mobile security.
The Discovery of a Government Malware and an Unexpected Spy Scandal
Explore the eSurv case study and trace the evolution of lawful intercept from Windows Trojans to professional spyware, uncovering a government malware scandal and its implications.