Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE
Explore Kerberos delegation vulnerabilities in Windows networks, learning techniques for unauthorized impersonation and remote code execution. Gain insights into potential security risks and mitigation strategies.
Detach Me Not - DoS Attacks Against 4G Cellular Users Worldwide from Your Desk
Explores DoS attacks on 4G cellular networks, revealing vulnerabilities in mobile communication systems and their potential for user tracking and manipulation. Discusses implications for security and privacy in telecommunications.
Migrating from F5 to AVI Load Balancer - Lessons Learned in Production
Discover practical insights and field-tested strategies for transitioning from F5 to AVI load balancers, covering architecture, automation, policies, NSX integration, maintenance, and RBAC implementation.
VMware Cloud Director and NSX Integration for Multi-tenant Environments
Explore VMware Cloud Director's evolution and integration with NSX, focusing on multi-tenant cloud environments and practical implementation through detailed demonstrations and documentation.
Rugged Reperimiterisation
Explore network security evolution beyond perimeter-based models, addressing flawed assumptions and implementing modern approaches for robust protection.
Whispered Secrets
Explore software engineering's complex world, from secrecy and laws to encryption and architecture. Gain insights on trust, security, and modern development practices.
Insights in Container Security
Explore container security features, threats, and best practices for Docker in production environments. Learn about isolation, Linux capabilities, namespaces, and defense-in-depth strategies.
The Hacker’s Guide to Kubernetes Security
Comprehensive guide to Kubernetes security risks, focusing on OWASP Top 10. Live demos of exploits, common vulnerabilities, and best practices for hardening k8s clusters.
Building a One-Time-Password Token Authentication Infrastructure
Explore a robust one-time-password token authentication system for multi-site use, featuring Kerberos support, fault tolerance, and minimal management overhead. Learn from LIGO's real-world implementation and experiences.
How AI is Transforming Network Security and User Experience
Explore how integrated AI revolutionizes SASE solutions, enhancing network security and user experience through consolidation, advanced techniques, and unified management.
EXPOSURE - The 4th Annual RSAC SOC Report
Dive into the humorous and eye-opening findings from monitoring the RSAC wireless network, revealing surprising user behaviors and evolving trends in cybersecurity awareness.
Key Agreement
Explore multi-user CDH problems, concrete security of NAXOS and HMQV, and wireless-channel key exchange in this cryptography session on advanced key agreement techniques.
Secure Socks - Exploring Microservice Security in an Open Source Sock Shop
Exploring microservice security through an open-source sock shop, covering PCI compliance, trust, surface area limitation, container security, network segmentation, and software-defined networking.
Unexpected Exposures in the Secure Shell - SSH Security Testing and Research
Delve into SSH security vulnerabilities, implementation challenges, and exploitation techniques across various platforms, featuring the new open-source testing tool 'sshamble'.
Breaking Network Crypto in Popular Chinese Keyboard Apps
Uncover security vulnerabilities in Chinese IME keyboards' network protocols and how attackers can intercept keystrokes from 800 million users due to poorly implemented encryption methods.
Reverse Engineering and Hacking Ecovacs Robots - Security Vulnerabilities and Privacy Concerns
Dive into the security vulnerabilities of Ecovacs robots, exploring broken encryption, unauthorized camera access, and privacy concerns while learning techniques for privacy-preserving usage and rooting.
Using Bloodhound as a Defender: Tips from the Red Team
Discover how to leverage BloodHound from a red team perspective to identify and remediate critical Active Directory security flaws, with practical insights using the new ad-recon automation tool.
Getting Started in Industrial Control Systems Cybersecurity - Beyond Engineering
Discover how to break into Industrial Control Systems (ICS) cybersecurity, exploring career paths, debunking myths, and gaining practical insights for protecting critical infrastructure.
Network Forensic Analysis in an Encrypted World
Explore network forensics in encrypted environments, focusing on metadata analysis, hunting techniques, and leveraging encryption for defense. Learn to adapt and thrive in modern cybersecurity landscapes.
Protecting Windows Credentials - An Excessive Guide for Security Professionals
Comprehensive guide for security professionals on safeguarding Windows credentials, covering architecture, isolation, exploit mitigation, and containment strategies for enhanced system protection.
Network Survival WCS
Explore network survival strategies and techniques with James Costello, focusing on common ground approaches to enhance cybersecurity resilience and protect critical infrastructure.