Securing DNSSEC with Ritual and Ceremony - How Neo-Victorians Keep Out Cads and Bounders
Explore the social factors and ritualized behaviors crucial for DNSSEC key signing ceremonies, examining participant selection, hierarchies, and trust distribution to ensure cryptographic operation credibility.
DevSecOps State of the Union
Comprehensive overview of DevSecOps trends, best practices, and tools, distilling insights from industry experts and mature security programs for practical implementation.
Zero-Trust Networking Is Facilitating Cloud Transformation
Zero-trust networking's role in cloud transformation, featuring real-world examples and insights on how cloud security disrupts traditional hardware markets. Explore the shift to cloud-first strategies and their impact on enterprise IT.
Election Hacking - Trading Malware for Votes
Explore the intersection of cybersecurity and elections, analyzing malware patterns during national polls. Gain insights into strategic traffic analysis and geopolitical correlations for enhanced network security.
BADPDF - Stealing Windows Credentials via PDF Files
Discover how PDF files can be weaponized to automatically leak Windows NTLM hashes, potentially compromising user credentials without interaction.
Keep it Like a Secret - When Android Apps Contain Private Keys
Análisis de seguridad en apps Android: descubrimiento de miles de claves privadas expuestas, técnicas de craqueo de contraseñas y potenciales riesgos asociados.
Practical Steps for Reducing Exposure and Detecting Compromise
Strategies for securing DNS services, protecting against common attacks, and monitoring traffic for compromise. Covers both authoritative and recursive perspectives to enhance overall network security.
Ethical Hacking - DIY Mobile Security Workstation for Cheap
Learn to build a cost-effective mobile security workstation using affordable parts and open-source software. Discover how to create a powerful system capable of running Kali Linux or Parrot OS for ethical hacking and network testing.
Raise the Bar and Make an Impact
Explore holistic cybersecurity approaches beyond technology, focusing on people, processes, and policies. Learn strategies to enhance efficacy and efficiency in securing networks and IT infrastructure.
Protecting People and Content from Threats Already on the Inside
Explore people-centric security strategies to protect intellectual property and valuable content from internal threats in the evolving cybersecurity landscape.
If You’re Not Using SSH Certificates You’re Doing SSH Wrong
Discover why SSH certificates outperform traditional keys for secure access. Learn about their benefits and implementation in this concise, eye-opening talk on modern SSH practices.
RadRAT - An All-in-One Toolkit for Complex Espionage Ops
Uncover RadRAT: a sophisticated, undetected malware with remote access capabilities, lateral movement, and evasion mechanisms for targeted attacks and information exfiltration in large networks.
Chronicle of the Supply Chain Attack and Two Attack Strategies
Explore supply chain attack strategies, including software development environment and update server penetration, through analysis of incidents targeting Korean and global companies.
What Really Happens When Hackers Attack Medical Devices
Explore medical device hacking, FDA regulations, and cybersecurity in healthcare. Includes live demo of network attack and interactive code session on data integrity protection.
IoT Bug Hunting - From Shells to Responsible Disclosure
Explore techniques to circumvent security controls in IoT devices, from uncovering vulnerabilities to responsible disclosure. Gain insights into remote attacks and manufacturer security shortcomings.
Probe to Pwn - Rookie Track
Explore mobile and wireless attack methods, from target identification to device compromise, and learn mitigation strategies to protect against various threats and vulnerabilities.
WireGuard from the Ground Up
Comprehensive overview of WireGuard: its implementation, protocol, cryptography, and comparison with other VPN solutions. Learn when and how to use this efficient end-to-end encryption tool.
A Separate Network for Critical Infrastructure - Is It a Good Idea?
Explore the feasibility, costs, and benefits of creating separate networks for critical infrastructure operations, discussing industry perspectives and government's role in protection.
Cybersecurity Tips, Tools and Techniques for Your Professional Toolbag
Rapid-fire showcase of cybersecurity apps, tools, and advanced techniques for testing, investigations, and administration. Optimize open-source tools for Windows and Linux to enhance your security program.
WPA Migration Mode - WEP is Back to Haunt You
Explore WPA Migration Mode vulnerabilities and how WEP weaknesses resurface, compromising network security. Learn about potential risks and mitigation strategies.
Understanding the Win SMB NTLM Weak Nonce Vulnerability
Explore the Win SMB NTLM weak nonce vulnerability, its implications, and potential exploits in this technical deep dive from security experts Ochoa and Azubel.