Detecting Access Token Manipulation
Demystifying Windows access token manipulation attacks and providing effective detection strategies for defensive practitioners in enterprise environments.
Is Your Mental Health for Sale?
Explore the hidden world of data tracking on mental health websites, uncovering privacy risks and ethical concerns in online depression tests and advertising practices.
Death by a Thousand Abstracts - How -Not- to Get Your Research into Black Hat
Discover key insights on crafting compelling research submissions for Black Hat and other industry events. Learn from common mistakes and best practices to increase your chances of being selected as a speaker.
When Everyone's Dog is Named Fluffy - Abusing the Brand New Security Questions in Windows to Gain Domain-Wide Persistence
Explore Windows 10 security questions vulnerability, offering insights on exploiting this feature for persistent access and domain-wide compromise.
Use-After-Use-After-Free - Exploit UAF by Generating Your Own
Explore a novel exploitation technique for UAF vulnerabilities in Adobe Flash, transforming them into multi-class type confusions for full memory access despite recent mitigations.
Woke Hiring Won't Save Us - An Actionable Approach to Diversity Hiring and Retention
Explore actionable strategies for improving diversity in tech beyond hiring, addressing systemic issues in education and workplace retention for underrepresented groups in STEM fields.
Biohacking - The Invisible Threat
Explore bio-hacking, bio-implants, and their impact on physical and digital security. Learn about augmented humans, contactless technology risks, and mitigation strategies.
CISO Leadership - Building Your Personal Action Plan
Develop leadership skills for security teams through actionable strategies, including team building, feedback models, strategic planning, and career management techniques.
How You Can Ask the Right Questions to Succeed with Your Security Projects
Learn to ask effective questions in security projects, enhancing discovery, planning, and persuasion skills through real-world examples and practical techniques for better communication and project success.
Modern Identity Hacking - Have Hackers Really Adjusted to Constant Remote?
Explore modern identity hacking techniques, including MFA bypasses and attacks on authentication protocols, in the context of remote work and cloud-based solutions.
Exploiting XPC in AntiVirus Software
Explore vulnerabilities in macOS antivirus software through XPC exploitation, uncovering security flaws and providing guidance for developers to create secure XPC services.
How to Use Bug Bounty to Start a Career in Silicon Valley
Discover how to leverage bug bounty programs to kickstart a career in cybersecurity and become a competitive candidate for top tech companies in Silicon Valley.
Espionage in the Modern Age of Information Warfare
Explore modern espionage techniques, from classical methods to digital tactics, and their impact on information warfare in today's interconnected world.
Continuous Skills Improvement For Everyone
Explore continuous skills improvement strategies, from hands-on labs to bug bounty programs. Learn to stand out professionally, set goals, and develop both technical and soft skills.
Hack for Show, Report for Dough - Brian King
Learn effective techniques for crafting compelling penetration testing reports that resonate with both technical and non-technical audiences, enhancing communication and impact.
The Faces of MacOS Malware - Detecting Anomalies in a Poisoned Apple
Explore macOS malware detection techniques, built-in utilities exploited by threat actors, and strategies to identify suspicious activity on Apple systems in this comprehensive security analysis.
macOS Security Features Bypasses by Example
Explore macOS security features, vulnerabilities, and bypass techniques with a Microsoft security expert. Gain insights into SIP, TCC, and potential exploit avenues for researchers and professionals.
A Presentation or Presentations Because Presenting
Enhance your presentation skills with strategies from Top Gun and the Army, including effective storytelling techniques and practical tips for impactful delivery.
Subverting Trust in Windows - A Case Study of the How and Why of Engaging in Security Research
Explore Windows security research through a case study on subverting trust, covering dynamic analysis, code signatures, and PowerShell, with insights on validating trust and lessons learned.
Windows Event Logs - Zero to Hero
Comprehensive guide to leveraging Windows Event Logs for security monitoring, from basic concepts to advanced techniques for threat detection and incident response.
World, Film, Game - The Transmedia Storytelling of Golf Club - Wasteland
Explore transmedia storytelling in Golf Club: Wasteland, from concept to game, music, and videos. Learn Unity-based development, workflow, and creative cohesion across media.