The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers
Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.
Integrating Mobile Devices into Your Penetration Testing Program - DefCamp 2015
Explore integrating mobile devices into penetration testing programs, covering security risks, attack vectors, and defensive strategies for corporate and personal devices.
Offensive and Defensive Sides of Cloud Security - DefCamp - 2021
Explore offensive and defensive cloud security strategies, including risks, audits, penetration testing, and real-world attack scenarios in this comprehensive DefCamp presentation.
From Threat Intelligence to Rapsheets in Just a Few Steps - DefCamp - 2016
Explore threat intelligence transformation into actionable data using innovative techniques like honeypots, passive DNS, and graph-based models for enhanced cybersecurity analysis and decision-making.
Security Through Design
Explore security through design principles, examining real-world examples and innovative approaches to create safer digital environments and user interactions.
The Abuse Uncertainty Principle, and Other Lessons Learned from Measuring Abuse on the Internet - David Freeman - USENIX Enigma Conference - 2020
Explore strategies for measuring and prioritizing online abuse, including user reports, human labeling, and automated systems. Learn about the "Abuse Uncertainty Principle" and its implications for detection and metrics.
Social Engineering - Lateral Phishing Attack - Jorge Martin Vila - Ekoparty Security Conference - 2020
Explora técnicas de ingeniería social y phishing lateral, analizando casos reales y estrategias defensivas para mejorar la seguridad en entornos empresariales.
Can We Automate Security?
Explore Microsoft's CI/CD pipeline security tools and lessons learned, focusing on automation strategies to enhance product and service security in the development process.
WebAuthn 101 - Demystifying WebAuthn
Demystifying WebAuthn: Learn about its use cases, implementation, and future developments in web authentication, essential for any service implementing user login.
Under the SEA - A Look at the Syrian Electronic Army's Mobile Tooling
Explore the Syrian Electronic Army's mobile surveillance tools, focusing on SilverHawk, its capabilities, and deployment methods in this cybersecurity analysis.
Uncovering Large Scale Fraud Operations
Uncover advanced fraud techniques targeting digital credentials and learn strategies to counter large-scale account takeover threats in the wake of accelerated digital transformation.
Phish Your Employees Now or Get Phished
Learn effective phishing simulation techniques to strengthen your organization's security awareness program and protect against cyber threats.
Phishing - Going from Recon to Credentials
Explore phishing techniques, from reconnaissance to credential theft, with insights on attack methods, tools, and automation for enhanced cybersecurity awareness.
Powershell and You - Using Microsoft's Post Exploitation Language
Explore PowerShell's potential for cybersecurity, from basic cmdlets to advanced scripting techniques. Gain insights into its use in hacking, post-exploitation, and incident response.
Chrome Security Secret Sauce
Explore Chrome's security features, threats, and protective measures. Learn about browser exploits, phishing, SSL attacks, and defense strategies from Google's "Security Princess".
Dark Caracal Part II - Where in the World is Caracal?
Uncover Dark Caracal's infrastructure, identities, and operational base. Explore the implications for nation-state malware and future cyber campaigns.
Break Me07 Phishing - Going from Recon to Creds
Comprehensive guide to phishing attacks: from initial reconnaissance to obtaining credentials, presented by cybersecurity experts Adam Compton and Eric Gershman at DerbyCon 2015.
Battling Supermutants in the Phishing Wasteland
Explore the modern phishing landscape, its economy, and key players. Learn about phishing kit authors, their tactics, and strategies to combat this persistent cybersecurity threat.
Fangxiao - A Chinese Phishing Threat Actor
Explore the tactics and impact of Fangxiao, a Chinese phishing threat actor, in this insightful presentation by cybersecurity experts Emily Dennison and Alana Witten.
Ichthyology - Phishing as a Science
Explore real-world phishing attacks, psychological tactics, and advanced prevention techniques. Learn evidence-based strategies to protect against credential theft in this insightful cybersecurity presentation.
Cloak & Dagger - From Two Permissions to Complete Control of the UI Feedback Loop
Unveiling Android vulnerabilities: combining permissions for stealthy UI control attacks, exploring security mechanisms, and discussing potential countermeasures and Android team responses.