How I Could Have Stolen Your Photos From Google
Uncover a critical security vulnerability in Google Photos and learn how it could have compromised user privacy. Gain insights into responsible disclosure and ethical hacking practices.
Building a Secure Open Source Project on GitHub
Learn to secure open source projects on GitHub using free tools for dependency protection, code scanning, vulnerability management, and fostering community collaboration.
Bugs Are Shallow - Finding Vulnerabilities in Top GitHub Projects
Explore techniques for identifying vulnerabilities in popular open-source projects on GitHub, enhancing your security research skills and contributing to safer software.
Outsmarting Smart Contracts - Security Vulnerabilities and Attack Vectors
Explore smart contract vulnerabilities, attack vectors, and security best practices in blockchain applications, with insights on responsible disclosure and real-world hacking incidents.
Securing Containers - One Patch at a Time
Explore CVE-2016-9962: discovery, implications, and resolution. Dive into kernel boundaries, system calls, and address space randomization for enhanced container security.
The Dark Playground of CI/CD - Attack Delivery by GitHub Actions
Explore potential attack vectors in GitHub Actions, including novel techniques like Malicious Custom Action and GitHub Actions C2. Learn about CI/CD security threats and their implications.
How to Start a Cyber War - Lessons from Brussels - EU Cyber Warfare Exercises
Explore EU cyber warfare exercises, challenges, and lessons learned from simulated scenarios, including power plant attacks and insider threats.
Mehr schlecht als Recht - Grauzone Sicherheitsforschung
Rechtliche Herausforderungen und Grauzonen bei der IT-Sicherheitsforschung: Ein Erfahrungsbericht über Reverse Engineering, Urheberrechtsfragen und den Umgang mit Herstellern bei der Aufdeckung von Schwachstellen.
All Wireless Communication Stacks Are Equally Broken
Exploring vulnerabilities in wireless communication stacks, including LTE, Wi-Fi, Bluetooth, and NFC. Discusses firmware exploitation, responsible disclosure, and potential attack vectors in modern devices.
Offensive Javascript Techniques for Red Teamers
Explore advanced JavaScript techniques for network reconnaissance and exploitation, focusing on rapid execution and targeting internal vulnerabilities from external sources.
A Market Solution for Product Safety and Corporate Governance
Exploring innovative approaches to monetize vulnerabilities and address product security issues through cybersecurity-backed short positions in financial markets.
Lack of Self Isolation - Inside a Container Exploit
Explore container vulnerabilities, focusing on lack of self-isolation. Learn about potential exploits, their causes, and solutions for improved container security.
Running Away from Security - Web App Vulnerabilities and OSINT Collide
Explore web app vulnerabilities and OSINT techniques, focusing on fitness tracking apps and their potential security risks. Learn to protect your online presence and data.
A Place to Hang Our Hats - Security Community and Culture
Explore the evolving security landscape, from elite culture to responsible disclosure, with insights on growth, statistics, and cybercrime. Gain perspective on industry trends and challenges.
Finding, Investigating, Report and Publishing Privacy Issues on Mobile Platforms
Explore mobile platform privacy issues, responsible disclosure, and the importance of public awareness in this insightful talk on investigating and reporting security vulnerabilities.
Attacking Industrial Remote Controllers
Exploring vulnerabilities in industrial RF remote controllers, revealing security flaws and potential attacks. Includes demos, findings, and recommendations for improving safety in IIoT applications.
Bounty - Building a Coordinated Bug Disclosure Bridge for the EU
Exploring the creation of a new EU-endorsed bug bounty platform, focusing on international collaboration, security standards, and benefits for both hunters and companies.
Responsible Disclosure - Who Cares
Explore real-world experiences of security researchers attempting responsible disclosure, highlighting challenges, vendor responses, and lessons learned in vulnerability reporting.
Breaking into Embedded Devices and IoT Security
Explore tools and techniques for identifying vulnerabilities in embedded devices and IoT, covering common attack vectors, responsible disclosure, and the overlap with OT/ICS security challenges.
The Hip Hacker's Guide to Policy
Explore cybersecurity policy with experts, discussing key issues, trends, and strategies for effective advocacy in the rapidly evolving digital landscape.
Deine Software, die Sicherheitslücken und ich
Verantwortungsvoller Umgang mit Sicherheitslücken: Entdeckung, Meldung und rechtliche Aspekte. Einblicke in Responsible Disclosure und Best Practices für Unternehmen beim Umgang mit gemeldeten Schwachstellen.