Why Can't We Have Nice Things - Conflict Resolution in InfoSec
Explore conflict resolution in InfoSec, understanding why conflicts often escalate and learning strategies to resolve disagreements productively without burning bridges.
Metabadger - Automating IMDS Protection at Scale in AWS
Discover Metabadger, an open-source tool for upgrading EC2 instances to IMDSv2, preventing SSRF-based credential theft. Learn how Salesforce automated IMDS protection at scale in AWS.
Emerging Best Practices in Software Supply Chain Security - What We Can Learn from Google, the White House, OWASP, and Gartner
Explore emerging best practices in software supply chain security, analyzing guidelines from major organizations to compile key strategies for mitigating risks in deployment pipelines.
Developing a Baseline Security Standard for Endpoint Devices
Explore the development of baseline security standards for endpoint devices in a Zero Trust Network implementation, focusing on OS security capabilities and threat vector identification.
If You’re Not Using SSH Certificates You’re Doing SSH Wrong
Discover why SSH certificates outperform traditional keys for secure access. Learn about their benefits and implementation in this concise, eye-opening talk on modern SSH practices.
RadRAT - An All-in-One Toolkit for Complex Espionage Ops
Uncover RadRAT: a sophisticated, undetected malware with remote access capabilities, lateral movement, and evasion mechanisms for targeted attacks and information exfiltration in large networks.
Deconstructing APT28's XAgent for OSX
Detailed analysis of APT28's XAgent malware for macOS, exploring its advanced spying capabilities including keylogging, screen capture, and data exfiltration from iOS backups.
Why Information Security Should Be Important to All of Us
Overview of information security's impact on daily life, from online shopping to e-commerce businesses. Emphasizes importance of personal security practices for protecting passwords, identity, and company reputation.
Probe to Pwn - Rookie Track
Explore mobile and wireless attack methods, from target identification to device compromise, and learn mitigation strategies to protect against various threats and vulnerabilities.
Crawling Metadata with Recon-ng
Explore metadata extraction using Recon-ng plugin metadamn.py, learning about its capabilities, challenges, and future developments in web reconnaissance.
InfoSec is a Board Responsibility
Elevate InfoSec to a governance issue by speaking 'board talk', addressing objections, and tailoring proposals to focus on measurable benefits, risk mitigation, and corporate objectives.
Introducing Opabinia - SSLAuditor4
Introducing Opabinia: An automated tool for comprehensive SSL and RDP security assessments, enhancing accuracy and efficiency in identifying vulnerabilities and expired certificates.
A Look at Modern Warfare
Explore the economic impact of cyber warfare compared to traditional military conflicts, analyzing cost-effectiveness and strategic implications in modern combat scenarios.
The Joy of Passwords
Explore password security, learn about vulnerabilities, and discover effective strategies for creating and managing strong passwords to enhance your online protection.
Run-Time Tools to Aid Application Security Assessments
Explore runtime tracing tools and techniques for application security assessments, enhancing your ability to uncover vulnerabilities in real-world testing scenarios.
Rise of the Vermilion - Cross-Platform Cobalt Strike Beacon Targeting Linux and Windows
Explore the first cross-platform Cobalt Strike re-implementation, Vermilion Strike, targeting both Linux and Windows in real-world attacks. Learn about this significant malware discovery.
JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s
Explore JavaScript obfuscation techniques and learn a method for detecting packers to identify obfuscated files, crucial for understanding modern security threats.
Red Teaming macOS Environments with Hermes the Swift Messenger
Explore the development of Hermes, a Swift implant for macOS red teaming, integrated with Mythic C2 framework. Learn about its capabilities and detection methods using Apple's ESF.
WireGuard from the Ground Up
Comprehensive overview of WireGuard: its implementation, protocol, cryptography, and comparison with other VPN solutions. Learn when and how to use this efficient end-to-end encryption tool.
Keynote - We Need More Mediocre Security Engineers
Challenging elitism in cybersecurity, this talk advocates for inclusivity and rethinking entry barriers to address growing demand and burnout in the field.
Hacker TikTok - Community, Creativity, and Controversy
Panel discussion exploring security-focused TikTok creators' experiences in bringing hacking awareness, humor, and community to a new audience, highlighting successes and challenges in this emerging frontier.