A Serverless SIEM - Detecting All Baddies
Explore a serverless SIEM for efficient threat detection, covering log ingestion, analysis, notifications, and automations in cloud-native environments.
Ghost DMA Attack & The SeDeFuS Conundrum
Explore Ghost DMA attacks, their mechanisms, and mitigations. Learn about the SeDeFuS conundrum and its implications for system security in this technical presentation.
Latest Threats and Vulnerabilities to Mission-Critical SAP Applications
Explore latest threats to mission-critical SAP applications, including cloud vulnerabilities, attack lifecycles, and remediation strategies. Gain insights from research labs and real-world examples.
You Don't Have to Be Crazy to Work Here - An Honest Talk About Mental Health
Honest discussion on mental health in cybersecurity, exploring challenges, personal experiences, and effective self-care strategies for professionals in the field.
Your Critical System Is - Not? - Vulnerable - CSAF, VEX, SBOM and the Future of Advisories
Explore the future of vulnerability advisories with CSAF, VEX, and SBOM. Learn about critical system security, risk assessment, and automation in the evolving landscape of cybersecurity.
Revenge on the Worms! Towards Deception Against Automated Adversaries
Explore deception strategies against automated adversaries, focusing on finite state machines, multiple plans, and automated planners. Learn test setups, results, and future implications.
Search Engine Deoptimization with Gootloader
Explore search engine deoptimization techniques used by Gootloader malware, including compromised WordPress sites, malicious SEO, and process hollowing. Learn about server infrastructure and potential countermeasures.
State of DNS Rebinding - Attack & Prevention Techniques and the Singularity of Origin
Explore DNS rebinding attacks, prevention techniques, and the concept of origin singularity. Learn about query analysis, protection bypasses, and practical defense strategies against this web security threat.
SSO Wars - The Token Menace
Explore SSO vulnerabilities, focusing on JWT and SAML tokens. Learn attack vectors, signature verification issues, and real-world implications for frameworks like WCF and SharePoint.
Examining DES-based Cipher Suite Support within the TLS Ecosystem
Explore DES-based cipher suite support in TLS, analyzing prevalence, geographical distribution, and implications for security. Learn why DES persists and how to remove it.
From Email Address to Phone Number - A New OSINT Approach
Explore innovative OSINT techniques to uncover phone numbers from email addresses, enhancing privacy and security investigations with cutting-edge methodologies and tools.
From EK to DEK - An Analysis of Modern Document Exploit Kits
Explore modern document exploit kits, their infection chains, and techniques. Gain insights into ThreadKit, VenomKit, and various exploitation methods used in malicious documents.
Serverless Infections - Malware Just Found a New Home
Explore serverless architecture vulnerabilities and learn how malware can exploit AWS Lambda functions, with insights on prevention and security best practices.
Turning - Page Tables - Bypassing Advanced Kernel Mitigations Using Page Tables Manipulations
Explore advanced kernel exploit techniques using page table manipulations to bypass Windows 10 mitigations. Learn virtualization-based security and memory management concepts.
Watch Out For That Bus! - Personal Disaster Recovery Planning
Practical strategies for personal disaster recovery planning, covering digital security, backups, financial preparedness, and ensuring loved ones can manage your affairs in emergencies.
The Current State of Adversarial Machine Learning
Explore adversarial machine learning's current landscape, including attack types, vulnerabilities, and defense strategies. Gain insights into visual understanding and notable research in this critical field.
Hackademia - The 2018 Literature Review
Explore cutting-edge cybersecurity research, from USB vulnerabilities to compiler techniques, with insights on emerging trends like citizen developers and domestic violence apps.
Bypassing Antivirus Engines Using Open Sourced Malleable C2 Software, MSFVenom, Powershell and a Bit of Guile
Learn techniques to bypass antivirus using open source tools like Malleable C2, MSFVenom, and PowerShell. Explore examples and scripts for more effective penetration testing and security assessments.
Disabling Encryption to Access Confidential Data
Explore techniques for disabling encryption to access confidential data, including man-in-the-middle attacks, AWS vulnerabilities, and TLS exploits. Learn practical methods and necessary tools for intercepting encrypted communications.
What is Agile and How Can I Use it Well?
Learn Agile methodology principles, implementation strategies, and best practices for effective team management and project delivery in this concise, practical guide.
Community Career Panel or How to Get More than a T-Shirt Working at a Con
Explore career opportunities in cybersecurity events through expert insights on volunteering, networking, and professional growth. Gain valuable tips for resume building and conference management.