Solving Threat Detection
Explore key issues in threat detection, including information sharing, SOC models, and tooling challenges. Learn practical solutions and real-world examples from Countercept's hunt team experiences.
Random Problems in IoT
Explore IoT device security vulnerabilities related to random number generation, their impact on cryptography, and potential solutions for embedded systems.
Hunt Or Be Hunted
Explore advanced threat hunting techniques, datasets, and analytical approaches for effective cybersecurity. Learn to detect compromises missed by traditional methods and improve defensive strategies.
Truly Anonymous Credentials Using Modern Cryptography
Explore anonymous authentication using linkable ring signatures, enabling spam prevention without compromising user privacy. Learn cryptographic principles and see a demo of an anti-spam anonymous forum on Tor/I2P.
WiFi-based IMSI Catcher
Explore WiFi-based IMSI catchers, their potential for easier smartphone tracking, and learn about mitigation strategies for vendors, operators, and users to address privacy concerns.
The Underground Economy of Apple ID
Explore the underground economy of Apple IDs, including real-world attacks, profit methods, and protective measures. Learn about vulnerabilities and Apple's mitigation efforts.
BeyondCorp - Beyond "Fortress" Security
BeyondCorp: A new security model that grants access based on device and user credentials, eliminating the need for traditional VPNs and enabling secure work from any network.
Advanced Internet Dataset Combinations for Threat Hunting and Attack Prediction
Explore advanced techniques for threat hunting and attack prediction using innovative Internet dataset combinations, moving beyond traditional methods for enhanced cybersecurity.
Weathering the Storm - The Art of Crisis Communications
Mastering crisis communications in security: strategies for effective internal and external stakeholder management during high-pressure situations.
Reducing Mixtape to Master Key Scenarios - How to Block the Dark Army from Mayhem Using API-Driven Access Control
Discover API-driven access control strategies to enhance security by eliminating "master keys" and implementing temporary, context-based privileged access in your infrastructure.
Hijacking .NET to Defend PowerShell
Explore stealthy .NET hijacking techniques for defending against PowerShell attacks, covering assembly modification, injection, profiling, and function hooking from a blue team perspective.
Five Keys to Building an Application Security Program in the Age of DevOps
Discover strategies for integrating security into DevOps practices, balancing risk management with rapid development, and implementing automated security measures for more secure code delivery.
Bypassing Malware Analysis Sandboxes Is Easy - Let’s Discuss How They Are Doing It and Why It Works
Explore techniques used by malware to evade analysis sandboxes, comparing various sandbox solutions and their effectiveness in detecting and analyzing different types of malware.
Assessing the Embedded Devices On Your Network
Explore embedded device security challenges, threat modeling, and assessment techniques through a VoIP phone case study. Learn hardware tricks, debugging methods, and potential mitigations for vulnerabilities.
When Bandit Strikes - Defend Your Python Code
Discover and defend against common security flaws in Python code using Bandit. Learn customization, CI pipeline integration, and extension techniques for enhanced code security.
Swimming Upstream - Regulation vs Security
Strategies for navigating regulatory challenges in security, balancing compliance with effective security practices across industries. Insights on driving change and achieving security goals.
A Year in the Wild - Fighting Malware at the Corporate Level
Explore Yelp's automated malware defense system, featuring in-house tools like AIR and OSXCollector, complemented by open-source solutions for swift threat detection and response in corporate networks.
Sweet Security - Deploying a Defensive Raspberry Pi
Explore open-source tools and inexpensive hardware like Raspberry Pi to monitor, protect, and mitigate threats in IoT environments, addressing security challenges of outdated devices.
Fraud Detection and Real-time Trust Decisions
Explore fraud detection techniques in online commerce, from traditional attacks to real-time marketplace challenges. Learn about combating fraud and its parallels with network security.
Fuzz Smarter, Not Harder - An AFL-Fuzz Primer
Comprehensive guide to efficient fuzzing using afl-fuzz, covering instrumentation techniques, optimization strategies, and crash analysis for effective bug hunting and software security testing.
Elliptic Curve Cryptography for Those Who Are Afraid of Math
Demystifying Elliptic Curve Cryptography: Learn the basics, understand its applications, and grasp the importance of ECC expertise without delving into complex mathematics.