Chrome Extension Risks and You
Explore Chrome extension risks, malicious examples, and Lyft's strategic approach to mitigate threats at scale. Learn effective strategies for enhancing browser security.
Hanging on the Telephone - Hacking VoIP
Explore VoIP vulnerabilities and hacking techniques, from historical phone phreaking to modern threats like toll fraud and vishing, with insights on protecting communication systems.
An Effective Approach to Software Obfuscation
Explore effective software obfuscation techniques, their limitations, and a novel approach to enhance code protection against reverse engineering and analysis.
WHOIS Calling the 80s to Get Their Finger Back
Explore creating a remote access trojan using TCP services like Whois and Finger, discussing implementation, detection, and mitigation strategies for this Live Off the Land technique.
Beyond AV - Detection-Oriented File Analysis
Explore advanced file analysis techniques for enhanced threat detection, focusing on Strelka's features and applications in enterprise security.
All Your Containers Are Belong to Us
Explore container orchestration security risks, focusing on exposed management nodes and APIs. Learn implications, recommendations, and see demonstrations of potential exploits in popular platforms.
Friend or Replicant - How Attackers Automate and Disguise Themselves
Explore the tactics behind fake online accounts, from creation to manipulation, and learn how attackers exploit various vectors to influence the digital landscape at scale.
Two-Faces of WASM Security
Explore WebAssembly's dual nature: its potential for malicious use in sophisticated attacks and the vulnerabilities it introduces, presenting challenges for both users and web developers.
Cats in My Certificate Transparency Logs
Explore Certificate Transparency logs: their purpose, functionality, and potential misuse. Learn about SCTs, public keys, and novel applications, including finding cat pictures online.
Hacking with a Heads Up Display
Explore OWASP ZAP's Heads Up Display, a browser-integrated security testing tool designed to make security testing more accessible and user-friendly for developers, QA, and hackers.
Attacking Deep Learning-Based NLP Systems
Explore vulnerabilities in deep learning NLP systems, focusing on word embeddings. Learn to manipulate training data and inject into real-world applications, with emphasis on security implications.
Arcades and Audits - What Gaming Can Do for Your Security Posture
Explore gamification techniques for enhancing security audits and disaster preparedness, combining arcade game benefits with operational resilience strategies for engaging and effective training.
High Performance VM Introspection
Innovative approach to enhance VM introspection performance using in-guest agent and virtualization exception mechanism, addressing security challenges in hypervisor-based solutions.
Security Automation Simplified
Practical guide to implementing security automation using existing tools and basic coding, demonstrating how to streamline SecOps processes and save time without relying on expensive products.
Bye-Bye False Positives - Using AI to Improve Detection
Explore AI-based injection detection using neural networks to reduce false positives in security solutions. Learn about architecture, implementation, and real-world applications.
The Secure Metamorphosis - Streaming Logs with Kafka and TLS
Explore Kafka's TLS configuration for secure, high-performance log streaming. Learn best practices, authentication methods, and troubleshooting techniques for a robust messaging system.
Slack App Security - Securing Your Workspaces From a Bot Uprising
Explore Slack app security, risks, and safeguards. Learn about the app directory, unique challenges, and Slack's efforts to enhance workspace protection against potential threats.
Offensive Javascript Techniques for Red Teamers
Explore advanced JavaScript techniques for red team operations, including browser exploitation, network reconnaissance, and crafting payloads to target internal vulnerabilities quickly and effectively.
Goldilocks and the Three ATM Attacks
Explore three ATM attack case studies, from poor security to zero-day exploits, revealing vulnerabilities and prevention strategies in modern ATM systems.
Back to the SOCless Future
Explore Twilio's journey towards automated security operations, featuring insights on scalable 24/7 monitoring and a serverless automation framework for effective threat response.
How to Lose a Container in 10 Minutes
Explore container security challenges, common deployment mistakes, and real-time vulnerabilities in cloud environments with practical examples and live demonstrations.