Don't Be a Trojan
Explore data security, privacy, and integrity in software development. Learn to protect client information and assess your own security practices.
10 Things Developers Need to Know About Web Application Security
Explore 10 crucial web application security practices for developers, focusing on in-depth insights to make security engaging and integral to project development.
Characterizing Everyday Misuse of Smart Home Devices
Explore everyday misuse of smart home devices, examining user behaviors, security risks, and potential solutions for safer and more effective smart home technology adoption.
Dirty Bin Cache - A New Code Injection Poisoning Binary Translation Cache
Uncover a novel code injection vulnerability in Rosetta 2, exploring its impact on Apple Silicon Macs and discussing potential security implications for binary translation caches.
Windows Hello from the Other Side
Explore Windows Hello vulnerabilities and attack techniques in this IT security talk, covering biometric authentication weaknesses and potential exploits in Windows systems.
Do You Feel Secure
Former black hat hacker Gumm0 discusses cybersecurity risks, ethical hacking, and personal experiences, offering insights on protecting yourself and your company in an increasingly vulnerable digital world.
What the Hack - A Personal Story about Ethical Hacking
Explore ethical hacking through personal stories, hacker profiles, and valuable resources. Gain insights into bug bounty programs and diverse career paths in cybersecurity from industry expert Ben Sadeghipour.
Should You Be Afraid of Hands-On Payment Devices?
Unveiling vulnerabilities in Point of Sale terminals: from anti-tampering mechanisms to cloning. Explore the lifecycle of popular devices and the hacking techniques used to compromise payment security.
How Hardware Boundaries Define Platform Security
Exploring how hardware component boundaries impact platform security, focusing on outsourced components, supply chain risks, and threat modeling gaps in modern hardware architectures.
Hidden Agendas - Bypassing GSMA Recommendations on SS7 Networks
Explores vulnerabilities in SS7 networks, revealing how attackers can bypass security measures to intercept messages and steal money. Discusses the implications for 2G/3G users and highlights a critical flaw in current protection tools.
Hackers the Movie - A Retrospective
Análisis retrospectivo de las técnicas de hacking mostradas en la película "Hackers", demostrando su relevancia actual y cómo se pueden implementar con tecnología moderna de bajo costo para eludir controles de seguridad.
Inspeckage - Android Package Inspector
Inspeckage: A tool for dynamic analysis of Android apps. Simplifies runtime behavior observation through a web interface, intercepting library calls and allowing interaction with app components.
Technical Tactics - Fear & Loathing in Building Management Systems
Explore vulnerabilities in Building Management Systems and their potential impact on safety and security. Learn about risks, attack vectors, and mitigation strategies in this eye-opening presentation.
Don't Get Owned by Your Dependencies
Explore innovative techniques for mitigating memory safety vulnerabilities in third-party C libraries, focusing on Firefox's lightweight in-memory sandboxing approach and the RLBox framework for efficient, secure application development.
X-in-the-Middle - Attacking Fast Charging Piles and Electric Vehicles
Explore security vulnerabilities in DC fast charging protocols for electric vehicles, uncovering potential risks and attack vectors in the rapidly evolving EV charging infrastructure.
Breaking Encrypted Databases - Generic Attacks on Range Queries
Explore techniques for securely storing and querying outsourced data, focusing on range queries. Learn about common building blocks, commercial solutions, and potential vulnerabilities in encrypted databases.
Lessons From Two Years of Crypto Audits
Explore fascinating security issues and risks in memory-safe languages like Rust, based on insights from two years of cryptocurrency audits.
The Spear to Break the Security Wall of S7CommPlus
Unveiling vulnerabilities in S7CommPlus protocol, demonstrating potential security breaches in industrial control systems and proposing countermeasures for enhanced protection.
Everybody Be Cool, This Is a Robbery!
Explore attack paths on a major bank HSM, including unauthenticated methods for full control, in this technical presentation targeting high-security solutions.
Toppling Domino - Testing Security in a Lotus Notes Environment
Explore Lotus Notes/Domino security vulnerabilities and learn effective penetration testing techniques for web servers, native servers, and client-side exploits.
Automate Security Tests for APIs with Syntribos - An Open Source Security Scanner
Explore Syntribos, an open-source automated security scanner for RESTful APIs. Learn its design, configuration, and capabilities to detect vulnerabilities like SQL injection and DoS attacks efficiently.