Defending Against Robot Attacks
Explore physical and social robot attacks through live demos, learning practical defenses for your workspace and home against potential robotic threats.
Personal Information Leakage by Abusing the GDPR 'Right of Access'
Explores GDPR 'Right of Access' vulnerabilities, revealing how impersonation tactics can lead to unauthorized data access. Offers insights on improving identity verification processes for enhanced data protection.
Deepfake Social Engineering - Creating a Framework for Synthetic Media Social Engineering
Explore the risks of deepfake technology in social engineering, learn about a new framework for understanding these attacks, and discover practical countermeasures to protect against synthetic media threats.
A Deep Dive Into Malicious Documents
Comprehensive analysis of malicious Office documents, covering macro analysis, obfuscation techniques, shellcode execution, and OS X targeting. Equips attendees to handle various maldoc threats.
Hacking in the Far East
Explore security challenges and hacking techniques in Japan, South Korea, and Hong Kong. Gain insights into corporate policies, smart cards, social engineering, and unique cultural aspects affecting cybersecurity in East Asia.
The Hardware Pivot
Explore physical attack risks in large-scale device networks, focusing on modchips and counterfeit parts. Learn about threat propagation and strategies for securing hardware infrastructure.
Desert Falcons on a Cyberhunt
Explore the tactics of cyber espionage group Desert Falcons, including their infection methods, social media exploitation, and targeted campaigns in the Middle East.
Hanging on the Telephone - Hacking VoIP
Explore VoIP vulnerabilities and hacking techniques, from historical phone phreaking to modern threats like toll fraud and vishing, with insights on protecting communication systems.
Phishy Little Liars - Pretexts That Kill
Discover advanced techniques for creating specialized, custom pretexts in penetration testing, using target-specific data to enhance effectiveness and avoid detection.
Prevent Phishing & Impersonation
Explore innovative approaches to prevent phishing and impersonation attacks in digital systems. Learn about trust-based identity models and a prototype address book that enhances security without compromising usability.
Catch Me, Yes We Can - Pwning Social Engineers Using Natural Language Processing Techniques in Real-Time
Explore techniques to detect and prevent social engineering attacks across various communication channels using content-based analysis and natural language processing.
Weaponizing Data Science for Social Engineering - Automated E2E Spear Phishing on Twitter
Automated spear phishing on Twitter using machine learning and social engineering techniques. Explores target profiling, content generation, and high-value target identification for more effective phishing campaigns.
AntiFreeze Hamburger12 - How I Got Network Creds Without Even Asking - A Social Engineering Case Study
Explore a real-world social engineering case study revealing how network credentials were obtained without direct requests, highlighting vulnerabilities and tactics used in cybersecurity breaches.
APT Cyber Cloud of the Internet of Things
Explore advanced persistent threats, cloud computing, and IoT security in this talk. Learn about social engineering risks and effective cybersecurity strategies for modern digital landscapes.
Social Engineering - Security Through Education
Explore social engineering techniques and learn how education can enhance security measures. Gain insights into protecting against manipulation and unauthorized access in information security.
SE Exploit by Improvisación
Exploración de técnicas de ingeniería social y explotación de vulnerabilidades mediante improvisación en ciberseguridad, presentado en DefCamp 2016.
HALT AND CATCH FIRE - Social Engineering CTFs for Fun to a Job as a Professional Red Team Social Engineer
Explore the transition from social engineering competitions to professional red team engagements, examining the differences in tactics, strategies, and real-world applications.
Security Theatre
Explore web security threats, vulnerabilities, and best practices. Learn about encryption, authentication, and strategies to protect against hacks and social engineering in this comprehensive talk.
Exploiting Curiosity and Context - How to Make People Click on a Dangerous Link
Explores how curiosity and context influence clicking on dangerous links, analyzing user behavior and reasoning to improve cybersecurity strategies and protection mechanisms.
Language Properties of Phone Scammers - Cyberdefense at the Level of the Human
Explore forensic linguistics in cybersecurity, analyzing language patterns of phone scammers to enhance human-level defense against social engineering attacks.
Does Dropping USB Drives in Parking Lots and Other Places Really Work?
Explores the effectiveness of USB drive-based attacks through a campus experiment, revealing high success rates and analyzing factors influencing user behavior. Discusses mitigation strategies and demonstrates new tools.