Hacking Norwegian Banks Through Paper-Based Identity Theft
Uncover shocking vulnerabilities in Norwegian banking systems through real-world examples of identity theft and unauthorized access, revealing critical lessons about paper-based security flaws.
Social Engineering Techniques for Physical Access Red Team Operations
Dive into real-world social engineering tactics through a first-person narrative of complex red team operations, exploring methodologies for physical access and critical infrastructure penetration testing.
Exploiting Voice Cloning in Adversarial Simulation - Security Testing and Defense Strategies
Explore the security vulnerabilities of voice verification systems through deep learning voice cloning techniques, including practical demonstrations, risk assessment, and defensive countermeasures.
Scam as a Service Powered by Telegram
Uncover how cybercriminals leverage Telegram for scam operations, exploring tactics, infrastructure, and prevention methods in modern digital fraud schemes.
Cloud Kleptos: Lessons Learned Responding to Scattered Spider - SANS DFIR Summit 2024
Explore advanced cloud-focused attack techniques and defense strategies against persistent threat actors like Scattered Spider. Learn about their methodical approach, TTPs, and how to protect your organization's assets.
AI and Disinformation Campaigns: Impacts and Prevention
Explore AI's role in global disinformation campaigns, their long-term impacts, and strategies for individuals to combat misinformation in the digital age.
The Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?
Explore ethical challenges and solutions in handling social engineering pentest aftermath, focusing on responsibility, consequences, and improving security culture.
CatPhish Automation - The Emerging Use of Artificial Intelligence in Social Engineering
Explore how advanced AI is being incorporated into fraudulent scams and phishing attacks, and its implications for future cybersecurity threats.
Protecting the Organization - The Psychology of Social Engineering
Explore the psychological aspects of social engineering attacks and learn effective strategies to safeguard your organization against human-targeted security vulnerabilities.
Social Engineering with AI: From Traditional Attacks to Next-Generation Techniques
Discover how AI tools transform social engineering tactics, from crafting sophisticated phishing to conducting vishing operations, while learning both offensive techniques and defensive strategies for modern security awareness.
Unraveling the Threads of USPS Smishing and Fighting Back - Reverse Engineering SMS Phishing Kits
Dive into the technical investigation of USPS-themed SMS phishing attacks, exploring vulnerability exploitation, reverse engineering techniques, and methods to combat scammer operations targeting US consumers.
Attacking and Defending Mobility and IoT on the Enterprise Network
Exploring modern mobile and IoT security challenges, this talk examines current enterprise defenses, demonstrates their shortcomings, and offers practical solutions for improving security in the evolving threat landscape.
A Tale of Two Sides of 2FA
Explore the complexities of two-factor authentication, its implementation challenges, and best practices for enhanced security in applications. Learn from real-world examples to protect users effectively.
Analysis of and Lessons from the Xz-Utils Vulnerability - What Might Come Next
Delve into the technical analysis of the xz-utils vulnerability incident, exploring the combined attack techniques, social engineering aspects, and future implications for open-source software security.
Multi-Step Initial Access Strategies: Desperate Infection Chains - Part 2
Explore modern infection chain techniques and multi-step strategies used by threat actors for initial access, focusing on post-MOTW era tactics and file format exploitation.
Identifying and Securing Psychologically Vulnerable Users
Explore psychological traits that make users vulnerable to security threats and learn data-driven strategies to enhance organizational security and red team effectiveness.
Social Engineering Attack: How to Rob a Bank Over the Phone
Dive into a real-world social engineering case study where an expert demonstrates how he gained unauthorized access to a bank's systems through sophisticated phone manipulation techniques.
Open Source Intelligence Gathering for Security Testing - Recon 101
Master essential OSINT techniques and reconnaissance tools to efficiently gather critical intelligence about organizational infrastructure and potential security vulnerabilities without active network engagement.
Social Engineering and Real-Time Malware Attack Strategies - War Stories
Explore real-world social engineering tactics in targeted malware attacks, where attackers use direct communication and psychological manipulation to achieve successful system compromises.
Hacking War Stories: From Prison Systems to Tech Companies - A Series of Unfortunate Events
Dive into real-world hacking adventures, from prison systems to major tech companies, exploring identification, exploitation techniques, and potential impact across different organizational contexts.
Pwning the Pwners with Mindware - Using Cyberpsychology and AI for Defensive Strategy
Discover how cyberpsychology and AI can empower defenders to exploit human vulnerabilities in cyber attacks, turning defense into an offensive advantage through psychological tactics.