Event-based Fuzzing, Patch-based Research, and Comment Police - Finding Bugs Through a Bug
Discover innovative bug-hunting techniques: event-based fuzzing, patch analysis, and comment inspection. Learn to leverage known vulnerabilities for deeper security research in Chrome and Android.
Fuzzing and Breaking Security Functions of SIMATIC PLCs
Explore techniques for cracking TLS protocols, conducting security protocol fuzzing, and analyzing vulnerabilities in Siemens S7-1500/S7-1200 PLCs, with practical demonstrations of exploiting and controlling these industrial devices.
Exploring Security Vulnerabilities in Flutter Mobile Applications
Discover critical security vulnerabilities in Flutter apps through reverse engineering techniques, focusing on hardcoded credentials and using tools like B(l)utter to analyze and protect mobile applications.
Bluetooth Blues: Unmasking CVE 2023-52709 - The TI BLE5-Stack Attack
Dive into the technical analysis of CVE 2023-52709, exploring Bluetooth stack vulnerabilities, their impact on automotive security, and essential mitigation strategies for RPA generation failures.
Cybersecurity Evolution at NSA: From Cryptography to Global Internet Defense
Gain insights into cybersecurity evolution through a 35-year NSA veteran's journey, exploring vulnerability analysis, defense strategies, and the complex interplay between defense and intelligence operations.
Small Satellite Modeling and Cybersecurity - Building Defensive Solutions for Space Systems
Explore cybersecurity challenges and defensive strategies for small satellite systems, including modeling techniques, vulnerability analysis, and the innovative Small Satellite Defender solution.
Enhancing Security and Software Supply Chain - Recent and Upcoming Features in Harbor
Harbor's latest releases focus on security and software supply chain, introducing Security Hub for vulnerability analysis, SBOM generation, improved garbage collection, and OCI specification alignment.
Bypassing Many Kernel Protections Using Elastic Objects
Explore advanced techniques for bypassing kernel protections through elastic objects, presented by Ph.D. students Yueqi Chen and Zhepeng Lin.
LCDPwn - Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities Again
Explore Layer 2 Discovery Protocol vulnerabilities in enterprise devices, uncovering neglected attack surfaces and analyzing recent research to improve network security.
Debug for Bug - Crack and Hack Apple Core by Itself
Explore Apple kernel vulnerabilities through fuzzing, including double free and out-of-bounds issues. Learn about debugging and fuzzing techniques for uncovering security flaws in Apple's core systems.
Never Let Your Guard Down - Finding Unguarded Gates to Bypass Control Flow Guard with Big Data
Explore techniques to bypass Control Flow Guard in Windows using big data analysis, focusing on unguarded gates and indirect branches for enhanced security understanding.
A Secure Journey on Kubernetes
Explore Kubernetes security layers, from infrastructure to application runtime. Learn to analyze, scan, and mitigate vulnerabilities for a more secure containerized environment.
Unraveling the Threads of USPS Smishing and Fighting Back - Reverse Engineering SMS Phishing Kits
Dive into the technical investigation of USPS-themed SMS phishing attacks, exploring vulnerability exploitation, reverse engineering techniques, and methods to combat scammer operations targeting US consumers.
The Internet of Pwned Things
Explore real-world IoT vulnerabilities, their exploitation, and impact. Learn industry best practices to prevent future incidents in this eye-opening talk on connected device security.
Investigating Propagated Vulnerabilities from Ethereum to Layer-2 Blockchains
Explore how vulnerabilities propagate from Ethereum to Layer-2 blockchains, featuring BlockScope tool analysis and discovery of 15 zero-day vulnerabilities across BSC, Optimism, Base, and Mantle networks.
Driving Your Own Vulnerability: How to Navigate the Road of BYOD Attacks
Explore Windows driver vulnerabilities and BYOD attack prevention through real-world case studies, understanding threat categories and security implications for effective system protection.
Physical Attacks Against Smartphones: Android Security Vulnerabilities and Exploits
Discover physical attack vulnerabilities in Android smartphones, from Recovery mode exploits using SD cards to USB stack weaknesses in secondary bootloaders for achieving root access and code execution.
Outlook Unleashing RCE Chaos: Understanding CVE-2024-30103
Dive into the critical Outlook security vulnerabilities, exploring RCE exploits through COM objects, NTLM leaks, and essential mitigation strategies for enterprise protection.
Security Vulnerabilities in Video Surveillance Systems and Supply Chain Analysis
Explore security vulnerabilities in surveillance systems, focusing on NVR devices from major vendors like Hikvision and Dahua, while examining supply chain risks and exploitation scenarios.
LinkDoor - A Hidden Attack Surface in the Android Netlink Kernel Modules
Explore Netlink vulnerabilities in Android kernel modules, uncovering security threats and exploitation techniques. Learn to analyze and mitigate risks in this overlooked attack surface.
2023 OT Cybersecurity Vulnerability Briefing - Risk-Based Management Insights
Insightful analysis of 2023 OT vulnerabilities, focusing on risk-based management, critical disclosures, and emerging trends in operational technology environments.