Exploit Hall of Fame - Techniques and Innovations
Renowned security researcher Thomas Dullien explores notable exploits in this insightful talk, offering valuable insights for cybersecurity professionals and enthusiasts.
Phish and Furious - Campaign Builder Vulnerabilities in a Blink and Breach World
Explore campaign builder vulnerabilities and phishing attack strategies with real-world case analyses. Learn dynamic cybersecurity defense techniques for evolving digital threats.
Structured Scorecard Results: Tailor Your Own Supply-Chain Security Policies
Learn to customize OpenSSF Scorecard for tailored supply-chain security assessments using Structured Results feature. Explore practical examples and use cases for automated policy-driven analysis.
Implicit and Mutation-Based Serialization Vulnerabilities in .NET
Explores novel .NET serialization attacks bypassing current mitigations, demonstrating vulnerabilities in popular platforms and offering detection and mitigation techniques for developers.
Breaking RSA Authentication and Bitstream Recovery From Zynq-7000 SoC
Uncovers critical vulnerability in Zynq-7000 SoC's secure boot, allowing RSA authentication bypass. Explores implications for embedded device security and trusted computing.
WhatsApp Messenger Runs Arbitrary Python Code
Explore how WhatsApp Messenger can execute arbitrary Python code, uncovering potential security implications and vulnerabilities in this popular messaging platform.
Understanding, Replicating, and Generating PCAP for OpenSSH XZ Utils Backdoor Issue (CVE-2024-3094)
Explore CVE-2024-3094: Understand the xz library vulnerability, replicate it in a controlled environment, and generate PCAPs for analysis. Enhance your cybersecurity skills.
There's Somebody in My Package Manager - Security Risks and Mitigation
Explore package manager security risks and learn strategies to protect against supply chain attacks in software development.
Under the Radar: How We Found 0-Days in the Build Pipeline of OSS Packages
Explore critical vulnerabilities in OSS build pipelines, including 0-day discoveries in major projects. Learn about attack trees, mitigations, and 'Living Off the Pipeline' components for enhanced security.
ShellTorch - The Next Evolution in *4Shell Executions
Uncover ShellTorch vulnerabilities in TorchServe, enabling remote code execution and AI model manipulation. Learn about the high-severity exploit's impact on PyTorch ecosystem and essential mitigation strategies.
Back to the Roots - Finding the Origin of CSP Security Bugs
Explore the root causes of Content Security Policy bugs in web browsers, their lifecycle, and insights for both attackers and defenders using automated analysis tools.
Hell-0 World - Hacking IoT Weather Stations
Uncover IoT vulnerabilities in Tuya-based devices, focusing on weather stations. Learn to manipulate device operations through firmware extraction and reverse engineering techniques.
Security Pitfalls with Exec Commands in Software Integrations - A Quick Story
Explore security risks in software integrations, focusing on command injection attacks. Learn detection methods, prevention techniques, and real-world vulnerability analysis through a case study.
CIAPO - Code Injection via Arbitrary Pointer Overwrite
Explore code injection via arbitrary pointer overwrite in this cybersecurity presentation. Learn about vulnerabilities, hacking techniques, and defensive strategies from a Bitdefender security researcher.
Cybersecurity Threats and Models
Explore cybersecurity threats and models, gaining insights into critical security concepts and strategies for protecting digital assets and information systems.
We Are Doing It Wrong: Threat Modeling
Explore common pitfalls in threat modeling and learn how to avoid them. Gain insights from real-world breaches and discover effective strategies for securing software development.
Cryptocurrency
Explore threshold wallets, Cardano's consensus layer, and randomness beacons in cryptocurrency. Learn about vulnerabilities, exploits, and the interplay between theory and implementation.
Lattice Cryptanalysis
Explore lattice cryptanalysis techniques, barriers, and implementations with expert insights from leading researchers in the field.
Security Vulnerabilities in Prepaid Android Smartphones - A Comprehensive Analysis
Uncover critical security vulnerabilities in prepaid Android smartphones through detailed analysis of 32 devices, revealing system-level flaws and privilege escalation risks in pre-loaded software.
The Impact of Third-party Code on Android App Security
Exploring third-party library risks in Android apps, including outdated versions, vulnerabilities, and potential solutions for improved security and automatic patching.
Sexy Mobile App Attacks by Example - 2019
Comprehensive review of security flaws in Android and iOS apps, covering anonymized findings, vulnerabilities in open-source apps, and issues in government-mandated applications. Practical insights for mobile security enthusiasts.