Crash All the Flying Things! - Exploiting and Defending Aircraft Collision Avoidance
Explore vulnerabilities in aircraft collision avoidance systems, potential exploits for aerial chaos, and strategies for enhancing aviation security and defense mechanisms.
System-Level Threats - Assumptions in Modern Product Security
Explore system-level security threats and challenge assumptions in modern product security. Gain insights into potential vulnerabilities and strategies for robust protection.
Hacking Robots Before Skynet
Unveiling critical vulnerabilities in collaborative robots across industries, demonstrating potential threats and exploitation scenarios to emphasize the urgent need for enhanced security measures in robotic ecosystems.
The Birdman - Hacking Cospas-Sarsat Satellites
Explore vulnerabilities in satellite-based rescue systems, focusing on the International Cospas-Sarsat Programme. Learn about eavesdropping, spoofing, and active attack techniques on satellite communications.
The Journey to ICS
Explore operational technology risks, industrial control systems, and network architecture in critical infrastructure. Learn about common weaknesses and protective measures for control systems.
PLC for Home Automation and How It Is as Hackable as a Honeypot
Explore vulnerabilities in home automation PLCs, revealing security risks and potential exploits in smart home systems. Learn about honeypot-like susceptibility to hacking.
Exploiting Race Condition Vulnerabilities in Web Applications
Explore race condition vulnerabilities in web apps, their impact, and exploitation techniques. Learn about detection challenges, real-world scenarios, and a new penetration testing tool for identifying these elusive security flaws.
Error Handling of In-vehicle Networks Makes Them Vulnerable
Explore how error handling in in-vehicle networks creates vulnerabilities, focusing on security implications for automotive systems and potential countermeasures.
Samsung Pay - Tokenized Numbers Flaws and Issues
Análisis de vulnerabilidades en la generación de tokens de Samsung Pay, explorando posibles fallos de seguridad y riesgos para los usuarios.
Android Kernel and OS Security Assessment with Iron Crow
Discover Iron Crow: a powerful tool for Android BSP developers and OEMs to detect platform-level vulnerabilities, enhancing security and protecting end users from potential exploits in customized Android environments.
The UEFI Firmware Rootkits - Myths and Reality
Explore UEFI firmware security, vulnerabilities, and real-world applicability of attacks. Analyze rootkit scenarios and assess practical implications for system compromise at privileged levels.
ProxyLogon is Just the Tip of the Iceberg - A New Attack Surface on Microsoft Exchange Server
Discover a new attack surface on Microsoft Exchange Server, exploring critical vulnerabilities beyond ProxyLogon and their implications for government and enterprise security.
Qualcomm WiFi - Infinity War
Explore critical security vulnerabilities in Qualcomm WiFi chips, focusing on 0-click remote attacks and their potential impact on millions of smartphone users worldwide.
Wi-Fi Direct to Hell - Attacking Wi-Fi Direct Protocol Implementations
Explore Wi-Fi Direct vulnerabilities in Android, HP printers, and Samsung Smart TVs. Learn about protocol architecture, discovery, connection processes, and frame formats. Includes PoC and fingerprinting tool release.
Leveling Up Your Bug Bounty Program
Explore bug bounty programs: benefits, pitfalls, and implementation strategies. Learn from Indeed.com's experience in leveraging diverse skills to enhance security and uncover critical vulnerabilities.
Software Defined Networking - SDN Security
Explore SDN security implications, attack surfaces, and vulnerabilities with live exploit demos. Learn about efforts to enhance SDN controller security and future developments.
LoRa the Explorer - Attacking and Defending LoRa Systems
Explore LoRa security: limitations, attacks, and defensive strategies for smart city and IoT networks. Learn to build secure LoRa solutions for industrial and domestic applications.
How the BIOS Assures Its Handling of Inputs
Explore BIOS input handling, firmware interfaces, and analysis techniques for formal validation and vulnerability detection, including static, dynamic, and symbolic execution approaches.
A Fuzzing and Protocol Analysis Case-Study of DNP3
Explores vulnerabilities in DNP3, a key SCADA protocol for power systems, revealing design flaws and implementation gaps. Discusses fuzzing results, CVEs, and analyzes the protocol's security addendum.
Cross-Architecture Bug Search in Binary Executables
Innovative method for identifying vulnerabilities across different CPU architectures using bug signatures and semantic analysis of binary code, enabling effective security assessments of closed-source software.
How Not to Protect Your IP - An Industry-Wide Break of IEEE 1735 Implementations
Uncover critical flaws in IEEE 1735 implementations for IP protection, exploring industry-wide vulnerabilities and their implications for hardware security.