Hacker Traction Through GitHub Actions - Is Your Open Source Project Safe?
Explore potential security vulnerabilities in GitHub Actions and learn strategies to safeguard open source projects from malicious exploitation.
A Race to the Bottom: Database Transactions Undermining Your AppSec
Explore how database transactions can compromise application security, with insights on identifying and mitigating potential vulnerabilities in your software systems.
Thinking Like a Threat Actor in Kubernetes Environments
Explore threat actor mindsets to enhance Kubernetes security. Learn proactive defense strategies and vulnerability assessment techniques for robust cloud-native environments.
Kubernetes Privilege Escalation Tactics - Understanding and Mitigating Vulnerabilities
Explore Kubernetes vulnerabilities, privilege escalation tactics, and mitigation strategies. Learn to secure clusters against insider threats and external attacks through hands-on demonstrations and best practices.
How Crypto Can Be Broken By You - Workshop Day 1
Explore practical techniques to break cryptographic systems, enhancing your understanding of vulnerabilities and strengthening cybersecurity skills.
Kubernetes Security Blind Spot - Misconfigured System Pods
Explore Kubernetes security vulnerabilities in system pods, focusing on misconfigurations that can lead to unauthorized access and data breaches. Learn about real-world exploit chains and mitigation strategies.
Securing Java Containers by Breaking In
Explore container security through live hacking, learn vulnerabilities in Docker images, and adopt best practices for securing containerized Java applications in production.
Unintended Interactions Among ML Defenses and Risks - 2024
Explore unintended interactions between machine learning defenses and risks, uncovering potential vulnerabilities and implications for AI security and robustness.
Kubernetes Initial Access Vectors: Security Risks and Mitigations
Explore Kubernetes cluster security, focusing on initial access vectors. Learn about authentication methods, potential vulnerabilities, and real-world attack scenarios. Gain insights on detection strategies using cloud and audit logs.
Attacking Bluetooth LE Design
Explore vulnerabilities in Bluetooth Low Energy design and learn strategies to secure mobile and wearable ecosystems against potential attacks.
What We've Learned from Scanning 10,000+ Kubernetes Clusters
Discover key insights from scanning 10,000+ Kubernetes clusters, exploring security vulnerabilities, misconfigurations, and best practices for robust cloud-native deployments.
Switches Get Stitches
Explore vulnerabilities in industrial Ethernet switches, their impact on critical infrastructure, and learn mitigation strategies. Gain insights into attacking management planes and creating malicious firmware for MITM attacks.
Owning a Building - Exploiting Access Control and Facility Management Systems
Explore vulnerabilities in building access control and facility management systems, uncovering potential security risks and exploitation techniques.
Google Apps Scripts Kill Chain
Explore the potential security vulnerabilities in Google Apps Scripts and learn about attack techniques in this informative presentation on script-based threats.
CVE CVSS NVD OMGWTFBBQ
Explore cybersecurity vulnerabilities, scoring systems, and databases with experts. Gain insights into CVE, CVSS, NVD, and their impact on digital safety.
Hacking the Public Policy API
Explore strategies for influencing public policy on cybersecurity issues, featuring insights from experienced policy advocates on effective engagement with policymakers and stakeholders.
At Your Service - Abusing the Service Workers Web API
Explore potential security vulnerabilities in the Service Workers Web API and learn techniques for exploiting them to compromise web applications and user data.
A Good Day to Die? - IoT End of Life
Explore the challenges and implications of IoT device end-of-life, discussing security risks, consumer impacts, and potential solutions for responsible lifecycle management.
Anatomy of NTLMv1 - NTLMv1-SSP
Explore the intricacies of NTLMv1 and NTLMv1-SSP authentication protocols, understanding their structure, vulnerabilities, and implications for network security.
Introduction to Fuzzing
Explore the fundamentals of fuzzing, a powerful software testing technique, in this comprehensive workshop led by expert Dhiraj Mishra.
When Your Firewall Turns Against You
Explore how firewalls can become security vulnerabilities, with insights on potential exploits and mitigation strategies for network administrators and security professionals.