Implementing Continuous Offense to Measure and Monitor Cybersecurity Defenses - DefCamp - 2019
Explore continuous offense techniques to assess and enhance cybersecurity defenses. Learn about breach simulation tools, vulnerability assessment, and practical strategies for improving network security.
You Fail in SE If You Make Those Mistakes - DefCamp - 2017
Explore common mistakes in social engineering, learn prevention strategies, and understand the psychology behind successful attacks. Gain insights to enhance your cybersecurity awareness and defense techniques.
Web Application Firewall Bypassing - DefCamp - 2016
Aprende técnicas avanzadas para evadir firewalls de aplicaciones web, incluyendo métodos de reconocimiento, explotación de discrepancias y bypass de reglas para pruebas de penetración efectivas.
Secrets in Soft Token - A Security Study of HID Global Soft Token
Unveiling vulnerabilities in HID Global Soft Token's Android app, exploring cryptographic weaknesses that could allow attackers to clone configurations and potentially discover user PINs through brute force.
Remote Code Execution via Java Native Deserialization
Explore Java deserialization vulnerabilities, focusing on remote code execution through XML and binary deserialization. Learn about CVEs, tools, and future research in this area.
Internet Scale Analysis of AWS Cognito Security
Análisis de seguridad a escala de Internet de configuraciones de AWS Cognito, revelando vulnerabilidades comunes y acceso no autorizado a recursos de AWS. Incluye demostraciones, metodología y recomendaciones para desarrolladores.
What Does the Perfect Door or Padlock Look Like?
Explore physical security vulnerabilities in doors and padlocks, covering various components, attack methods, and protective measures for enhanced security awareness.
Thunderbolts and Lightning - Snare
Explore Thunderbolt DMA attacks beyond FireWire adapters, discussing novel approaches and potential vulnerabilities in current hardware systems with Thunderbolt ports.
A Sound Mind in a Vulnerable Body - Practical Hardware Attacks on Deep Learning
Explores hardware vulnerabilities in deep learning systems, demonstrating how fault injection and side-channel attacks can compromise model accuracy and steal proprietary information, highlighting the need for robust ML-level defenses.
How to Predict Which Vulnerabilities Will Be Exploited - Tudor Dumitras - USENIX Enigma Conference - 2019
Explore data-driven methods for predicting vulnerability exploitation, combining technical features and social media insights to assess real-world security risks and guide defensive strategies.
Security for Vulnerable Populations - On the Interplay of - Daniela Oliveira - USENIX Enigma - 2017
Explores older adults' vulnerability to spear-phishing, analyzing susceptibility based on psychological influence tactics and life domains. Offers insights for developing targeted cybersecurity solutions.
Practical Physical Security Advice for the Modern Enterprise
Practical advice on improving physical security, covering common weaknesses, bypass techniques, vulnerability mapping, and cost-effective solutions for modern enterprises.
Android Security, or This Is Not the Kind of 'Open' I Meant
Explore Android security vulnerabilities, reverse engineering techniques, and potential solutions with insights from Trustwave SpiderLabs expert Mike Park.
It Was Broken When It Got Here - Security in Your Software Procurement Process
Explore strategies for ensuring security in third-party software procurement, including case studies of vulnerabilities and guidance for integrating security considerations into the purchasing process.
Prove It! - Confronting Security With Data
Explore data-driven methods to measure and improve security capabilities in rapidly scaling businesses, focusing on quantitative strategies and decision analysis techniques.
Magecart - A Growing Threat to E-Commerce Sites
Explore Magecart's e-commerce threats, attack techniques, and defense strategies. Learn about vulnerabilities, compromises, and protective measures for online shops and payment systems.
Topics of Interest - Common NGINX Misconfigurations That Leave Your Web Server Open To Attack
Explore common NGINX misconfigurations, their security implications, and remediation strategies. Learn to identify and fix vulnerabilities in web server setups through demos and expert insights.
Open Source CVE Monitoring and Management - Cutting Through the Vulnerability Storm
Learn to monitor, assess, and address open source vulnerabilities effectively. Explore challenges in CVE tracking, improve accuracy, and enhance device security through practical techniques and community-driven solutions.
Secure Your Multicloud Workloads with Comprehensive Contextual Cloud Security Posture
Explore Defender for Cloud's latest innovations for strengthening cloud security posture and protecting multicloud workloads with unified, integrated solutions and risk prioritization.
A Look at TR-06FAIL and Other CPE Configuration Disasters
Exploring TR-06FAIL and CPE vulnerabilities: impacts, related issues, and potential for mass router takeovers through TR-069 protocol implementations.
IoT Malware - Comprehensive Survey, Analysis Framework and Case Studies
Comprehensive exploration of IoT malware, covering its evolution, analysis frameworks, and real-world case studies. Insights into vulnerabilities, detection methods, and future challenges in securing connected devices.