Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices
Discover critical Wi-Fi security vulnerabilities affecting billions of devices, including Amazon Echo. Learn about Kr00k, its impact, and see a live demonstration of the exploit.
A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep Learning
Explore deep-learning techniques to identify and reduce side-channel attack vulnerabilities, leveraging AI explainability for efficient implementation assessment and improved security.
Attacking Electric Motors for Fun and Profit
Explore electric motor vulnerabilities and attacks bridging cyber and physical realms. Learn about security risks, attack methods, and protective measures for this critical technology.
DIFUZE - Android Kernel Driver Fuzzing
Explore Android kernel driver fuzzing with DIFUZE, a tool for identifying vulnerabilities in third-party driver code. Learn techniques to improve Android security infrastructure and discover potential weaknesses.
Adventures in Attacking Wind Farm Control Networks
Explore vulnerabilities in wind farm control networks and potential attack scenarios, with insights on securing these critical renewable energy infrastructures.
Exploiting XPC in AntiVirus Software
Explore vulnerabilities in macOS antivirus software through XPC exploitation, uncovering security flaws and providing guidance for developers to create secure XPC services.
Insecurity of Smart Energy Meters - A Hardware Security Perspective
Explore hardware security vulnerabilities in smart energy meters, covering threat classifications, current trends, and testing methodologies for advanced metering infrastructure and grid security.
Security Compliance in the ICS Environment
Explore ICS/OT security compliance beyond vulnerability assessment. Learn to build a comprehensive security program integrating external and internal regulations for critical industrial environments.
Silicon - Security's New Layer
Explore hardware security challenges, from supply chain vulnerabilities to chip-level attacks. Learn about emerging threats and best practices for securing technology stacks from silicon to software.
Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable WiFi Devices
Explore how a vulnerability in Amazon Echo led to the discovery of Kr00k, a widespread WiFi security flaw affecting billions of devices from major tech companies. Learn about its implications and potential risks.
Attacking and Defending Full Disk Encryption
Explore full disk encryption's vulnerabilities, attack vectors, and defense strategies. Learn about physical access risks, memory-resident information, and balancing security with convenience.
Rawr - Rapid Assessment of Web Resources
Explore rapid web resource assessment techniques, including crawling, scanning, and fuzzing, to enhance cybersecurity and identify potential vulnerabilities in web applications.
Metastable Failures in the Wild
Explores metastable failures in distributed systems, analyzing real-world incidents to categorize triggers and amplification mechanisms, aiding understanding and potential solutions for this prevalent issue.
Cisco SMB Products - Critical Vulnerabilities - 0-Day Release
Detailed examination of critical 0-day vulnerabilities in Cisco SMB switches, including web application and API exploits, leading to complete endpoint compromise and data leakage.
Zoom 0-Day - How Not to Handle a Vulnerability Report
Uncover the journey of a critical Zoom vulnerability, from discovery to disclosure, and its far-reaching implications for software security and responsible reporting practices.
MitM Attack by Name Collision - Cause Analysis and Vulnerability Assessment in the New gTLD Era
Explore MitM attacks via name collision, analyzing causes and vulnerabilities in the new gTLD era. Learn about WPAD query leakage, attack surface characterization, and potential remediation strategies.
SoK - The Faults in Our ASRs - An Overview of Attacks Against Automatic Speech Recognition and Speaker Identification Systems
Overview of vulnerabilities and attacks against automatic speech recognition and speaker identification systems, exploring various attack vectors and defense strategies.
Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms
Exploring security vulnerabilities in smart home platforms through reverse engineering and phantom device testing, revealing unexpected state transitions and potential attacks.
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
Explore cloud security threats, including crypto-mining worms and innovative techniques targeting AWS, Kubernetes, and other providers. Learn about hackers' methods, persistence strategies, and potential impacts on cloud environments.
Supply Chain Infections and the Future of Contactless Deliveries
Explore supply chain risks, their consequences, and industry mitigation strategies in light of recent challenges. Gain insights into software integrity and future security measures.
The Insecurity of Cloudless Smart Door Systems
Explore vulnerabilities in cloudless smart door systems for large buildings, focusing on IP-gateway security risks and potential exploits in intercom-IP integration.