Project Zero: Ten Years of Making Zero-Day Exploits Hard
Explore Project Zero's decade-long mission to combat 0-day vulnerabilities, examining its impact on security research, bug discovery, and the evolving landscape of cyber threats.
The Stuxnet Cyberweapon Explained
Uncover the intricacies of Stuxnet, the groundbreaking cyberweapon that targeted Iran's nuclear facilities. Explore its sophisticated design, deployment methods, and global impact through a retired Windows engineer's perspective.
Operation Triangulation: Uncovering a Sophisticated Zero-Click Attack on iPhones - French Translation
Découverte et analyse d'une attaque zero-click sophistiquée ciblant les iPhones, exploitant quatre vulnérabilités zero-day et déployant un logiciel espion avancé. Présentation détaillée de l'opération Triangulation.
Popular Approaches to Preventing Code Injection Attacks are Dangerously Wrong
Explores limitations of current code injection prevention methods and introduces Name Space Layout Randomization (NSLR) as a novel approach to secure Java applications against known and zero-day vulnerabilities.
Open Source Approaches to Security for Applications and Services - Mozilla Case Study
Explore open-source security approaches for applications and services, covering threat modeling, bug bounties, and measuring security effectiveness in Mozilla's ecosystem.
Preparing for Zero-Day: Vulnerability Disclosure in Open Source Software
Learn strategies for handling vulnerability disclosures in open source projects, including best practices for communication and mitigation, to enhance software security and protect against potential attacks.
Breaking ML Services: Finding Zero-Days in Azure Machine Learning
Uncover critical vulnerabilities in Azure Machine Learning, including credential leaks, information disclosure, and persistence techniques. Learn assessment methods for cloud-based MLaaS platforms and shared responsibility models.
Outsmarting IoT Defense - The Hacker's Perspective
Explore IoT security from a hacker's perspective, examining current defense inadequacies and innovative runtime protection methods for embedded devices to achieve sustainable, secure IoT solutions.
Don't Let Zero Days Steal Your Weekends
Learn strategies to effectively handle zero-day threats, including mitigation techniques and real-world use cases, to prevent these emergencies from disrupting your team's work-life balance.
TETRA Radio Security: Uncovering Secret Cryptography in Law Enforcement Communications
Unveiling TETRA cryptography: Journey through radio jailbreaking, reverse-engineering, and exploiting vulnerabilities to analyze the proprietary algorithms used in critical communication systems worldwide.
Stuxnet: The World's First Cyberweapon and Its Impact on Physical Infrastructure
Explores Stuxnet, the first cyberweapon that physically damaged Iranian nuclear centrifuges, its creation, operation, detection, and implications for future cyber warfare and security.
Dev Ally, Zero-Days Foe - DefCamp Cluj-Napoca 2024
Explore cutting-edge cybersecurity insights with Ali Abdollahi's presentation on developer-friendly approaches to combat zero-day vulnerabilities at DefCamp Cluj-Napoca 2024.
macOS Red Teaming in 2023 - Zero-Day Edition
Explore cutting-edge macOS red teaming techniques, including 0-day vulnerabilities, presented by a principal security specialist at DefCamp 2023, a major cybersecurity conference.
How Using Open Source Code Can Leave You Exposed to Hackers
Explore the security risks of open-source code, focusing on the Log4Shell vulnerability and its widespread impact on applications.
Ad Hoc Mutable Infrastructure for Security Management - Cloud Service Security
Explore ad hoc mutable infrastructure for enhanced cloud security management, focusing on active directory identity management and automated threat mitigation techniques.
Operation Triangulation: Uncovering a Sophisticated Zero-Click Attack on iPhones
Unveiling a sophisticated zero-click iOS attack chain: discovery, analysis, and implications of Operation Triangulation, a highly advanced spyware targeting researchers' iPhones.
Software Composition Risk - Determining Actual Risk and Taking Action
Explore software composition risk assessment, mitigation strategies, and proactive processes to enhance enterprise security beyond vulnerability scanning and manual updates.
RingHopper: From User-Land to SMM - A Journey Through UEFI Vulnerabilities
Delve into the discovery of RingHopper, a critical UEFI vulnerability affecting billions of devices, exploring exploitation techniques and elevation methods across Windows and Linux systems.
Hacking the Cloud Native Renaissance - Lowering Risk of Kubernetes Adoption
Explore Kubernetes adoption risks and security challenges in cloud-native systems. Learn from real-world hacks, container breakouts, and cloud compromises to enhance your system's resilience and protection.
Hacking the 0day Marketplace
Exploring the 0day vulnerability market's challenges and proposing solutions to improve efficiency, safety, and professionalism for all stakeholders in cybersecurity.
Going Deeper Into Schneider Modicon PAC Security
Exploración profunda de vulnerabilidades en controladores Modicon PAC de Schneider, analizando protocolos de comunicación privados y mecanismos de protección por contraseña. Incluye demostraciones de ataques y recomendaciones defensivas.