Zero Days Should Not Be a Fire Drill
Strategies for effectively managing zero-day vulnerabilities, emphasizing proactive planning and rapid response to minimize organizational impact and enhance cybersecurity resilience.
Capturing Zero Day Information
Explore techniques for identifying and capturing zero-day vulnerabilities in cybersecurity. Learn cutting-edge methods to stay ahead of emerging threats and enhance your defensive capabilities.
Who's Breaking into Your Garden? - iOS & OS X Malware You May Not Know
Comprehensive analysis of recent iOS and OS X malware, exploring attack techniques, characteristics, and trends. Insights for enhancing security measures against emerging threats on Apple platforms.
Goldilocks and the Three ATM Attacks
Explore three ATM attack case studies, from poor security to zero-day exploits, revealing vulnerabilities and prevention strategies in modern ATM systems.
Racing the Dark - A New TOCTTOU Story From Apple's Core
Unveils macOS kernel vulnerabilities, highlighting memory mapping issues and race conditions that bypass security updates. Emphasizes the need to reevaluate macOS/iOS memory mapping mechanisms.
In-Field Emulation and Fuzzing of PLCs to Uncover the Next Zero-Day Threat in Industrial Control Systems
Explore innovative techniques for uncovering vulnerabilities in Industrial Control Systems through in-field emulation and fuzzing of PLCs, focusing on proactive security measures beyond network-level exploits.
CDPwn - Taking Over Millions of Enterprise-Things with Layer 2 Zero-Days
Unveiling critical zero-day vulnerabilities in layer 2 protocols, demonstrating their impact on enterprise device and network security, and exploring potential exploitation techniques.
BLEEDINGBIT - Your APs Belong to Us
Explore BLEEDINGBIT vulnerabilities in BLE chips, allowing unauthenticated network penetration. Learn attack methods, packet structures, and prevention strategies for enterprise wireless access points.
Finding 0days in Enterprise Web Applications
Explore techniques for finding 0-day vulnerabilities in enterprise web applications, focusing on HCL Digital Experience, Solarwinds Web Help Desk, and Sitecore's Experience Platform.
How MySQL Servers Can Attack YOU
Novel attack vector using compromised MySQL servers to target clients, demonstrating remote code execution vulnerabilities in MySQL tools and libraries, including a zero-day exploit bypassing security patches.
OEMs Considered Harmful - Hello New 0Days
Explores zero-day vulnerabilities in OEM Android customizations, demonstrating how these modifications can undermine Google's security measures and affect millions of devices worldwide.
Vulnerabilities and Ethics
Exploring ethical considerations in zero-day vulnerability trade, proposing a code of ethics to guide responsible acquisition and use while balancing national security needs with human rights concerns.
Extortion and Cooperation in the Zero-day Market
Análisis del mercado de vulnerabilidades zero-day desde la teoría de juegos, explorando estrategias de cooperación, extorsión y maximización de beneficios para compradores y vendedores.
All New Ø-Day
Explore cutting-edge zero-day vulnerabilities and advanced hacking techniques with expert David Litchfield in this Black Hat USA 2004 presentation on emerging cybersecurity threats.
16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code Execution
Découverte de 16 vulnérabilités zero-day dans CODESYS, un framework logiciel pour automates programmables industriels, affectant potentiellement des millions d'appareils dans divers secteurs industriels.
New Shiny in the Metasploit Framework
Explore new features in Metasploit Framework, including infrastructure updates, exploitation techniques, and enhancements for various platforms and protocols.
Wolf in Shell's Clothing - Why You Should Be Skeptical of Your Trusted Tools
Explore the skepticism towards trusted security tools, data breaches, and vulnerabilities. Learn about manual hijacking, drive-by downloads, and strategies to enhance network protection.
State of Security and 2016 Predictions
Explore cybersecurity trends, threats, and predictions for 2016, covering topics like cyber crime, threat intelligence, phishing, and government responses to security challenges.
0Day to HeroDay - Bringing a Company from Scorched Earth to a Modern Security Organization
Transforming a company's security posture from vulnerable to robust, detailing strategies and best practices for building a modern, effective cybersecurity organization.
Inside Dash Cam Custom Protocols and Security Vulnerabilities
Delve into comprehensive security analysis of network-connected dash cams, exploring vulnerabilities in boot processes, custom protocols, and configuration systems across multiple international manufacturers.
Finding Zero-Day Vulnerabilities in Vilo Home Routers - Security Research Process and Discoveries
Discover how student researchers uncovered 9 zero-day vulnerabilities in Vilo routers through hardware hacking, firmware analysis, and cloud infrastructure investigation, highlighting IoT security challenges.