ViewTube

C2 servers of mobile and Windows malware are usually left to their own fate after they have been discovered and the malware is ...

There's an escalating arms race between bots and the people who protect sites from them. Bots, or web scrapers, can be used to ...

TLS is the de facto way of securing network connections. It provides an easy way of ensuring confidentiality, integrity and ...

Hacking your health with JavaScript. It was a title that made a lot of sense a couple months ago. So, you know, a couple years ago ...

HTTP requests are traditionally viewed as isolated, standalone entities. In this session, I'll introduce techniques for remote, ...

Apache Spark is one of the major players if not the leader when it comes to distributed computing and processing. Want to use ...

Apache Solr is a search platform used by many enterprise companies to add a full text search functionality to their websites.

How to use CSP to stop XSS KENNETH LEE PRODUCT SECURITY ENGINEER, ETSY INC. Crosssite scripting attacks have ...

In this talk we will tell the story of an insane exploit we used to compromise the otherwise secure KASM Workspaces software.

Return-oriented Programming (ROP) has been the predominate code-reuse attack for over a decade, but there are other options.

Fuzzing is a well-established technique for finding bugs, hopefully exploitable ones, by brute forcing inputs to explore code paths ...

In this video we hear the story how Ezequiel Pereira found a critical vulnerability in Google Cloud and was awarded $164674 in ...

MacOS is known for an additional layer of privacy controls called TCC - Transparency, Consent, and Control (TCC) that restricts ...

Almost everyone has had a moment when they have been asked to build something quickly at 3pm on a Friday. Come explore ...

In this talk, we will provide insight into both the documented and undocumented APIs available in Adobe Reader. Several code ...

Google Cloud's security model in many ways is quite different from AWS. Spark jobs, Cloud Functions, Jupyter Notebooks, and ...

macOS local security is shifting more and more to the iOS model, where every application is codesigned, sandboxed and needs to ...

The 2016 WWDC saw the dawn of Apple Pay Web, an API that lets websites embed an Apple Pay button within their web-facing ...

Firebase Database takeover vulnerability | Rahad Chowdhury What is firebase database? Firebase is Google mobile application ...

PBX (Private Branch Exchange) and UC (Unified Communications) servers are the big communication brokers in enterprise ...