• Opening Remarks, Rumblings, Ruminations, and Rants - The Shmoo Group
• TaskMooster - The Shmoo Group
• I Can LTE Even… [MVP edition] - Nobletrout
• Tobacco 2.0: When Money Buys the Truth & the Outcome - Libby Liu and Joan Donovan
• DNS is Still Lame: Why it’s a problem and what we can do about it - Ian Foster
• A Legal Defense Fund for Hackers - Harley Geiger and Charley Snyder
• Why We Need to Stop Panicking About Zero-Days - Katie Nickels

• Firetalks Opening
• Looking Into The Past: How Reflecting Helped Me Grow as a New Professional - Maddie Bright
• Inter-App Collusion: Exploiting the Improper Export of Android Application Components for Privilege Elevation & Credential Theft - Edward Warren
• Why I Run an Internal Conference (And Why You Might Want To Too) - Joe Schottman
• Metabolism Hacking for Fun and Longevity - Ray [Redacted]
• NIST 800-53 is AWESOME! - Gary Rimar
• The Cookie Dough Model of Cybersecurity - Amanda Draeger
• Firetalks Closing

• Groovy X-Ray Reverse Engineering like it’s the 70s - Aleksandar Nikolic and Travis Goodspeed
• FedRAMP is Broken (And Here’s How to Fix It) - Shea Nangle and Wendy Knox Everette
• Hack the Planet Gently With a Code of Practice - Leonard Bailey, Harley Geiger, Katie Moussouris, Casey Ellis, and Jen Ellis (moderator)
• FuzzLLM: Fuzzing Large Language Models to Discover Jailbreak Vulnerabilities - Ian G. Harris and Marcel Carlsson
• Ewe Cant Trusst Yore Eers: An Overview of Homophone Attacks - Aaron Brown
• The Cosmic Turtle of Code: It’s graphs all the way down - Mark Griffin
• Back (45 Years?) in the USSR: Exploring the Russian Elbrus Architecture (With a 25-year-old Exploit!) - evm
• Breaking HTTP Servers, Proxies, and Load Balancers Using the HTTP Garden - Ben Kallus and Prashant Anantharaman
• Driving Forward in Android Drivers: Exploring the future of Android kernel hacking - Seth Jenkins
• Hacking Network APIs - Dan Nagle
• Tracking the World’s Dumbest Cyber-Mercenaries - Eva Galperin
• Hi My Name is Keyboard - Marc Newlin
• Improving Red Team Maturity Through Red Team as Code (RTaC) - Jack (Hulto)
• 14 Questions Are All You Need - Carson Zimmerman
• Going Meta–Pulling Info from Encrypted Radios - Luke Berndt
• NTLMv1-SSP DES Mechanics Explained - EvilMog (Dustin (EvilMog) Heywood)
• Intel is a Fallacy, But I May Be Biased - Andy (klrgrz) Piazza
• No, SBOM Will Not Solve All Your Software Supply Chain Problems - Andrew Hendela
• Attacking Web Applications With JS-Tap - Drew (hoodoer) Kirkpatrick
• Building Canaries with ELK and ElastAlert - Andrew Januszak
• Lean, Developer-Friendly Threat Modeling - Falcon Darkstar Momot
• Hacking the Planet (Under Glass) - Rich Wickersham
• Cache Crashers: Exploiting and Detecting Vulnerabilities in Memcached - Bryan Alexander
• Level Up - Kirsten Renner
• You Wouldn’t Scrape the Internet to Make an LLM: Law and Policy of Scraping the Ago of AI - Kurt Opsahl
• Sobriety Hacks! Unleashing the Power of Incremental Change - Jennifer VanAntwerp
• Exploitable Security Architecture Mistakes We Just Keep Making - William
• [** TALK NOT RECORDED** ] “About Time” to Peak Into CN eCrime Ecosystem - Mao Sui
• Backtrace in Time: Revealing Attackers’ Sleep Patterns and Days Off in RDP Brute-Force Attacks with Calendar Heatmaps - Andréanne Bergeron
• 0wn the Con - The Shmoo Group
• Blue2thprinting (blue-[tooth)-printing]: Answering the question of ‘WTF am I even looking at?!’ - Xeno Kovah
• AI Enhanced Hacks: Model in the Middle - Ryan Ashley and Ari Chadda

• Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS - Dillon Franke
• More Money, Fewer FOSS Security Problems? The Data, Such As It Is - John Speed Meyers, Sara Ann Brackett, and Stewart Scott
• Bad Romance: The TTPs of “pig butchering” scammers - Sean Gallagher
• BBOT: The Dangers and Rewards of Building a Recursive Internet Scanner - TheTechromancer (Joel (TheTechromancer) Moore)
• War Planning for Tech Companies - Greg Conti and Tom Cross
• CISO Risk Dumpster Fires: SEC Turns Up the Heat - Liz Wharton, Danette Edwards, and Cyndi Gula
• Unlocking Enterprise-scale Security Visibility - Eknath Venkataramani and Frank Olbricht
• Summiting the Pyramid (of Pain) - Michaela Adams, Roman Daszczyszak, and Steve Luke
• Network Layer Confusion: Fun at the boundaries - Joshua DeWald
• TaskMooster II - The Shmoo Group
• Closing Remarks - The Shmoo Group

plus-circle Add Review

comment

Reviews