How I exploited a SMM Memory Corruption Vulnerability in MSI firmware

Exploring the world of a possible supply chain attack, resulting in a compromised, malicious Confluence plugin

Ever felt uneasy about the security of your online accounts? With cyber threats evolving, relying solely on passwords isn’t enough anymore…

In today’s digital age, managing who has access to what can feel like juggling flaming torches. With cyber threats evolving and businesses…

Explore the resilience of the new Hugging Chat Assistance to Sleepy Agent and Image Markdown Rendering vulnerabilities.

Learn how CVE-2024-7646 allows attackers to bypass ingress-nginx validation and compromise Kubernetes clusters, and how to secure your systems

Phrack staff website.

Mayor Andrew J. Ginther and other city officials have carried out a \

Microsoft introduced Data Protection Application Programming Interface (DPAPI) in Windows environments as a method to encrypt and decrypt sensitive data such as credentials using the CryptProtectDa…

Tenable Research discovered a critical information-disclosure vulnerability in Microsoft’s Copilot Studio via a server-side request forgery (SSRF), which allowed researchers access to potentially sensitive information regarding service internals with potential…

Learn how to protect user data from AI crawlers with Fine-Grained Authorization (FGA) by Identifying bots, classifying data, and empowering users with control.

Most security products are terrible. For years our industry has managed to get by because our products were mandated by someone or some regulation, and users were trained to accept that security an…

This paper introduces a practical TMTO-based attack against GSM (A5/3) and GPRS (GEA-3), which are both technologies used in 2G mobile networks. Although designed in the 80 s, these networks are still quite active today, especially for embedded systems. While...

Following the new coined CTEM term, vendors have started appropriating the use-case to their offering. Exploring solutions and naming a new emerging market.

Schedule, talks and talk submissions for Hackfest 2024 - 16-bit Edition

Where I introduce the subject of remotely identifying bluetooth devices, propose that healthcare device oversight is lacking, and exploit a firewall for no reason other than to prove a point.

In today's increasingly digital world, where cyber threats lurk around every corner, securing your online accounts is more important than ever. While passwords remain a cornerstone of security, they're no longer enough. This is where Multi-Factor Authentication…