44CON Talks & Presentations

44CON Information Security Conference

Supply Chain Unchained - How To Be A Bad SaaS

Explore software supply chain vulnerabilities, focusing on SaaS security. Learn about access control, API restrictions, maturity evaluation, logging, cloud security, and code integrity.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Aviation Security 101

Explore aviation security vulnerabilities through pen testing research, covering access risks, performance calculations, maintenance mode issues, and potential misunderstandings in the industry.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

The Anti-Checklist Manifesto

Explore effective third-party risk assessment beyond checklists. Learn to ask insightful questions that reveal an organization's commitment to security and trustworthiness in the software supply chain.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Why Are We Still Doing Authentication Wrong?

Explore common authentication pitfalls, costs, and phases. Learn about 2FA misconceptions, password security, and new guidelines for robust authentication practices in the digital age.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

What Do Hackers See When They Look at the Clouds

Explore cloud security vulnerabilities, historical incidents, and protective measures. Learn to identify abandoned subdomains and bypass firewalls in this eye-opening talk on hacker perspectives.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Why Security-as-a-Feature Will Never Happen

Explore why secure coding remains elusive, examining cultural issues, industry challenges, and potential solutions for integrating security into software development practices.

• YouTube
• 29 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

DeepFake Cyber Security Threats and Opportunities

Explore deepfake technology's impact on cybersecurity, covering threats like fraud and fake content, as well as opportunities in biometrics and network traffic analysis.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Playbook on How to Be the First Security Engineer at a Company

Learn strategies for being a pioneering security engineer, covering impact, documentation, data storage, education, automation, and corporate security initiatives.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

CAN Bus Basics With Hands On Fuzzing

Explore CAN bus fundamentals and hands-on fuzzing techniques for automotive systems, covering ECUs, attack surfaces, and practical demonstrations using various tools and setups.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Breaking Badge

Explore badge hacking techniques, including card reader software, reading/writing cards, and security encryption, with practical insights and a Python script demonstration.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Dial V for Vulnerable - Attacking VoIP Phones

Explore VoIP phone vulnerabilities, attack methods, and security recommendations. Learn firmware access, emulation approaches, and exploit development for various VoIP devices.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

BYOI Payloads - Fusing the Power of .NET With a Scripting Language of Your Choosing

Explore .NET assembly generation, embedding scripting languages, and advanced techniques for creating versatile payloads in this cybersecurity-focused talk on BYOI (Bring Your Own Interpreter).

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Throw Open The Gates - Trading Control For Visibility

Explore innovative approaches to enterprise security, focusing on visibility over control, with insights from Heroku's security transformation and practical lessons for implementation.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

IBM - Trusteer Rapport - Does IBM Intentionally Backdoor Machines?

Investigates potential security concerns with IBM/Trusteer Rapport software, examining its code execution speed, system access, and implications for user privacy and system integrity.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

44CON Information Security Conference

Outsourcing Global Cyber Norms

Explore the complexities of global cyber norms, challenges in consensus-building, and potential risks in outsourcing digital governance frameworks.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk