BruCON Talks & Presentations

BruCON Security Conference

DNS as Critical Infrastructure - Do You Know Where Your Domain Is?

1 review

Explores DNS as critical infrastructure, examining its evolution, security measures, and operational challenges. Analyzes ccTLD operations, hosting risks, and adoption of security features like DNSSEC and CAA records.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

In Curation We Trust - Generating Contextual and Actionable Threat Intelligence

Optimizing threat intelligence with MISP: Learn to curate, contextualize, and automate TI feeds for actionable insights, reducing false positives and enhancing SOC, IR, and malware analysis collaboration.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Understanding the Discipline to Optimize Cyber Defense Collaboration

Explore the Cyber Threat Intelligence Analyst role, its competencies, and how it intersects with other cybersecurity disciplines to enhance collaboration and organizational security posture.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

The Story Continues - Hacking Some More Secure Portable Storage Devices

Exposé sur les failles de sécurité des dispositifs de stockage portables "sécurisés" avec chiffrement matériel AES, démontrant leur vulnérabilité malgré les promesses des fabricants.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

INCONTROLLER - New Malware Developed to Target Industrial Control Systems

Analysis of INCONTROLLER: a rare and dangerous state-sponsored malware targeting industrial control systems, with focus on its components, attack scenarios, and implications for cybersecurity professionals.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

LOLDocs - Sideloading in Signed Office Files

Exploring innovative phishing techniques using code side-loading in signed Office documents, focusing on vulnerabilities in Microsoft-signed add-ins and their potential exploitation for malicious purposes.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

I Am Become Loadbalancer, Owner of Your Network

Explore load balancer vulnerabilities, architecture, and post-breach tactics. Learn about high-profile exploits, device deployment, and how to navigate these critical network components for both offensive and defensive purposes.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Adaptive Adversaries

Explore the evolution of cyber threats and defense strategies, focusing on adaptive adversary techniques and the future of cybersecurity. Learn to build more effective defenses against sophisticated attacks.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Defeating EDRs Using Dynamic Invocation in C#

Explore advanced techniques for bypassing Endpoint Detection and Response systems using Dynamic Invocation in C#, enhancing your understanding of cybersecurity vulnerabilities and defenses.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

A Critical Assessment of Supply Chain Intrusion Vectors

Critical analysis of supply chain attacks, distinguishing between modification and third-party compromise. Explores functionality, execution, and defensive measures, providing insights for risk assessment and mitigation strategies.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

How to Make Belgium One of the Least Cyber Vulnerable Countries

Découvrez la nouvelle stratégie cybersécurité belge visant à protéger le pays, ses entreprises et ses citoyens, ainsi que son alignement avec les initiatives européennes.

• YouTube
• 58 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

The Risk of CI - CD Pipeline Poisoning via CodeBuild

Explore CI/CD pipeline vulnerabilities in AWS services, focusing on CodeBuild abuse. Learn how small decisions can compromise security, bypass controls, and potentially lead to pipeline poisoning.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Visibility Beyond Perimeters - Detecting C2 at Time of Execution

Innovative network-based threat detection technique providing real-time alerting without endpoint software. Leverages internet infrastructure to detect malicious activity across organizational boundaries, augmenting existing EDR solutions.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

PIC Your Malware

Explore advanced techniques for building and hiding custom malware, including position independent code and automated payload generation, to evade detection by security products and analysts.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Hacktivism During a Global Pandemic

Explore hacktivism's evolution from website attacks to shaping policies and protecting hospitals during crises. Discover the impact of idealistic tech enthusiasts in addressing global challenges.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk