nullcon Talks & Presentations

nullcon

Unearthing Malicious and Risky OpenSource Packages Using Packj

Explore PACKJ, a security framework for detecting risky open-source packages. Learn about supply chain attacks, defense strategies, and real-world examples to enhance your software security practices.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

nullcon

Pushing Security Left by Mutating Byte Code

Explore techniques for building secure software through bytecode mutation, including obfuscation, encryption, and cross-compilation to protect against reverse engineering and enhance product security.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

nullcon

The Faces of MacOS Malware - Detecting Anomalies in a Poisoned Apple

Explore macOS malware detection techniques, built-in utilities exploited by threat actors, and strategies to identify suspicious activity on Apple systems in this comprehensive security analysis.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

nullcon

Contextomy - Let's Debug Together

Explore a critical iOS design flaw allowing remote code execution through debug session hijacking. Learn about the vulnerability's discovery, research, exploitation, and Apple's fix.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

nullcon

Mind The Gap - The Linux Ecosystem Kernel Patch Gap

Explore Linux kernel patching challenges, ecosystem fragmentation, and automated solutions. Learn about tools for assessing patch completeness and improving security in Linux devices and distributions.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

nullcon

A UEFI Firmware Bootkit in the Wild

Explore the inner workings and mysterious history of CosmicStrand, a sophisticated UEFI firmware bootkit that provides deep persistence on select motherboards, evading detection and surviving OS reinstallations.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

nullcon

Bheem OS - A Next-Gen Reasonably Secure OS

Explore Bheem OS, a next-gen secure operating system that isolates apps in MicroVMs, offering enhanced security, usability, and performance. Learn about its architecture, features, and advantages over traditional systems.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

nullcon

Introduction to the OWASP ModSecurity Core Rule Set

Learn about OWASP ModSecurity Core Rule Set, a powerful open-source web application firewall. Discover key features like paranoia levels and anomaly scoring, and see its effectiveness in protecting against various attacks.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

nullcon

Jailbreaking the AppleTV3 - Tales From A Full Stack Hack

Explore the full stack hack of AppleTV3, uncovering vulnerabilities and jailbreaking techniques. Learn tricks for attacking restricted devices and gain insights into iOS security.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

nullcon

Hunting Evasive Vulnerabilities - Finding Flaws That Others Miss

Explore techniques for uncovering elusive web vulnerabilities, from advanced methods to overlooked basics. Learn strategies to enhance your security auditing skills and find flaws others miss.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

nullcon

What is Cyber Threat Intelligence

Discover cyber threat intelligence essentials, including analyst skills, frameworks, daily tasks, and maintaining anonymity. Learn to put intelligence into action for effective cybersecurity.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

nullcon

macOS Security Features Bypasses by Example

Explore macOS security features, vulnerabilities, and bypass techniques with a Microsoft security expert. Gain insights into SIP, TCC, and potential exploit avenues for researchers and professionals.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

nullcon

Impact of Log4j

Explore the impact of log4j vulnerability, its industry-wide effects, and strategies for mitigating similar threats in 2022 with experts Alvaro Munoz and Joe Slowik.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

nullcon

Bhadra Framework - Threat Modeling for Mobile Communication Systems

Explore the Bhadra framework for threat modeling in mobile communication systems, addressing complex security challenges and providing a structured approach to analyze adversarial behaviors in telecom networks.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

nullcon

Ransomware Unlocked

Comprehensive overview of ransomware, including history, current attacks, hacker groups, and defense strategies. Explores cyber security frameworks and principles for effective recovery and protection.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk