Editor's Picks
Best Talks at HITBSecConf2023 - Amsterdam
Hand-picked from in-depth reviewer verdicts — the top 11 talks from this conference. Skip the noise, find the signal.
-
1
Nakatomi Space: Lateral Movement As L1 Post-Exploitation In OT
Jos Wetzels
In the realm of Operational Technology (OT) security, traditional lateral movement discussions often revolve around traversing higher-level network segments within the Purdue model, such as the enterprise-to-control layer DMZs. However, Jos Wetzels, a Security Researcher at…
0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆ -
2
Smart Speaker Shenanigans: Making The SONOS One Sing
Peter Geissler
This article delves into an extensive security research journey presented by Peter Geissler at HITB Amsterdam, detailing his efforts to compromise the Sonos One smart speaker. Initially motivated by the Pwn2Own contest, Geissler embarked on a deep exploration of the device's…
0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆ -
3
A Deep Dive Into GarminOS And Its MonkeyC Virtual Machine
Tao Sauvage
In this insightful talk from HITB Amsterdam, Tao Sauvage of Anvil Secure takes attendees on a deep dive into the proprietary operating system and virtual machine powering Garmin's widely popular fitness and outdoor smartwatches. The presentation, titled "A Deep Dive Into…
0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆ -
4
The Myths Of Software Security
Mark Curphey
In his characteristically frank and uncompromising style, Mark Curphey, founder of Crash Override, delivered a provocative talk at HITB Amsterdam titled "The Myths Of Software Security." Curphey’s presentation served as a stark call to action for security professionals to…
0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆ -
5
Current State Of IOS Malware Detection
Matthias Frielingsdorf
In "Poisoned Apples: The Current State Of IOS Malware Detection," Matthias Frielingsdorf, a Security Researcher on the iVerify team at Trail of Bits, delivered a critical assessment of the evolving landscape of iOS malware and the challenges defenders face in detecting it. The…
0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆ -
6
XRP Raid Protector: Killing A Critical Bug Worth 40 Billion Dollars
Haoyu Yang
In a groundbreaking presentation at HITB Amsterdam, Haoyu Yang, a security researcher at Tencent Security Xuanwu Lab, unveiled a critical vulnerability within the core infrastructure of the XRP Ledger. Titled "XRP Raid Protector: Killing A Critical Bug Worth 40 Billion…
0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆ -
7
SOHO Hacking At Pwn2Own
Alex Plaskett, McCaulay Hudson
This talk, "SOHO Hacking At Pwn2Own," delivered by Alex Plaskett and McCaulay Hudson from NCC Group's Exploit Development Group (EDG), delves into their experiences and the vulnerabilities they uncovered during the Pwn2Own Toronto competition. Specifically, the presentation…
0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆ -
8
How MySQL Servers Can Attack YOU
Alexander Rubin, Martin Rakhmanov
In a groundbreaking presentation at HITB Amsterdam, Alexander Rubin and Martin Rakhmanov from Amazon Web Services' Relational Database as a Service Red Team unveiled a critical client-side remote code execution (RCE) vulnerability affecting MySQL clients. Titled "How MySQL…
0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆ -
9
Automated Black-box Security Testing Of “Smart” Embedded Devices
Andrea Continella
In this insightful talk, Andrea Continella, an Assistant Professor at the University of Twente, delves into the critical challenges and innovative solutions for automated security testing of "smart" embedded devices. While these devices are ubiquitous and increasingly…
0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆ -
10
Exploiting IPC With New Desynchronization Primitives
Martin Doyhenard
In this compelling talk, Martin Doyhenard, a Security Researcher at Onapsis, unveils a series of critical vulnerabilities impacting SAP's **Internet Communication Manager (ICM)**, a foundational component present in virtually all SAP installations worldwide. The presentation…
0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆ -
11
An Analysis Of Computer Numerical Control Machines In Industry 4.0
Marco Balduzzi
In this compelling talk at HITB Amsterdam, Marco Balduzzi, a Senior Threat Researcher at Trend Micro, presented groundbreaking research into the security posture of **Computer Numerical Control (CNC) machines** within the context of Industry 4.0. Balduzzi highlighted the…
0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆