Best Talks at HITBSecConf2023 - Phuket

1. 1

   Timekiller: Escape From QEMU/KVM

   Yongkang Jia, Xiao Lei, Yiming Tao, Gaoning Pan, Chunming Wu

   In a compelling presentation at HITB Phuket, researchers from Zhejiang University unveiled "Timekiller," a novel exploitation technique targeting QEMU/KVM. The talk, delivered by Yongkang Jia, Xiao Lei, and Chunming Wu, detailed their journey into a previously underexplored…

   0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆
2. 2

   Breaking MPC Wallets And Digital Custodians

   Huu Giap Nguyen, Anh Khoa Nguyen

   In this compelling talk titled "TS Shock: Cracking MPC Wallets and Digital Custodians for Billions of Profits," Verichains researchers Huu Giap Nguyen and Anh Khoa Nguyen unveil critical vulnerabilities discovered within popular implementations of **Threshold Signature Schemes…

   0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆
3. 3

   A Deep Dive Into Two (Windows) Exploits Demonstrated At Pwn2Own

   Thomas Imbert

   In this highly technical talk from HITB Phuket, Thomas Imbert, a Security Engineer at Synacktiv, meticulously details two distinct Windows kernel local privilege escalation (LPE) exploits he developed and successfully demonstrated at the prestigious Pwn2Own Vancouver 2023…

   0 Dr. Zero MUST SEE ★★★★★ H Heather Calloway STRONG ACCEPT ★★★★☆
4. 4

   Shining A Light On Solar System Cyber Security

   Sick Codes

   In an era defined by a rapid global transition to renewable energy, the cybersecurity of critical infrastructure faces unprecedented challenges. This talk, "Shining A Light On Solar System Cyber Security 2.0," delivered by independent researcher Sick Codes at HITB Phuket…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
5. 5

   Lazarus Group’s Undercover Operations 2022–2023

   Taewoo Lee, Seulgi Lee, Dongwook Kim

   This talk, "Lazarus Group’s Undercover Operations 2022–2023," presented by analysts from the Korea Internet and Security Agency (KISA / KrCERT/CC), unveils the sophisticated tactics, techniques, and procedures (TTPs) employed by the notorious **Lazarus Group** in their…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
6. 6

   Escaping From VMware Workstation Through The Disk Controller

   Wenxu Yin

   In this compelling presentation at HITB Phuket, Wenxu Yin from Qihoo 360 Alpha Lab detailed a critical **VMware Workstation** vulnerability, **CVE-2023-20872**, that allows a malicious guest virtual machine to execute arbitrary code on the host operating system. The talk…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
7. 7

   How NTLM Relay Ruins Your Exchange Servers

   Tianze Ding

   In this compelling talk, Tianze Ding from Tencent Security Xuanwu Lab delves into the persistent and critical threat of **NTLM Relay attacks** against Microsoft Exchange Server environments. The presentation meticulously details how attackers can leverage this decades-old…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
8. 8

   KeyBleed: Attacking The OneKey Mini

   Eric Michaud

   In the rapidly evolving, yet often immature, landscape of cryptocurrency, the security of digital assets remains a paramount concern. This talk, "KeyBleed: Attacking The OneKey Mini," delivered by Eric Michaud, co-founder of Unciphered, delves into a series of critical…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
9. 9

   Breaking ML Services: Finding 0-days In Azure Machine Learning

   Nitesh Surana

   In this insightful talk from HITB Phuket, Nitesh Surana, a Cloud and Container Threat Researcher at Trend Micro, delves into critical security vulnerabilities discovered within **Azure Machine Learning (AML)**, Microsoft's cloud-based **Machine Learning as a Service (MLaaS)**…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
10. 10

    Hacking Into IOS’s VOLTE Implementation

    Rajanish Pathak, Hardik Mehta

    In an insightful presentation at HITB Phuket, Rajanish Pathak and Hardik Mehta from KATIM unveiled a critical design flaw within Apple’s Voice over LTE (**VoLTE**) implementation, impacting iOS devices prior to version 15.2, as well as iPadOS and watchOS. Their talk, "Hacking…

    0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
11. 11

    A Story Of Unexpected Intrusion Testing Results

    Yvan Genuer

    In "A Story Of Unexpected Intrusion Testing Results," Yvan Genuer, a seasoned Security Researcher at Onapsis, unveils a critical journey into the often-overlooked security posture of SAP systems. The talk details the discovery of severe vulnerabilities, including memory…

    0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆

View all talks at HITBSecConf2023 - Phuket →