Hacktivity 2023 - IT Security Festival
The 20th edition of Hungary's IT security festival in Budapest, opening with John Strand's deception keynote and covering EV charger and CAN bus hacking, Bluetooth sniffing, fault injection, SaaS kill chains, SIEM log tricks, Windows coercion attacks, OAuth for native clients, secrets in source code and malware use of the Bitcoin blockchain.
→ See editor’s top picks at Hacktivity 2023 - IT Security Festival
- Get Deception In Your Environment Now! — John Strand
In his Hacktivity talk, "Get Deception In Your Environment Now!", John Strand, founder of Black Hills Information Security, passionately challenges prevailing notions about cyber deception. Contrary…
- The New SaaS Cyber Kill Chain — Luke Jennings
In "The New SaaS Cyber Kill Chain," Luke Jennings of Push Security delivers a compelling exploration of the evolving threat landscape, asserting that cloud identities have become the new perimeter…
- Beyond Fun and Games: Understanding the Threat Landscape of Extended Reality — József Ottucsák
In his Hacktivity talk, "Beyond Fun and Games: Understanding the Threat Landscape of Extended Reality," Security Architect József Ottucsák delivered a crucial overview of Extended Reality (XR)…
- SOCKS Over RDP/Citrix (Pentesting Over Jump Boxes) — Balazs Bucsay
In this insightful Hacktivity presentation, Balazs Bucsay, a seasoned IT security consultant and researcher, delved into a persistent challenge faced by penetration testers operating within highly…
- (Supply) Chain Reaction — Iddo Eldor
In this Hacktivity presentation, Iddo Eldor, a seasoned vulnerability researcher now leading efforts in software supply chain security at Mirror Security, sheds light on the escalating threat…
- SIEM Slam: Tricking Modern SIEMs with Fake Logs and Confusing Blue Teams — Ozgun Kultekin, Asil Veral
In the realm of cybersecurity, Security Information and Event Management (SIEM) systems are the bedrock of detection and response, offering blue teams a centralized view of an organization's…
- Pwning into Power System Center — Omkar Joshi
In this compelling Hacktivity presentation, Omkar Joshi, a seasoned red teamer, unveiled the critical findings from a recent engagement against a nation-state electricity provider. Titled "Pwning…
- 7 Steps to Secure a SaaS Platform – the Worlds Biggest Companies Trust — Joel Balog
In this insightful Hacktivity presentation, Joel Balog, Vice President of DevSecOps at Liferay, shares seven critical steps his organization took to secure its SaaS platform, a journey undertaken…
- Elevating OAuth2.0 for Security of Native Clients — Alina Boshchenko
In this insightful Hacktivity conference talk, Alina Boshchenko delves into the critical security challenges of OAuth 2.0 when applied to native client applications. The presentation focuses on…
- Carved in Stone: Malware [ab]use of the Bitcoin Blockchain — Gibran Alberto Gómez Montez
This talk, "Carved in Stone: Malware [ab]use of the Bitcoin Blockchain," presented by Gibran Alberto Gómez Montez from the IMDEA Software Institute, delves into the sophisticated ways cybercriminals…
- The Power of Coercion Techniques in Windows Environments — Martin Grottenthaler
In this Hacktivity conference talk, Martin Grottenthaler, a Penetration Tester at SBA Research, sheds light on the enduring power of coercion techniques within Windows environments. Far from being…
- That’s Just a Tool – Not Good Nor Bad. That Part is Up to YOU — Yossi Sassi
In his compelling Hacktivity talk, "That’s Just a Tool – Not Good Nor Bad. That Part is Up to YOU," Yossi Sassi, co-founder of 10Root Cyber Security, delves into the inherent duality of common…
- Formshaker — Ricardo Martin Rodriguez
In the realm of web application security, Cross-Site Scripting (XSS) remains a persistent and high-impact vulnerability. While common exploitation techniques often focus on stealing cookies…
- How to Hack and Defend (Your) Open Source? — Roman Zhukov
In his Hacktivity 2023 talk, "How to Hack and Defend (Your) Open Source?", Roman Zhukov, a Principal Engineer at Intel, delivered a critical examination of the escalating security challenges within…
- Exposed Credentials – How Attackers Find & Exploit Secrets in Source Code — Mackenzie Jackson
In an era defined by distributed systems and cloud infrastructure, digital authentication credentials have become the indispensable "crown jewels" of modern organizations. Mackenzie Jackson, a…
- It Was Harder to Sniff Bluetooth Through My Mask During the Pandemic — Xeno Kovah
In this Hacktivity 2023 presentation, Xeno Kovah, founder of the non-profit OpenSecurityTraining2, sheds light on the widespread and often overlooked security and privacy implications of Bluetooth…
- CAN Injection Hacking: Unraveling the Veins of Automotive Vulnerabilities — Péter Vágvölgyi
In an era where vehicles are increasingly reliant on sophisticated electronic systems, the talk "CAN Injection Hacking: Unraveling the Veins of Automotive Vulnerabilities" by Péter Vágvölgyi at…
- Clashing EV Chargers in The Pentesting Arena — Abdellah Benotsmane
In an era of rapidly accelerating electric vehicle (EV) adoption, the security of their charging infrastructure has become a critical concern. Abdellah Benotsmane, a Junior Security Researcher at…
- Threat Prompt: AI Security — Craig Balding
In his Hacktivity talk, "Threat Prompt: AI Security," independent consultant Craig Balding delivers a compelling exploration of the rapidly evolving landscape of artificial intelligence from a…
- Examining the Explanatory Factors of Malicious Hacking Behaviors — Carolina Roque
In an era increasingly defined by digital interactions, understanding the motivations and profiles of individuals who engage in malicious hacking is paramount for effective cybersecurity. Carolina…
- API Security Assurance via E2E Testing — Alex Mor
In his Hacktivity talk, "API Security Assurance via E2E Testing," Alex Mor, a Cyber Security Engineer at AB InBev, addressed a critical challenge in modern software development: integrating security…
- Can We Break the Fault Injection Mitigation Bob? — Arun Magesh
In this compelling Hacktivity talk, "Can We Break the Fault Injection Mitigation Bob?", Arun Magesh, a Principal Security Consultant at Aon (an automated firmware analysis company), delves into the…