HITCON Community 2023 (Hacks in Taiwan Conference)
The English-language sessions from HITCON Community 2023 in Taipei: AI-assisted decompilation, Chinese APT campaigns spreading by USB and the GroundPeony operation against Taiwan, prompt injection in LLM agents, JavaScript engine fuzzing with Fuzzilli, VoLTE network hijacking, pre-auth PHP RCE chains in Trend Micro products, macOS TCC bypasses through Electron apps and exploits in Markdown note-taking apps.
→ See editor’s top picks at HITCON Community 2023 (Hacks in Taiwan Conference)
- Your Teammate Isn't Human: Mixing Decompilation and AI for Modern Reverse Engineering — Zion Leonahenahe Basque
In an era where Artificial Intelligence is rapidly permeating all facets of technology, its integration into cybersecurity, particularly in the demanding field of reverse engineering, is becoming…
- Why Panda Loves USB?: Observing Targeted Attacks by Chinese APTs — Yuta Sawabe, Kazuya Nomura
This talk, "Why Panda Loves USB?: Observing Targeted Attacks by Chinese APTs," delivered by Yuta Sawabe and Kazuya Nomura, both SOC Analysts at NTT Security Holdings, delves into the persistent and…
- GroundPeony: Crawling with Malice — Rintaro Koike, Shota Nakajima
This article delves into the findings presented by Rintaro Koike and Shota Nakajima at HITCON CMT, introducing GroundPeony, a previously under-reported and highly skilled Advanced Persistent Threat…
- Prompt Injections in the Wild: Exploiting Vulnerabilities in LLM Agents — Johann Rehberger
In an era where large language models (LLMs) are rapidly integrating into everyday applications, the security implications of these powerful yet often brittle systems are paramount. Johann…
- Advancements in JavaScript Engine Fuzzing — Carl Smith
Carl Smith, a Security Engineer on the V8 Security team at Google, delivered an insightful talk at HITCON CMT, delving into the sophisticated world of JavaScript engine fuzzing. The presentation…
- How to Hijack a VoLTE Network — Pavel Novikov
In this insightful talk from HITCON CMT, Pavel Novikov, Head of Telecom Security Research at SecurityGen, along with his research team Alex Anov and Sergey Masuko, unveils critical vulnerabilities…
- Ghosts of the Past: Classic PHP RCE Bugs in Trend Micro Enterprise Offerings — Poh Jia Hao
In this compelling talk at HITCON CMT, security researcher Poh Jia Hao of STAR Labs unveiled a series of critical vulnerabilities in Trend Micro's enterprise-grade security products, Apex Central…
- ELECTRONizing macOS Privacy: A New Weapon in Your Red Teaming Armory — Wojciech Reguła
In this compelling talk at HITCON CMT, Wojciech Reguła, Principal Security Specialist at SecuRing, unveiled a novel attack vector and a new open-source tool, Electronizer, designed to exploit…
- What You See IS NOT What You Get: Pwning Electron-based Markdown Note-taking Apps — Li Jiantao
In this compelling talk at HITCON CMT, Li Jiantao, a distinguished security researcher from STAR Labs, unveils a series of critical vulnerabilities discovered in popular Electron-based markdown…