PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Infosec Talks You May Have Missed This Year

bishopfox.com | blog | #cloud | #def-con | #ssrf | #infosec | #roundup | #conference-talks | #sonarqube
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox's favorite 2020 infosec talks you may have missed: abusing TLS for SSRF, SonarQube privilege escalation, Azure AD enumeration, and more from a year of virtual conferences.
Published
Collected

Related coverage

blog · bishopfox.com
10 Must-See Talks at Black Hat and DEF CON
A Bishop Fox guide to must-see talks at Black Hat USA and DEF CON 2019, including its own sessions on AWS security, ZigDiggity ZigBee hacking and the Eyeballer screenshot tool.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
blog · bishopfox.com
A Bishop Fox Recap - Hacker Summer Camp 2023
Bishop Fox recaps Hacker Summer Camp 2023: team talks at BSidesLV, OSDP badge reader research at Black Hat, and DEF CON 31 activities including their 'Art of Hacking' livestream.
blog · bishopfox.com
You're (Still) Doing IoT RNG
A follow-up on systemic RNG misuse in IoT devices, tracking how major IoT operating systems have progressed toward centralized CSPRNG subsystems since the original DEF CON 29 research.
blog · bishopfox.com
What the Fox Happened in Las Vegas?
Bishop Fox recaps its week across B-Sides LV, The Diana Initiative, Black Hat USA, and DEF CON 30, featuring talks, a ransomware-containment fireside chat, and a first-ever livestream.
blog · bishopfox.com
A Guide to Your First DEF CON
Practical recommendations for first-time DEF CON attendees: planning talk schedules, exploring the 30-plus villages, joining CTFs and contests, and using apps and community channels.
Back