אודות פרק זה
Q3’25 ThinkstScapes
Microsoft-induced security woes
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
Dirk-jan Mollema
Turning Microsoft's Login Page into our Phishing InfrastructureKeanu Nys
You snooze you lose: RPC-Racer winning RPC endpoints against servicesRon Ben Yizhak
Internal Domain Name Collision 2.0Philippe Caturegli
Logs are not always as they appear Source IP Spoofing in Cloud Logs: A Hands-On Look Across AWS, Azure, and GCPEliav Livneh
[Video]
I'm in Your Logs Now, Deceiving Your Analysts and Blinding Your EDROlaf Hartong
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and EvasionShu-Hao Tung
Autobots roll out! Automating software security with LLMsTyler Nighswander
Agents Built From AlloysAlbert Ziegler
AI Agents for Offsec with Zero False PositivesBrendan Dolan-Gavitt
[Slides]
Are CAPTCHAs Still Bot-hard? Generalized Visual CAPTCHA Solving with Agentic Vision Language ModelXiwen Teoh, Yun Lin, Siqi Li, Ruofan Liu, Avi Sollomoni, Yaniv Harel, and Jin Song Dong
Good vibrations Invisible Ears at Your Fingertips: Acoustic Eavesdropping via Mouse SensorsMohamad Habib Fakih, Rahul Dharmaji, Youssef Mahmoud, Halima Bouzidi, and Mohammad Abdullah Al Faruque
TimeTravel: Real-time Timing Drift Attack on System Time Using Acoustic WavesJianshuo Liu, Hong Li, Haining Wang, Mengjie Sun, Hui Wen, Jinfa Wang, and Limin Sun
[Paper]
Nifty sundries Crescent library brings privacy to digital identity systemsChristian Paquin, Guru-Vamsi Policharla, and Greg Zaverucha
Journey to the center of the PSTN: How I became a phone company, and how you can tooEnzo Damato
Safe Harbor or Hostile Waters: Unveiling the Hidden Perils of the TorchScript Engine in PyTorchJi'an Zhou and Lishuo Song
[Slides]
Ghosts in the Machine Check – Conjuring Hardware Failures for Cross-ring Privilege EscalationChristopher Domas
Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker DocumentsAvital Shafran, Roei Schuster, and Vitaly Shmatikov
Inverting the Xorshift128+ random number generatorScott Contini
אנגלית
ארצות הברית
בפרק זה
תעתיק 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
פרקים אחרים בפודקאסט הזה
Cryptography still isn’t easy
certmitm: automatic exploitation of TLS certificate validation vulnerabilities
Aapo Oksman
[Slides] [Code] [Video]
Escaping Phishermen Nets: Cryptographic Methods Unveiled in the Fight Against Reverse Proxy Attacks
Ksandros Apostoli
[Blog]
mTLS: When certificate authe…
LLMs ain't making life any easier
Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs
Tsung-Yin Hsieh, Ben Nassi, Vitaly Shmatikov, and Eugene Bagdasaryan
[Slides] [Paper] [Code]
Tree of Attacks: Jailbreaking Black-Box LLMs Automatically
Anay Mehrotra, Manolis Zampetak…
Privacy in the modern era
IPvSeeYou: Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation
Erik Rye and Robert Beverly
[Slides] [Paper] [Code]
Device Tracking via Linux’s New TCP Source Port Selection Algorithm
Moshe Kol, Amit Klein, and Yossi Gilad
[Code] [Paper]
zk-creds: Flexible A…
AI/ML in security
Injecting into LLM-adjacent components
Johann Rehberger
[Blog 1] [Blog 2]
Teams of LLM Agents can Exploit Zero-Day Vulnerabilities
Richard Fang, Rohan Bindu, Akul Gupta, Qiusi Zhan, and Daniel Kang
[Paper]
Project Naptime: Evaluating Offensive Security Capabilities of Large Lang…
Revealing more than anticipated, and preventing prying eyes
PrintListener: Uncovering the Vulnerability of Fingerprint Authentication via the Finger Friction Sound
Man Zhou, Shuao Su, Qian Wang, Qi Li, Yuting Zhou, Xiaojing Ma, and Zhengxiong Li
[Paper]
ModelGuard: Information-Theoretic Defense Ag…
הצהרה: הפודקאסט והגרפיקה המוטבעים בדף זה הם מ-Jacob Torrey, research@thinkst.com, haroon meer, marco slaviero, שהוא רכושו של בעליו ואינו קשור או מאושר על ידי Listen Notes, Inc.
