אודות פרק זה
Cryptography still isn’t easy
certmitm: automatic exploitation of TLS certificate validation vulnerabilities
Aapo Oksman
Escaping Phishermen Nets: Cryptographic Methods Unveiled in the Fight Against Reverse Proxy AttacksKsandros Apostoli
[Blog]
mTLS: When certificate authentication is done wrongMichael Stepankin
Ultrablue: User-friendly Lightweight TPM Remote Attestation over BluetoothNicolas Bouchinet, Loïc Buckwell, and Gabriel Kerneis
HECO: Fully Homomorphic Encryption CompilerAlexander Viand, Patrick Jattke, Miro Haller, and Anwar Hithnawi
[Continued] attack of the side-channels Freaky Leaky SMS: Extracting User Locations by Analyzing SMS TimingsEvangelos Bitsikas, Theodor Schnitzler, Christina Pöpper, and Aanjhan Ranganathan
Downfall: Exploiting Speculative Data GatheringDaniel Moghimi
Your Clocks Have Ears – Timing-Based Browser-Based Local Network Port ScannerDongsung Kim
Composition is hard in the cloud Using Cloudflare to bypass CloudflareFlorian Schweitzer and Stefan Proksch
[Blog]
The GitHub Actions Worm: Compromising GitHub repositories through the Actions dependency treeAsaf Greenholts
All You Need is GuestMichael Bargury
Nifty sundries Contactless Overflow: Critical contactless vulnerabilities in NFC readers used in point of sales and ATMsJosep Pi Rodriguez
Defender-Pretender: When Windows Defender Updates Become a Security RiskOmer Attias and Tomer Bar
Fuzz target generation using LLMsDongge Liu, Jonathan Metzman, and Oliver Chang
Route to Bugs: Analyzing the Security of BGP Message ParsingDaniel dos Santos, Simon Guiot, Stanislav Dashevskyi, Amine Amri, and Oussama Kerro
It was harder to sniff Bluetooth through my mask during the pandemic…Xeno Kovah
אנגלית
ארצות הברית
בפרק זה
תעתיק 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
פרקים אחרים בפודקאסט הזה
Privacy in the modern era
IPvSeeYou: Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation
Erik Rye and Robert Beverly
[Slides] [Paper] [Code]
Device Tracking via Linux’s New TCP Source Port Selection Algorithm
Moshe Kol, Amit Klein, and Yossi Gilad
[Code] [Paper]
zk-creds: Flexible A…
AI/ML in security
Injecting into LLM-adjacent components
Johann Rehberger
[Blog 1] [Blog 2]
Teams of LLM Agents can Exploit Zero-Day Vulnerabilities
Richard Fang, Rohan Bindu, Akul Gupta, Qiusi Zhan, and Daniel Kang
[Paper]
Project Naptime: Evaluating Offensive Security Capabilities of Large Lang…
Revealing more than anticipated, and preventing prying eyes
PrintListener: Uncovering the Vulnerability of Fingerprint Authentication via the Finger Friction Sound
Man Zhou, Shuao Su, Qian Wang, Qi Li, Yuting Zhou, Xiaojing Ma, and Zhengxiong Li
[Paper]
ModelGuard: Information-Theoretic Defense Ag…
LLMs ain't making life any easier
Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs
Tsung-Yin Hsieh, Ben Nassi, Vitaly Shmatikov, and Eugene Bagdasaryan
[Slides] [Paper] [Code]
Tree of Attacks: Jailbreaking Black-Box LLMs Automatically
Anay Mehrotra, Manolis Zampetak…
הצהרה: הפודקאסט והגרפיקה המוטבעים בדף זה הם מ-Jacob Torrey, research@thinkst.com, haroon meer, marco slaviero, שהוא רכושו של בעליו ואינו קשור או מאושר על ידי Listen Notes, Inc.
