INFORMAZIONI SU QUESTO PODCAST 🔗

Frequenza di aggiornamento:
every 94 days
Durata media dell'audio:
30 minutes
Interviste agli ospiti
Ha degli sponsor
Inglese
Stati Uniti
20 episodi
da 30 Agosto 2021
episodic

ULTIMO EPISODIO 🔗

Infrastructure under renewed scrutiny Lost in Translation: Text Message Spoofing via Email Sumanth Rao, Ye Shu, Stefan Savage, Aaron Schulman, Geoffrey M. Voelker, and Enze Liu [Code] [Paper] Hack the Source, Of the Source Tsi-Lin Ng [Slides] RebirthDay Attack: Reviving DNS Cache Poisoning w…

CERCA TRA GLI EPISODI PASSATI

Cerca gli episodi passati di ThinkstScapes.

EPISODI PRECEDENTI

  Pushing browsers to the limit Abusing Modern Browser Features for Phishing Alexander Hurbean [Blog post] [Video] Committing CSS Crimes for fun and profit Lyra Rebane [Slides] [Blog post] [Video] Improving the Trustworthiness of Javascript on the Web Ezzudin Alkotob, Giulio Berra, Benjami…
Networking beyond plug-and-play GET /large file HTTP/1.1: Connection-Based TCP Amplification Attacks Yepeng Pan, Lars Richter, and Christian Rossow [Paper] [Code] WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls Seyed Ali Akhavani, Bahruz Jabiyev, Ben Kallus, Cem Topcuo…
Q3’25 ThinkstScapes Microsoft-induced security woes One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens Dirk-jan Mollema [Blog post] Turning Microsoft's Login Page into our Phishing Infrastructure Keanu Nys [Slides] [Video] You snooze you lose: RPC-Racer wi…
ThinkstScapes Q2’25 Networking is always tricky Beyond the Horizon: Uncovering Hosts and Services Behind Misconfigured Firewalls Qing Deng, Juefei Pu, Zhaowei Tan, Zhiyun Qian, and Srikanth V. Krishnamurthy [Paper] 0.0.0.0 Day: Exploiting Localhost APIs From The Browser Avi Lumelsky and Gal Elbaz […
ThinkstScapes Q1’25 Putting it into practice Homomorphic Encryption across Apple features Rehan Rishi, Haris Mughees, Fabian Boemer, Karl Tarbe, Nicholas Genise, Akshay Wadia, and Ruiyu Zhu [Code] [Paper] [Video] Beyond the Hook: A Technical Deep Dive into Modern Phishing Methodologies Alexandre Ne…
ThinkstScapes Q4’24 Wins and losses in the Microsoft ecosystem Pointer Problems - Why We’re Refactoring the Windows Kernel Joe Bialek [Video] Defending off the land Casey Smith, Jacob Torrey, and Marco Slaviero [Slides] [Code] Unveiling the Power of Intune: Leveraging Intune for Breaking Into Your …
Themes covered in this episode Edge cases at scale still matter Works from this theme exploit rarely-occurring issues, but with an internet-wide aperture to end up with impressive results. Look for: mechanising bit-squatting; static code analysis for vulnerabilities across all browser extensions, o…
AI/ML in security Injecting into LLM-adjacent components Johann Rehberger [Blog 1] [Blog 2] Teams of LLM Agents can Exploit Zero-Day Vulnerabilities Richard Fang, Rohan Bindu, Akul Gupta, Qiusi Zhan, and Daniel Kang [Paper]  Project Naptime: Evaluating Offensive Security Capabilities of Large Langu…
Revealing more than anticipated, and preventing prying eyes PrintListener: Uncovering the Vulnerability of Fingerprint Authentication via the Finger Friction Sound Man Zhou, Shuao Su, Qian Wang, Qi Li, Yuting Zhou, Xiaojing Ma, and Zhengxiong Li [Paper] ModelGuard: Information-Theoretic Defense Aga…
Dichiarazione di non responsabilità: Il podcast e la grafica incorporati in questa pagina provengono da Jacob Torrey, research@thinkst.com, haroon meer, marco slaviero, che è di proprietà del suo proprietario e non è affiliato o approvato da Listen Notes, Inc.