OVER DEZE PODCAST 🔗

Frequentie bijwerken:
every 94 days
Gemiddelde audiolengte:
30 minutes
Gastinterviews
Heeft sponsors
Engels
Verenigde Staten
20 afleveringen
sinds 30 augustus 2021
episodic

MEEST RECENTE AFLEVERING 🔗

Infrastructure under renewed scrutiny Lost in Translation: Text Message Spoofing via Email Sumanth Rao, Ye Shu, Stefan Savage, Aaron Schulman, Geoffrey M. Voelker, and Enze Liu [Code] [Paper] Hack the Source, Of the Source Tsi-Lin Ng [Slides] RebirthDay Attack: Reviving DNS Cache Poisoning w…

OUDE AFLEVERINGEN ZOEKEN

Zoek naar eerdere afleveringen van ThinkstScapes.

VORIGE AFLEVERINGEN

  Pushing browsers to the limit Abusing Modern Browser Features for Phishing Alexander Hurbean [Blog post] [Video] Committing CSS Crimes for fun and profit Lyra Rebane [Slides] [Blog post] [Video] Improving the Trustworthiness of Javascript on the Web Ezzudin Alkotob, Giulio Berra, Benjami…
Networking beyond plug-and-play GET /large file HTTP/1.1: Connection-Based TCP Amplification Attacks Yepeng Pan, Lars Richter, and Christian Rossow [Paper] [Code] WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls Seyed Ali Akhavani, Bahruz Jabiyev, Ben Kallus, Cem Topcuo…
Q3’25 ThinkstScapes Microsoft-induced security woes One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens Dirk-jan Mollema [Blog post] Turning Microsoft's Login Page into our Phishing Infrastructure Keanu Nys [Slides] [Video] You snooze you lose: RPC-Racer wi…
ThinkstScapes Q2’25 Networking is always tricky Beyond the Horizon: Uncovering Hosts and Services Behind Misconfigured Firewalls Qing Deng, Juefei Pu, Zhaowei Tan, Zhiyun Qian, and Srikanth V. Krishnamurthy [Paper] 0.0.0.0 Day: Exploiting Localhost APIs From The Browser Avi Lumelsky and Gal Elbaz […
ThinkstScapes Q1’25 Putting it into practice Homomorphic Encryption across Apple features Rehan Rishi, Haris Mughees, Fabian Boemer, Karl Tarbe, Nicholas Genise, Akshay Wadia, and Ruiyu Zhu [Code] [Paper] [Video] Beyond the Hook: A Technical Deep Dive into Modern Phishing Methodologies Alexandre Ne…
ThinkstScapes Q4’24 Wins and losses in the Microsoft ecosystem Pointer Problems - Why We’re Refactoring the Windows Kernel Joe Bialek [Video] Defending off the land Casey Smith, Jacob Torrey, and Marco Slaviero [Slides] [Code] Unveiling the Power of Intune: Leveraging Intune for Breaking Into Your …
Themes covered in this episode Edge cases at scale still matter Works from this theme exploit rarely-occurring issues, but with an internet-wide aperture to end up with impressive results. Look for: mechanising bit-squatting; static code analysis for vulnerabilities across all browser extensions, o…
AI/ML in security Injecting into LLM-adjacent components Johann Rehberger [Blog 1] [Blog 2] Teams of LLM Agents can Exploit Zero-Day Vulnerabilities Richard Fang, Rohan Bindu, Akul Gupta, Qiusi Zhan, and Daniel Kang [Paper]  Project Naptime: Evaluating Offensive Security Capabilities of Large Langu…
Revealing more than anticipated, and preventing prying eyes PrintListener: Uncovering the Vulnerability of Fingerprint Authentication via the Finger Friction Sound Man Zhou, Shuao Su, Qian Wang, Qi Li, Yuting Zhou, Xiaojing Ma, and Zhengxiong Li [Paper] ModelGuard: Information-Theoretic Defense Aga…
Disclaimer: De podcast en de illustraties die op deze pagina zijn ingesloten, zijn afkomstig van Jacob Torrey, research@thinkst.com, haroon meer, marco slaviero, eigendom van de eigenaar en niet gelieerd aan of goedgekeurd door Listen Notes, Inc.