ABOUT THIS PODCAST 🔗
The ThinkstScapes podcast aims to distill and disseminate the cybersecurity research published worldwide. Our researchers track and review hundreds and thousands of talks (so you don't have to) and then bring this to you in small, digestible chunks.
Update frequency:
every 94 days
Average audio length:
30 minutes
Guest interviews
Has sponsors
English
United States
20 episodes
since Aug. 30, 2021
episodic
LATEST EPISODE 🔗
Infrastructure under renewed scrutiny
Lost in Translation: Text Message Spoofing via Email
Sumanth Rao, Ye Shu, Stefan Savage, Aaron Schulman, Geoffrey M. Voelker, and Enze Liu
[Code] [Paper]
Hack the Source, Of the Source
Tsi-Lin Ng
[Slides]
RebirthDay Attack: Reviving DNS Cache Poisoning w…
PREVIOUS EPISODES 🔗
Pushing browsers to the limit
Abusing Modern Browser Features for Phishing
Alexander Hurbean
[Blog post] [Video]
Committing CSS Crimes for fun and profit
Lyra Rebane
[Slides] [Blog post] [Video]
Improving the Trustworthiness of Javascript on the Web
Ezzudin Alkotob, Giulio Berra, Benjami…
Networking beyond plug-and-play
GET /large file HTTP/1.1: Connection-Based TCP Amplification Attacks
Yepeng Pan, Lars Richter, and Christian Rossow
[Paper] [Code]
WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls
Seyed Ali Akhavani, Bahruz Jabiyev, Ben Kallus, Cem Topcuo…
Q3’25 ThinkstScapes
Microsoft-induced security woes
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
Dirk-jan Mollema
[Blog post]
Turning Microsoft's Login Page into our Phishing Infrastructure
Keanu Nys
[Slides] [Video]
You snooze you lose: RPC-Racer wi…
ThinkstScapes Q2’25
Networking is always tricky
Beyond the Horizon: Uncovering Hosts and Services Behind Misconfigured Firewalls
Qing Deng, Juefei Pu, Zhaowei Tan, Zhiyun Qian, and Srikanth V. Krishnamurthy
[Paper]
0.0.0.0 Day: Exploiting Localhost APIs From The Browser
Avi Lumelsky and Gal Elbaz
[…
ThinkstScapes Q1’25
Putting it into practice
Homomorphic Encryption across Apple features
Rehan Rishi, Haris Mughees, Fabian Boemer, Karl Tarbe, Nicholas Genise, Akshay Wadia, and Ruiyu Zhu
[Code] [Paper] [Video]
Beyond the Hook: A Technical Deep Dive into Modern Phishing Methodologies
Alexandre Ne…
ThinkstScapes Q4’24
Wins and losses in the Microsoft ecosystem
Pointer Problems - Why We’re Refactoring the Windows Kernel
Joe Bialek
[Video]
Defending off the land
Casey Smith, Jacob Torrey, and Marco Slaviero
[Slides] [Code]
Unveiling the Power of Intune: Leveraging Intune for Breaking Into Your …
Themes covered in this episode
Edge cases at scale still matter
Works from this theme exploit rarely-occurring issues, but with an internet-wide aperture to end up with impressive results. Look for: mechanising bit-squatting; static code analysis for vulnerabilities across all browser extensions, o…
AI/ML in security
Injecting into LLM-adjacent components
Johann Rehberger
[Blog 1] [Blog 2]
Teams of LLM Agents can Exploit Zero-Day Vulnerabilities
Richard Fang, Rohan Bindu, Akul Gupta, Qiusi Zhan, and Daniel Kang
[Paper]
Project Naptime: Evaluating Offensive Security Capabilities of Large Langu…
Revealing more than anticipated, and preventing prying eyes
PrintListener: Uncovering the Vulnerability of Fingerprint Authentication via the Finger Friction Sound
Man Zhou, Shuao Su, Qian Wang, Qi Li, Yuting Zhou, Xiaojing Ma, and Zhengxiong Li
[Paper]
ModelGuard: Information-Theoretic Defense Aga…
Disclaimer: The podcast and artwork embedded on this page are from Jacob Torrey, research@thinkst.com, haroon meer, marco slaviero, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
PODCAST SEARCH ENGINE
You can use our website to search 3,831,088 podcasts and 196,732,836 episodes by people, places, or topics.
If I have seen further than others, it is by listening to podcasts and standing upon the shoulders of
giants.
‐ Isaac "Llamacorn" Newton
CLAIM THIS PODCAST
Why to claim podcasts?
If you are a podcaster, the best way to manage your podcasts on Listen Notes is by claiming your Listen Notes
podcast pages.
It is a great, free way to engage the podcast community and increase the visibility of your podcasts.
After claiming your Listen Notes podcast pages, you will be able to:
✓
Manually refresh the RSS feed to sync up
✓
Get a verified badge (
✓
) alongside with your podcast name on Listen Notes
✓
Post classified ads for sponsorship,
guests, co-hosts,
cross-promotion...
✓
Respond to listener comments on Listen Notes
✓
Use speech-to-text techniques to transcribe your show and
edit transcripts
✓
Improve the presence of your podcasts, e.g., self-service
podcaster interview...
✓
If you share your Listen Notes page and at-mention @ListenNotes
on X (formerly Twitter),
our official X (formerly Twitter) account will retweet to promote
your show to our followers.
Coming soon:
◯ Self-service promotion on Listen Notes
◯ Track your podcast stats on Listen
Notes, e.g., listens, page
views...
◯ Manage episodes
EDIT
Thank you for helping to keep the podcast database up to date.
