เกี่ยวกับตอนนี้
Q3’25 ThinkstScapes
Microsoft-induced security woes
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
Dirk-jan Mollema
Turning Microsoft's Login Page into our Phishing InfrastructureKeanu Nys
You snooze you lose: RPC-Racer winning RPC endpoints against servicesRon Ben Yizhak
Internal Domain Name Collision 2.0Philippe Caturegli
Logs are not always as they appear Source IP Spoofing in Cloud Logs: A Hands-On Look Across AWS, Azure, and GCPEliav Livneh
[Video]
I'm in Your Logs Now, Deceiving Your Analysts and Blinding Your EDROlaf Hartong
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and EvasionShu-Hao Tung
Autobots roll out! Automating software security with LLMsTyler Nighswander
Agents Built From AlloysAlbert Ziegler
AI Agents for Offsec with Zero False PositivesBrendan Dolan-Gavitt
[Slides]
Are CAPTCHAs Still Bot-hard? Generalized Visual CAPTCHA Solving with Agentic Vision Language ModelXiwen Teoh, Yun Lin, Siqi Li, Ruofan Liu, Avi Sollomoni, Yaniv Harel, and Jin Song Dong
Good vibrations Invisible Ears at Your Fingertips: Acoustic Eavesdropping via Mouse SensorsMohamad Habib Fakih, Rahul Dharmaji, Youssef Mahmoud, Halima Bouzidi, and Mohammad Abdullah Al Faruque
TimeTravel: Real-time Timing Drift Attack on System Time Using Acoustic WavesJianshuo Liu, Hong Li, Haining Wang, Mengjie Sun, Hui Wen, Jinfa Wang, and Limin Sun
[Paper]
Nifty sundries Crescent library brings privacy to digital identity systemsChristian Paquin, Guru-Vamsi Policharla, and Greg Zaverucha
Journey to the center of the PSTN: How I became a phone company, and how you can tooEnzo Damato
Safe Harbor or Hostile Waters: Unveiling the Hidden Perils of the TorchScript Engine in PyTorchJi'an Zhou and Lishuo Song
[Slides]
Ghosts in the Machine Check – Conjuring Hardware Failures for Cross-ring Privilege EscalationChristopher Domas
Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker DocumentsAvital Shafran, Roei Schuster, and Vitaly Shmatikov
Inverting the Xorshift128+ random number generatorScott Contini
ภาษาอังกฤษ
สหรัฐอเมริกา
ในตอนนี้
สำเนาบทสนทนา 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
ตอนอื่นๆ ใน PODCAST นี้
Cryptography still isn’t easy
certmitm: automatic exploitation of TLS certificate validation vulnerabilities
Aapo Oksman
[Slides] [Code] [Video]
Escaping Phishermen Nets: Cryptographic Methods Unveiled in the Fight Against Reverse Proxy Attacks
Ksandros Apostoli
[Blog]
mTLS: When certificate authen…
AI/ML in security
Injecting into LLM-adjacent components
Johann Rehberger
[Blog 1] [Blog 2]
Teams of LLM Agents can Exploit Zero-Day Vulnerabilities
Richard Fang, Rohan Bindu, Akul Gupta, Qiusi Zhan, and Daniel Kang
[Paper]
Project Naptime: Evaluating Offensive Security Capabilities of Large Langu…
Revealing more than anticipated, and preventing prying eyes
PrintListener: Uncovering the Vulnerability of Fingerprint Authentication via the Finger Friction Sound
Man Zhou, Shuao Su, Qian Wang, Qi Li, Yuting Zhou, Xiaojing Ma, and Zhengxiong Li
[Paper]
ModelGuard: Information-Theoretic Defense Aga…
LLMs ain't making life any easier
Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs
Tsung-Yin Hsieh, Ben Nassi, Vitaly Shmatikov, and Eugene Bagdasaryan
[Slides] [Paper] [Code]
Tree of Attacks: Jailbreaking Black-Box LLMs Automatically
Anay Mehrotra, Manolis Zampetaki…
Privacy in the modern era
IPvSeeYou: Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation
Erik Rye and Robert Beverly
[Slides] [Paper] [Code]
Device Tracking via Linux’s New TCP Source Port Selection Algorithm
Moshe Kol, Amit Klein, and Yossi Gilad
[Code] [Paper]
zk-creds: Flexible An…
ข้อสงวนสิทธิ์: พอดแคสต์และอาร์ตเวิร์คที่ฝังอยู่ในหน้านี้มาจาก Jacob Torrey, research@thinkst.com, haroon meer, marco slaviero ซึ่งเป็นทรัพย์สินของเจ้าของและไม่มีส่วนเกี่ยวข้องหรือรับรองโดย Listen Notes, Inc.
