nullcon Courses

Operationalizing Threat Intelligence for Collective Defense

Explore automated threat intelligence for proactive cybersecurity. Learn to collect, analyze, and share actionable insights in real-time, enhancing organizational defense against evolving threats.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

The Great Sandbox Escape

Explore novel ransomware techniques, including virtual machine deployment for attacks. Learn about attacker strategies, detection methods, and cybersecurity insights from a malware specialist.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Insecurity of Smart Energy Meters - A Hardware Security Perspective

Explore hardware security vulnerabilities in smart energy meters, covering threat classifications, current trends, and testing methodologies for advanced metering infrastructure and grid security.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Security Compliance in the ICS Environment

Explore ICS/OT security compliance beyond vulnerability assessment. Learn to build a comprehensive security program integrating external and internal regulations for critical industrial environments.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Cyber Insurance - What Makes a Good Fit for You

Explore cybersecurity insurance essentials, including policy components, data elements for risk assessment, and key security controls. Learn to determine appropriate coverage and understand industry standards.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Assessing the Security Posture of ICS Infrastructure Using ISA 62443 Standard

Explore industrial cybersecurity, ICS threats, and resilience strategies using ISA-62443. Learn to assess and protect critical infrastructure from cyber attacks in the Energy, Resources, and Industrials sector.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

Crouching Hacker, Killer Robo? Removing Fear from Cyber-Physical Security

Exploring cyber-physical security beyond fear-mongering, this talk examines root causes of vulnerabilities and proposes better approaches to embed security analysis in system design.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

InfoSec Deep Learning in Action

Explore deep learning applications in cybersecurity, including use cases, data pipelines, algorithms, and real-world deployment challenges. Learn how AI can combat ransomware and other cyber threats.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

XNU Heap Exploitation - From Kernel Bug to Kernel Control

Exploración detallada de la explotación del heap XNU, analizando dos vulnerabilidades del kernel y tres exploits. Cubre internos de XNU, técnicas de explotación y cambios entre versiones de iOS.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

The One Weird Trick SecureROM Hates - Vol. 2

Exploring checkm8 vulnerability in iOS SecureROM, its exploitation for jailbreaking, and updates on pongoOS development. Insights into cross-platform challenges and future plans for iOS security research.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Conference Talk

Don't Ruck Us Too Hard - Owning All of Ruckus AP Devices

Explore vulnerabilities in Ruckus AP devices, including pre-authentication remote code execution exploits. Learn about research methods, discovered CVEs, and a framework for cross-architecture analysis.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Rage Against the IDOR's - Using Machine Learning Models to Detect and Stop Authorization Bypass Vulnerabilities

Explore ML techniques to detect and prevent authorization bypass vulnerabilities in web applications, focusing on successful attacks and minimizing false positives.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Bug Bounty - Why Is This Happening

Explore bug bounty programs' challenges and realities from multiple perspectives, offering insights into their evolution, limitations, and potential for improvement in cybersecurity.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk

Basic Security Analysis on Data and Information

Learn essential digital security techniques for analyzing data and information, focusing on threat identification, communication safety, and practical tools for journalists and civil society groups.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

HackIM CTF - Do's and Don'ts

Explore CTF competitions: learn security through challenges in web, crypto, reverse engineering, and more. Gain insights on dos and don'ts for successful participation in HackIM CTF.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk