BruCON Security Conference Courses

DNS as Critical Infrastructure - Do You Know Where Your Domain Is?

1 rating

A risk-focused examination of DNS as critical Internet infrastructure, from provider dependency and operations to DNSSEC and CAA adoption.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

When the Model Takes Control - The Hidden Risks of AI Autonomy Through MCP - 12

Explore the hidden dangers of AI autonomy through Model Context Protocol, revealing how LLMs can chain tools independently and create new security vulnerabilities in modern systems.

• YouTube
• 1 hour 5 minutes
• Self-Paced
• Free Video

I'm in Your Logs Now - Deceiving Your Analysts and Blinding Your EDR - 11

Discover how to manipulate EDR telemetry through ETW injection, create fake devices in MDE, and exploit event capping to blind security tools in this advanced cybersecurity research.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Our Time in a Product Review Cabal - The Malware and Backdoors That Came With It - 10

Uncover how a pandemic product review scheme exposed widespread malware, backdoors, and vulnerabilities in everyday IoT devices from cameras to vacuum cleaners.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Free Video

Deep-dive to Entra ID Token Theft Protection

Dive into Entra ID's built-in token theft protections, exploring technical details of Token Protection and CAE through demos, plus how attackers may exploit these defenses.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

When Do We Get to Play On Easy Mode

Explore cybersecurity's recurring challenges and why the industry keeps facing the same problems despite technological advances in this thought-provoking keynote.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Web-based Password Managers Under Attack - A Bitwarden Case Study - 07

Explore how modern malware targets web password managers like Bitwarden through memory parsing, function hooking, and malicious extensions in corporate environments.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Stealth in Plain Sight - Turning Native Messaging into a Covert C2 Channel

Discover how to weaponize browser Native Messaging APIs for covert command & control, creating persistent post-exploitation frameworks that evade EDR detection through legitimate channels.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Sthenos - Building Your Own Cross-Architecture Embedded Hacking Arsenal - 05

Discover how to build static debugging and exploitation tools for 35+ embedded architectures using Sthenos Toolkit, covering MIPS routers to ARM IoT devices with real-world scenarios.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Tinker Tailor LLM Spy - Investigate and Respond to Attacks on GenAI Chatbots - 04

Discover how to investigate and respond to GenAI chatbot security incidents, from prompt injection attacks to data breaches, with practical defense strategies and incident response playbooks.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Epochalypse Now - The Coming Collapse of Time Integrity

Uncover the looming 2038 time_t rollover and 2036 NTP epoch vulnerabilities threatening critical infrastructure, plus learn detection methods and exploitation techniques.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Secure with AI or Despite AI - 02

Explore AI's transformative impact on cybersecurity, examining whether artificial intelligence will enhance or challenge security professionals and digital freedoms.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Being a Cyberdefender - Behind the Curtains

Explores the human and organizational realities of cyberdefense: responding to attacks, communicating across teams, and sustaining a cybersecurity career.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Bypassing Microsoft Defender for Identity

Red-team techniques for bypassing Microsoft Defender for Identity detections during on-premises Active Directory attacks.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

A Black-Box Security Evaluation of the SpaceX Starlink User Terminal

A black-box hardware security evaluation of the Starlink terminal demonstrates bypassing verified boot with voltage fault injection and a custom modchip.

• YouTube
• 57 minutes
• Self-Paced
• Conference Talk