Security Vulnerabilities Courses and Certifications

Objective-See Foundation

Unexpected, Unreasonable, Unfixable - Filesystem Attacks on macOS

Dive into an eye-opening exploration of macOS filesystem vulnerabilities, discovering critical security flaws and innovative attack techniques that led to multiple zero-day discoveries and Apple bounties.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Objective-See Foundation

Unveiling the Apple CVE-2024-40834 - A Shortcut to the Bypass Road

Delve into a critical security vulnerability in Apple's Shortcuts app that enables arbitrary command execution and file access across iOS, WatchOS, MacOS, and VisionOS, potentially facilitating drive-by-download attacks.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Black Hat

Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls

Discover techniques for crafting RFC-compliant email addresses that exploit parser discrepancies, allowing you to bypass security controls, spoof domains, and access protected systems.

• YouTube
• 42 minutes
• On-Demand
• Free Video

OpenSSF

Rules of Engagement for Forking a Dependency

Explore guidelines for forking dependencies when facing security vulnerabilities, balancing community responsibility with timely fixes.

• YouTube
• 11 minutes
• On-Demand
• Free Video

Kernel Recipes

CVEs are Alive, but Do Not Panic! - Kernel Security Update 2024

Explore the world of CVEs in kernel security, understanding their impact and learning how to approach them without unnecessary alarm.

• YouTube
• 40 minutes
• On-Demand
• Free Video

USENIX

Towards an Effective Method of ReDoS Detection for Non-backtracking Engines

Explore advanced techniques for detecting ReDoS vulnerabilities in non-backtracking regex engines, featuring EvilStrGen tool and novel attack string generation methods for enhanced security testing.

• YouTube
• 13 minutes
• On-Demand
• Free Video

USENIX

Intellectual Property Exposure: Subverting and Securing Intellectual Property Encapsulation in Texas Instruments Microcontrollers

Explore security vulnerabilities in Texas Instruments MSP430 microcontrollers' IPE technology and learn practical attack scenarios plus proposed hardware solutions for enhanced protection.

• YouTube
• 12 minutes
• On-Demand
• Free Video

nullcon

Exploiting the Impossible - A Deep Dive into A Vulnerability Apple Deems Unexploitable

Uncover how researchers exploited a critical race condition in Apple's file-copy APIs that Apple deemed impossible to exploit, affecting all devices and bypassing patches.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Donato Capitella

Security Risks of LLM Browser Agents - Understanding Prompt Injection Vulnerabilities

Explore security vulnerabilities in LLM browser agents, focusing on prompt injection risks, attack demonstrations, operational mechanics, and essential defense strategies for safer AI integration.

• YouTube
• 13 minutes
• On-Demand
• Free Video

Mitigating Security Vulnerabilities on Google Cloud

724 ratings at Coursera

Learn to mitigate security vulnerabilities in Google Cloud, covering DDoS protection, content-related threats, monitoring, logging, auditing, and scanning techniques to enhance your cloud infrastructure's security posture.

• Coursera
• 6 hours 31 minutes
• On-Demand
• Paid Course

Web Security: Common Vulnerabilities And Their Mitigation

622 ratings at Udemy

A guide to dealing with XSS, session hijacking, XSRF, credential management, SQLi and a whole lot more

• Udemy
• 8 hours 2 minutes
• On-Demand
• Paid Course

Identifying Security Vulnerabilities

178 ratings at Coursera

Explore threat modeling, cryptography, and web vulnerabilities. Learn to identify and mitigate security risks in applications, including injection attacks and authentication issues.

• Coursera
• 13 hours 27 minutes
• On-Demand
• Paid Course

Identifying Security Vulnerabilities in C/C++Programming

81 ratings at Coursera

Learn to identify and mitigate security vulnerabilities in C/C++ code, focusing on user privileges, input validation, buffer overflows, cryptography, and best practices for secure programming.

• Coursera
• 22 hours 45 minutes
• On-Demand
• Paid Course

JSConf

StrangerDanger - Finding Security Vulnerabilities Before They Find You

Explore security risks in NPM ecosystem, learn to identify and mitigate vulnerabilities in open-source dependencies using real-world examples and practical solutions.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Black Hat

Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf

Uncovers critical security flaws in Apple's ZeroConf frameworks, demonstrating vulnerabilities in Multipeer Connectivity, Bonjour, and services like AirDrop, allowing impersonation and man-in-the-middle attacks.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk