Security Courses

nullcon

macOS Security Features Bypasses by Example

Explore macOS security features, vulnerabilities, and bypass techniques with a Microsoft security expert. Gain insights into SIP, TCC, and potential exploit avenues for researchers and professionals.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

nullcon

An Azure Sphere Security Breakdown

Explore Azure Sphere IoT security features, vulnerabilities discovered during Microsoft's research challenge, and a privilege escalation chain for acquiring Azure Sphere Capabilities.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

nullcon

Telecom Security Challenges in 5G

Explore 5G telecom security challenges, improvements, and implementation issues. Learn about virtualization risks, DDOS threats, and industry initiatives like NESAS in this comprehensive overview.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

nullcon

Security Research and Disclosure - The Unauthorized Biography

Explore the evolution of security research and disclosure, from historical "unbreakable locks" to modern challenges in IoT, blockchain, and AI, with insights on ethical hacking and vulnerability reporting.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

nullcon

Enterprise Security Architecture - Is It Time for a Booster Shot?

Explore evolving enterprise security architecture beyond traditional layered defense, addressing modern challenges like advanced hacking, cloud adoption, and remote work to enhance organizational cybersecurity.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

nullcon

Insecurity of Smart Energy Meters - A Hardware Security Perspective

Explore hardware security vulnerabilities in smart energy meters, covering threat classifications, current trends, and testing methodologies for advanced metering infrastructure and grid security.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

nullcon

Security Compliance in the ICS Environment

Explore ICS/OT security compliance beyond vulnerability assessment. Learn to build a comprehensive security program integrating external and internal regulations for critical industrial environments.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

nullcon

Assessing the Security Posture of ICS Infrastructure Using ISA 62443 Standard

Explore industrial cybersecurity, ICS threats, and resilience strategies using ISA-62443. Learn to assess and protect critical infrastructure from cyber attacks in the Energy, Resources, and Industrials sector.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

nullcon

Crouching Hacker, Killer Robo? Removing Fear from Cyber-Physical Security

Exploring cyber-physical security beyond fear-mongering, this talk examines root causes of vulnerabilities and proposes better approaches to embed security analysis in system design.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

nullcon

Basic Security Analysis on Data and Information

Learn essential digital security techniques for analyzing data and information, focusing on threat identification, communication safety, and practical tools for journalists and civil society groups.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

nullcon

Injecting Security Into Web Apps With Runtime Patching And Context Learning

Explore advanced web application security techniques using Runtime Application Self Protection (RASP) to prevent code injections and other vulnerabilities through dynamic analysis and patching.

• YouTube
• 55 minutes
• On-Demand
• Conference Talk

nullcon

DevOpSec - Rapid Security in the AWS Cloud

Explore DevOpSec practices for rapid, secure AWS deployments. Learn collaborative strategies for development, operations, and security teams to achieve compliance in agile environments.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

nullcon

Engineering Better Security at Facebook

Explore Facebook's approach to enhancing security through developer-focused tools and practices, addressing vulnerability prevention and detection in large-scale software development.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

nullcon

ICS SCADA Security Analysis of a Beckhoff CX5020 PLC

Análisis de seguridad de un PLC Beckhoff CX5020 utilizado en sistemas SCADA, revelando vulnerabilidades y demostrando formas de obtener control sobre el programa y el sistema operativo.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

nullcon

O'Dea Assertions Untwining the Security of the SAML Protocol

Explore SAML protocol security, including XML signature attacks, attribute implementation, and fuzzing techniques. Learn to identify and mitigate vulnerabilities in SSO systems.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk