Ground Floor·42 min
Karan Dwivedi
Shows how packet captures of consumer robot vacuums expose weak authentication, location leaks and floor-plan data.
iotnetworkprivacy+2
Ground Floor BSidesLV 2022
Las Vegas, USA · August 2022 · 15 talks
Ground Floor talks from BSides Las Vegas 2022.
1–15 of 15 talks
Ground Floor·45 min
Vineeta Sangaraju
Shows how to vet third-party libraries in hybrid mobile apps against core application security principles.
mobileappsecopen-source+2
Ground Floor·49 min
Remi Escourrou · Xavier Gerondeau · Gauthier Sebaux
Walks through a pentest of CI/CD pipelines, from source code leaks to Jenkins, Kubernetes and AWS privilege escalation.
devopscloudkubernetes+2
Ground Floor·47 min
Omer Gil · Asaf Greenholts
Walks through three CI/CD attacks against a deliberately vulnerable lab, with the fix for each weakness.
devopsbuildattack+3
Ground Floor·47 min
Cheryl Biswas
Traces Chinese state-linked supply chain attacks and how trusted open-source dependencies become the entry point.
threatintelligencesupply+2
Ground Floor·52 min
Ron Bowes
Shows how real vulnerabilities, from proxy auth bypasses to game glitches, get turned into teaching CTF challenges.
challengevulnerabilitieslessons-learned+2
Ground Floor·52 min
Kellen Benson
Walks through a step-by-step triage method for a suspicious Excel alert, from reading the alert to containment and scoping.
incident-responsemalware-analysisthreat-detection+2
Ground Floor·53 min
Cybelle Oliveira
Surveys how Brazilian fraud schemes work, from mule accounts and fake banking pages to social engineering and scam resilience.
socialthreatidentity+1
Ground Floor·55 min
Uriel Kosayev
Shows how red teamers can learn from ransomware internals and build antivirus-evading malware with detection in mind.
malware-analysisreverse-engineeringransomware+2
Ground Floor·51 min
vinay prabhushankar
Walks through pre-acquisition due diligence and post-close integration playbooks for security teams handling M&A deals.
riskmanagementteam+2
Ground Floor·15 min
Cher Boon Sim
Shows how repeated URL parameters parsed differently across frameworks can let malicious input slip past front-end checks.
webappsecvulnerabilities+1
Ground Floor·45 min
Traces the history and cast of banking trojans targeting Latin America, told as a dramatic cybercrime story.
malware-analysisthreatattack
Ground Floor·58 min
Blue Hephaestus
Shows how a Linux wrapper tool chains imaging, file carving and classification to recover data from damaged drives.
toollinuxincident-response+3
Ground Floor·53 min
Tanya Janca
Explains common DevSecOps missteps and offers practical ways to add security to pipelines without alienating developers.
appsecdevopsdeveloper+2
Ground Floor·49 min
Steve Winterfeld · Tony Lauro
Argues zero-day response belongs in crisis management, covering vendors, leadership, and customer communication.
incident-responsevulnerabilitiesrisk+2