Breaking Ground·47 min
Michael Bargury
Shows how Azure AD guest accounts can reach corporate SQL data and shared connections, and how to harden them.
cloudidentityattack+2
Breaking Ground BSidesLV 2023
Las Vegas, USA · August 2023 · 18 talks
Breaking Ground talks from BSides Las Vegas 2023.
Filters+
1–17 of 17 talks / 18
Breaking Ground·30 min
Jen Easterly
A government cyber agency leader covers secure by design, vulnerability disclosure and AI trust with hackers.
interviewvulnerabilitiesai+2
Breaking Ground·58 min
Josh Corman
Recounts how a small volunteer group shifted medical device and healthcare policy, and what remains unresolved.
healthcareiotrisk+2
Breaking Ground·46 min
Chris Merkel
Explains how reverse-proxy phishing kits steal MFA session tokens and how defenders can detect, respond to and hunt for them.
detectionincident-responseidentity+2
Breaking Ground·31 min
Or Aspir
Maps five data exfiltration methods in Google Cloud Storage, BigQuery and Cloud SQL to the audit logs that expose them.
cloudthreat-detectionincident-response+1
Breaking Ground·36 min
Priyank Nigam
Examines how personal apps, rootkits and misconfigured management policies can break the work profile boundary on Android.
androidmobilemanagement+2
Breaking Ground·47 min
Erin Cornelius
Follows a reverse engineer building a bare-metal PowerPC emulator to test and analyze an engine controller's firmware.
embeddedreverse-engineeringframework+2
Breaking Ground·25 min
Covers the path from device firmware to a working exploit.
embeddeddevicereverse-engineering+2
Breaking Ground·51 min
Sounil Yu
Frames generative AI risks through finance and AI-safety analogies, proposing new roles and guardrails for security leaders.
airiskmanagement+2
Breaking Ground·22 min
Ariel Szarf · Doron Karmi
Shows how to read Google Workspace logs and hunt for Google Drive data exfiltration through a real investigation.
incident-responsethreat-detectioncloud+1
Breaking Ground·49 min
Yotam Perkal
Benchmarks commercial and open-source SCA scanners and shows how non-package-manager installs in Docker images hide vulnerabilities.
vulnerabilitiesvulnerability-researchopen-source+2
Breaking Ground·34 min
Covers finding personally identifiable information in exposed RDS snapshots.
awscloudprivacy+1
Breaking Ground·44 min
Jay Smith · Jan Nunez
Shows how intercepting 3270 terminal traffic can bypass field protections in CICS mainframe applications.
mainframeapplicationtool+2
Breaking Ground·24 min
Yusuke Kubo · Kiyohito Yamamoto
Shows how GitHub Actions custom actions and self-hosted runners can be abused for code delivery and command-and-control.
attackbuilddevops+2
Breaking Ground·40 min
Matt Muir
Analyzes cloud-focused malware campaigns that move beyond cryptojacking into credential theft, AWS persistence and botnet deployment.
malware-analysiscloudintelligence+2
Breaking Ground·17 min
Dor Dali
Shows how reading public RDP Gateway protocol specifications exposed remote code execution, an authentication bypass and other CVEs.
vulnerability-researchnetworkopen-source+2
Breaking Ground·39 min
Michael Bargury
Shows how the Power Automate agent built into Windows 11 can be repurposed as a trusted remote execution and C2 channel.
attackwindowscloud+2