Breaking Ground·49 min
Phil Young · Grant Dobbe · Daemon Tamer
Panelists explain how the Proving Ground mentorship track at BSides Las Vegas helps first-time speakers build talks and careers.
panellearninglessons-learned+1
Breaking Ground BSidesLV 2024
Las Vegas, USA · August 2024 · 15 talks
Breaking Ground talks from BSides Las Vegas 2024.
1–15 of 15 talks
Breaking Ground·37 min
Jay Chen · Ravid Mazon
Shows how large language models can automate finding broken object level authorization flaws in APIs.
vulnerability-researchaiweb+2
Breaking Ground·16 min
Nick Frost
Walks through three ways to steal Chrome cookies on macOS and the Santa and osquery controls that block or detect them.
attackdefensive-securitydetection+2
Breaking Ground·17 min
Demonstrates how misconfigured OIDC authentication in cloud environments can be abused to gain access.
cloudidentityattack+1
Breaking Ground·20 min
Amelia Weeding · Dave Bailey
Shows how a cheap Tuya-based weather station leaks credentials in firmware and accepts forged commands over its network.
iotreverse-engineeringembedded+2
Breaking Ground·29 min
Dominic Zanardi · Matthew Sullivan
Shows how Instacart automates just-in-time access approvals with an LLM that scores requests against existing role holders.
identityaiautomation+2
Breaking Ground·38 min
Fabricio Bortoluzzi
Presents a Terraform-based cloud telescope that captures unsolicited internet traffic and profiles Mirai infection patterns.
cloudiotmalware-analysis+2
Breaking Ground·40 min
Patrick Kiley
Introduces an open-source adapter that connects to serial, JTAG, SPI, I2C and SWD targets at mixed logic levels.
hardwareembeddedopen-source+3
Breaking Ground·20 min
Elysee Franchuk · Mohnish Dhage
Shows how raw Ethernet frames can carry covert remote shell traffic that slips past common layer 3 and higher detections.
networkattackdetection+1
Breaking Ground·42 min
Brian Reilly
Maps ColdFusion attack surface through recent vulnerabilities and offers ways to reduce exposure in legacy deployments.
appsecvulnerabilitiesweb+2
Breaking Ground·17 min
Liv Matan
Explains how shared cloud parent domains enable session fixation, using a one-click AWS Airflow account takeover as the case study.
cloudwebvulnerability-research+2
Breaking Ground·36 min
Oreen Livni Shein · Elad Pticha
Shows how a compromised pod can poison Argo CD's Redis cache to deploy malicious workloads and take over a Kubernetes cluster.
kubernetesvulnerability-researchdevops+2
Breaking Ground·26 min
Chris Formosa · crudd
Traces a proxy botnet back from the dead and the criminal proxy service it was feeding, plus a failed takedown.
malware-analysisintelligencenetwork+2
Breaking Ground·44 min
Allyn Stott
Shows how to build detection and response metrics that answer real questions, drive progress, and avoid gaming.
threat-detectionincident-responsesecurity-operations+2
Breaking Ground·42 min
Kaichi Sameshima · Atsushi Kanda · Ryo Minakawa
Tracks a pro-Russian hacktivist group's DDoS botnet, its command-and-control protocol, and the infrastructure it keeps rotating.
intelligencethreatinfrastructure+2