Track 1·57 min
Adrian Wood · Mary Walker
Shows how attackers can hide malware in machine learning models shared on Hugging Face and run it inside ML environments.
machine-learningmalware-analysisattack+3
February 2024 · Mesa, AZ, USA
CactusCon 12
3 sessions · 36 talks
Sessions at this event
All CC12 talks
1–24 of 35 talks / 36
Track 1·1 hr 3 min
Michael Moore · Ivan Zhelev · Ryan Murray · Nate Young · Angie Claer · Jerry Keeley · Dana Lewis · Lester Gody · Sean Trackman · Ken Ma
Arizona election officials and their partners describe physical and cyber protections and threat sharing ahead of the 2024 general election.
panelinfrastructurethreat+2
Track 1·58 min
Naomi Brockwell
Argues that pervasive surveillance shifts power and shapes behavior, then offers practical privacy steps for builders and users.
privacysurveillancetrust+2
Track 1·39 min
Ryan Thompson
Walks through AWS and Azure persistence mechanisms in the cloud control plane and how defenders can detect them.
clouddetectionidentity+2
Track 1·57 min
Ben Webb
Explains how cloud shared responsibility changes network security thinking and demonstrates a live cloud account compromise.
cloudidentitynetwork+2
Track 1·43 min
Alissa
Explains how WiFi, Bluetooth and RFID signals can reveal where people are, and which common privacy beliefs hold up.
privacynetworkdevice+1
Track 1·25 min
David Bravo
Shows how misconfigured AWS Cognito user pools and identity pools can be abused to reach AWS resources.
cloudidentityaws+2
Track 1·23 min
Anthony Pipia
Explains how dangling DNS records, including A records, enable subdomain takeovers and how to automate their detection.
vulnerabilitiescloudinfrastructure+3
Track 1·56 min
Marcus Guevara
Points newcomers to free resources covering IR preparation, telemetry, forensic artifacts, free tools and building labs.
incident-responselearningdefensive-security+2
Track 1·27 min
Noah Pitts · Morgan Hunting
Shows how HID iClass multiclass readers can be downgraded to weaker low-frequency cards using a Flipper Zero.
hardwaredevicevulnerabilities+2
Track 1·57 min
Katelyn Bowden (Medus4) · Christien 'DilDog' Rioux
Presents Veilid, an open-source peer-to-peer framework for private messaging and decentralized apps.
privacyopen-sourcenetwork+2
Track 1·27 min
Yael Grauer · David Huerta
Roasts 2023 security articles on phones, surveillance and hyped threats, and what readers should actually worry about.
privacylessons-learnedmobile+2
Track 2·51 min
John Poulin
Walks through a time-boxed AWS red team workflow covering recon, privilege escalation, exfiltration and persistence with common tools.
cloudexploitationautomation+2
Track 2·56 min
Philip Young
Walks through a mainframe penetration test from SNA scanning to privilege escalation and data exfiltration.
mainframeexploitationnetwork+2
Track 2·46 min
Larry Suto
Shows how to stand up a self-hosted MISP threat intelligence platform and connect it to SIEM and endpoint tools.
intelligencethreatopen-source+2
Track 2·52 min
Ken Westin
Traces how stolen-device recovery and photo metadata uncovered organized crime, and how the same methods threaten privacy.
open-sourceintelligenceprivacy+2
Track 2·55 min
Michael Galde
Shows how a university built passive OT network monitoring to help facilities staff baseline and understand industrial protocol traffic.
icsinfrastructurenetwork+2
Track 2·8 min
Rebecca T
Explains how phishing kits are built and sold as services, how criminals evade detection, and how to defend against them.
phishingthreatdefensive-security+1
Track 2·45 min
Ofir Shen
Shows how baselining each process's network behavior can expose injected code that host-based tools miss.
threat-detectionnetworkdetection+2
Track 2·48 min
Danny Quist
Shows how to reverse Go-based BianLian ransomware binaries, restoring symbols and separating author code from library code.
reverse-engineeringmalware-analysisransomware+2
Track 2·50 min
Mari DeGrazia
Shows where MSIX-packaged apps keep per-application registry hives that traditional forensic checks often miss.
windowsincident-responsedigital-forensics+2
Track 2·50 min
Or Katz
Traces a long-running phishing scam whose redirect network and reused templates kept it alive across thousands of domains.
phishinginfrastructurethreat+2
Track 2·54 min
Andrew Sanford
Examines how organizations can verify employee identity when voice, video and other impersonation methods can be convincingly faked.
identitysocialai+2
Track 3
Shows how to move past ordinary bug hunting toward finding a server-side request forgery worth a bounty.
bug-bountywebappsec+1