Talks·32 min
Vangelis Stykas
Shows how malware command-and-control panels can be assessed with ordinary web application testing, using several malware families as case studies.
malware-analysisintelligenceweb+2
February 2024 · Helsinki, Finland
Disobey 2024
1 session · 27 talks
Sessions at this event
All Disobey 2024 talks
1–24 of 27 talks
Talks·28 min
Matias Huhta
Shows how static analysis of JavaScript syntax trees can recover API endpoints and their arguments from minified frontend code.
webrecontool+2
Talks·47 min
Lucas Käldström
Explains relationship-based access control as a way to avoid broken authorization in API servers and control planes.
identitykubernetesarchitecture+2
Talks·39 min
Eero · Henri
Describes how a volunteer team automates cloud deployments and certificate-based user enrollment for a situational awareness server.
cloudautomationinfrastructure+2
Talks·56 min
Jussi Eronen
Walks through how national CERTs and NCSCs work, from incident triage to international information sharing.
incident-responsedefensive-securityintelligence+2
Talks·46 min
Jason Lang
Reviews public breach reports from an attacker's viewpoint and draws red team lessons on pacing, social engineering and tradecraft.
lessons-learnedattacksocial+2
Talks·44 min
Joona Hoikkala
Walks through maintaining the ffuf web fuzzer, from community growth and feature requests to rejecting pull requests.
open-sourcelessons-learnedtool+2
Talks·26 min
Massimo Nardone
Surveys cyber threats facing game companies, from DDoS and account takeovers to regulatory standards and secure development practice.
riskthreatprivacy+2
Talks·35 min
Jarkko Vesiluoma
Traces a bug bounty hunt from an expired domain's callbacks to code execution in a Rancher-managed Kubernetes cluster.
bug-bountykubernetesexploitation+1
Talks·51 min
Decodes the hype around EU cybersecurity developments and offers forward-looking insights on what comes next.
riskthreatintelligence+1
Talks·50 min
Maria Bique · Dimitri
Explores how generative AI and personal data profiling threaten fairness, elections, hiring, and public institutions.
aiprivacymachine-learning+2
Talks·39 min
Joakim Tauren
Shows how communication, storytelling and influence skills can help security staff win support without formal authority.
socialmanagementlearning+2
Talks·42 min
Tomi Koski
Shows how to tear down cheap devices, locate test points and dump firmware with affordable tools and no soldering.
hardwareembeddeddevice+2
Talks·31 min
Mikko Kenttälä
Walks through a zero-click macOS calendar exploit chain that escapes the sandbox, evades Gatekeeper and reaches protected photos.
vulnerability-researchexploitationsandbox+2
Talks·22 min
Mikael Nilsson
Shows how cloud security posture management finds infrastructure misconfigurations that application scans miss, and how to triage them.
cloudriskmanagement+2
Talks·33 min
Jack Fitzsimons
Shows how much personal data two smartwatches send to their makers, and how to limit it.
privacymobiledevice+2
Talks·22 min
Sergey Ichtchenko
Traces how a teen's app vulnerability report turned into a security career, and what steers young hackers away from crime.
vulnerability-researchlearninglessons-learned+1
Talks·36 min
Anne Hautakangas
Explains how DLL side-loading through vulnerable applications can slip past antivirus and EDR, shown with a Bitwarden demo.
attackexploitationdefensive-security+1
Talks·21 min
Aleksi Kallio
Shows how cross-account IAM role assumption creates attack paths in large AWS organizations, and how a graph tool maps them.
cloudidentityaws+3
Talks·25 min
Sami Kivelä
Applies Ken Wilber's integral theory as a thinking lens for hacking, using Wi-Fi and BitLocker examples.
frameworklearningthreat+2
Talks·53 min
Tuomo Makkonen
Shows how collaborative purple teaming tests EDR, Active Directory and evasion gaps, then turns findings into fixes.
detectiondefensive-securityattack+2
Talks·43 min
Satu Korhonen
Maps DevSecOps and MLOps practices onto generative AI systems and argues that securing them needs a cross-disciplinary team.
aimachine-learningdefensive-security+2
Talks·23 min
Aled Mehta · Christian Philipov
Shows how Microsoft Entra enumeration can avoid Graph activity logs, and how Azure ML exposes stored credentials.
cloudidentitythreat-detection+2
Talks·40 min
Bianca Buznean
Explains how trust turns loose professional networks into communities, using a Nordic financial sharing group and Women for Cyber as examples.
trustteaminformation+2