Talks·9 min
Presents a short monologue on global inefficiency in a nine-minute talk.
managementrisksystem
Talks hack.lu 2024
Luxembourg · October 2024 · 62 talks
Talks from hack.lu 2024.
Filters+
1–24 of 54 talks / 62
Talks·31 min
Mathieu Le Cleach
Shows how a team turns vendor-neutral Sigma detection rules into SIEM queries through a git-based pipeline.
threat-detectiondetectionautomation+2
Talks·6 min
Roman Graf
Shows security managers how to forecast exploit trends by normalizing threat feeds and applying simple machine learning methods.
threatintelligencemachine-learning+2
Talks·7 min
Trey Darley
Argues that the 2038 Unix time rollover poses a hidden risk to fielded embedded devices and needs action now.
embeddedriskdevice+2
Talks·22 min
Shing-Li Hung
Shows how dark web leak posts can be classified with BERT and turned into MISP-ready CTI reports using a local RAG setup.
threatintelligencemachine-learning+2
Talks·33 min
Simon Geusebroek
Shows how physical intrusion tests get past access controls, locks and monitoring that look secure on paper.
attackbuildingrisk+2
Talks·27 min
Pedro Umbelino
Shows how automatic tank gauge systems at fuel sites can be abused, through legacy protocol exposure and new web interface flaws.
icsvulnerability-researchdevice+2
Talks·32 min
Claire Vacherot
Shows how simple unauthenticated requests can crash an industrial protocol gateway and why network segmentation matters.
icsdevicevulnerabilities+2
Talks·38 min
Vic Huang
Walks through protocol and web flaws in open satellite projects and a ground station, from spoofed telemetry to remote memory access.
vulnerability-researchembeddedinfrastructure+2
Talks·28 min
Adel Karimi
Shows how a research honeypot uses a language model to generate realistic web responses on the fly for unseen applications.
aimachine-learninghoneypot+2
Talks·28 min
Hilko Bengen
Explains how Linux detection and response can work with auditd-based logging and open tooling instead of a commercial EDR.
linuxthreat-detectionincident-response+2
Talks·28 min
Thomas Chopitea
Presents a YAML-based catalog of forensic questions and approaches, with tooling to render, share and automate them.
incident-responseopen-sourceintelligence+2
Talks·30 min
Hugo Bertin
Shows how one crafted UDP packet can force players in Unreal Engine games to disconnect.
vulnerability-researchnetworkattack+1
Talks·32 min
Santi Abastante
Demonstrates Dredge, a free open-source toolkit for cloud log collection, posture checks, host isolation and threat hunting.
incident-responsecloudopen-source+2
Talks·34 min
David Durvaux · Alexandre Dulaunoy
Explains how running CTF challenges at FIRST conferences builds learning, trust and collaboration across international security teams.
challengelearninglessons-learned+2
Talks·16 min
Demonstrates exploiting password management software to retrieve stored credentials from process memory.
exploitationmemoryattack+1
Talks·6 min
Cruciani David
Demonstrates new Flowintel case management features, including MISP enrichment and object sharing from within a case.
incident-responseintelligencetool+2
Talks·33 min
Jacob Torrey
Shows how a free token flags adversary-in-the-middle phishing against Microsoft Entra ID logins before passwords are entered.
threat-detectionidentityintelligence+2
Talks·5 min
Lukáš Kršek
Explains how anycast DNS and a globally distributed proxy network can keep websites reachable during large DDoS attacks.
networkinfrastructureweb+2
Talks·28 min
Stanislav Dashevskyi
Shows how classic buffer overflows still let attackers take over exposed edge routers and gateways in the field.
exploitationvulnerabilitiesiot+2
Talks·26 min
Krzysztof Zając
Shows how a national CERT scans public-sector domains at scale and turns the findings into reports for each owner.
vulnerabilitiesinfrastructureweb+2
Talks·6 min
Fukami
Explains how the EU New Legislative Framework shapes the Cyber Resilience Act and who open source stakeholders should engage.
open-sourceframeworklightning+1
Talks·8 min
Examines how much lead time organizations had to prepare for the move to IPv6.
networkinternetinfrastructure+1
Talks·29 min
Stephan Berger
Surveys Linux rootkit techniques from LD_PRELOAD hooks to eBPF and shows how responders can spot them.
linuxkernelincident-response+2