Black Hat USA·39 min
Sharon Brizinov · Noam Moshe
Analysts investigate attack surfaces and defenses concerning A Pain in the NAS: Exploiting Cloud Connectivity to PWN Your NAS.
cloudnaspain+2
Sharon Brizinov
8 talks in the archive.
Filters+
Loading filters…
1–8 of 8 talks · loading…
Black Hat USA·40 min
Sharon Brizinov · Noam Moshe
Analysts investigate attack surfaces and defenses concerning Exploiting OPC-UA in Every Possible Way: Practical Attacks Against Modern OPC-UA Architectures.
opc-uaexploitingpossible+2
Main Stage·44 min
Noam Moshe · Sharon Brizinov
Claroty Team82 reveals how cloud connectivity features in Western Digital and Synology NAS devices allow remote compromise and full RCE across millions of devices.
nascloudpwn2own+2
Main Stage·39 min
Noam Moshe · Sharon Brizinov
Claroty Team82 reveals critical vulnerabilities across OPC UA protocol stack implementations, demonstrating remote code execution across industrial SCADA networks.
opc-uaics-otscada+2
Main Stage·24 min
Sharon Brizinov · Tal Skverer
Tal Skverer details GhostToken, a critical zero-day vulnerability in Google Cloud Platform allowing third-party OAuth apps to become invisible and unremovable.
gcpoauthcloud+2
Main Stage·22 min
Sharon Brizinov
Sharon Brizinov demonstrates 'Evil PLC' attacks, weaponizing compromised industrial PLCs as offensive footholds to compromise engineering workstations.
plcicsscada+2
ICS Village·30 min
Sharon Brizinov · Uri Katz
Claroty researchers disclose critical vulnerabilities in CODESYS Automation Server and WAGO PLCs, executing top-down attacks from OT cloud to physical plants.
ot-cloudcodesyswago+2
ICS Village·26 min
Sharon Brizinov
IP packet manipulation techniques for network-based attacks on industrial systems.
icsics-securitycritical-infrastructure+1