With Easter coming up quick it is time for a date announcement.
1 March - CFP and call for crew opens
1 April - Pre talk announcement tickets
3 April CFP and CFC closes
~ 20 April speakers confirmed
~ 24 April main ticket drop
Links and stuff coming closer to the dates.
@dr0idAndy That wasn't even recorded, the speaker wasn't feeling good so asked for it not to be.
It will be repeated in the future so catch it when you can, it was a good talk.
Cc @DI_Security
Want a Monday morning treat?
Our videos are now online:
https://t.co/RqQdYmPCt8
We are missing a couple which will be added soon, and @ZephrFish is keeping his private.
Enjoy!
Thanks @Ministraitor
A couple of weeks ago, @thackeraaron was at @Steel_Con talking about a piece of hardware most people probably wouldnβt give a second thought.
An unbranded Β£10 4G USB modem.
The slightly odd part is that some of these devices come with 512MB of memory. Once Aaron started pulling them apart, he found that many were effectively headless Android phones hiding inside a USB stick.
His talk looked at how they can be rooted, reflashed, and loaded with custom firmware. With some work, an ordinary looking modem could be made to inject keystrokes, exfiltrate data, or carry command and control traffic.
And, because βCan it run DOOM?β wasnβt enough, Aaron reflashed one of the modems to run the game, then made it present itself to the host computer as a webcam.
Open the camera feed and, instead of anything remotely useful, you get DOOM!
Entirely necessary research, obviously.
#SteelCon #HardwareHacking #CyberSecurity
My @Steel_Con talk on compromising hybrid domains is now live!
The talk explains real-world attack paths spanning:
Active Directory
Microsoft Entra ID
Azure & M365
All based on real techniques I perform on authorised red team engagements.
https://t.co/LiFRCkuaom
Slightly late to the list, but just as entertaining as the rest, we've just added @MDisraeli's talk "Where Do We Go From Here? Towards A Philosophy Of Cyber Security"
https://t.co/GbvAXaKeeW