Ken Munro will be presenting: Vulnerability Disclosure Programs: A Tale from Both Sides The PCI has required its members to adhere to a Vulnerability Management Program since 2010 but we’re now seeing regulators call for Vulnerability Disclosure Programs (VDPs) across industries. A VDP puts in place procedures to aid the swift resolution of the issue […]
Alex Lomas will presenting: When disclosures go terribly wrong: non consensual adult toys During the pandemic, a range of adult toys that enabled remote play saw a marked increase in use. One of these was the Qiui Cellmate, a Bluetooth lock and companion mobile app that enabled users to engage in chastity play with anyone […]
Ken Munro will be presenting: Protecting your organisation from internal and external attacks Register here.
Ken Munro will be presenting: Industrial Controls in the Cloud. What Could Possibly Go Wrong? Everything seems to be migrating to the cloud now; for obvious reasons of scalability, cost and even security. So has OT learned from the lessons of those that went before, resulting in secure cloud platforms for remote management? We’ll […]
Tony Gee will be at the IASME Pavilion, presenting twice each day: Patch my stuff? No thanks. I’d rather pay the ransom. This presentation will discuss the threats facing the legal world, including ransomware and the many data leaks from law firms. A lot of these are brushed under the carpet, although there are cases […]
Ken Munro will be presenting: Ransomware & IoT
Vangelis Stykas is presenting: Charge my car, for free, forever! Current trends show that electric cars and green energy, especially photo-voltaic energy, are being widely adopted in both commercial and home user markets. During this talk, we will see that they suffer from typical "rush to market" problems that can potentially allow a remote attacker […]
Ken Munro will be presenting.
The ISACA dinner 25 November will start with a live IoT hacking session with Jo Dalton, Associate Partner, Pen Test Partners. https://www.linkedin.com/posts/isaca-sweden-chapter_breaking-news-the-isaca-dinner-25-november-activity-6866362477664370688-UKEB/
Pwning 10^7 devices in 10^1 minutes across 10^2 endpoints Vangelis will cover in 10 one-minute slides how anyone could control 10^7 (that’s 10 million) devices by exploiting a series of simple yet critical API flaws that were typical “rush to market” flaws that can allow an attacker to control and even use them as […]
