Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
328 articles
A workshop demonstrates a sample .NET loader that uses reflection to load and invoke an embedded assembly in memory, then shows anti-analysis checks and debugging techniques for examining the payload.
The hosts discuss AI-generated clean-room software clones and their licensing and security risks, Linux’s CVE-2026-31431 local root flaw, and the sentencing of two former ransomware negotiators tied to BlackCat attacks.
Former Sophos researchers describe Pacific Rim, a years-long series of firewall attacks linked to Chinese operators, and how hot fixes, sinkholing and covert telemetry helped counter exploits. An experimental UEFI bootkit failed.
The hosts discuss claims that Claude Desktop installs browser native-messaging manifests, the implications of harvest-now-decrypt-later, the need for crypto agility, and risks from AI agents with broad permissions or autonomous control.
A hands-on tutorial demonstrates using CALL, POP, and LEA to find shellcode’s runtime base address, then verifies the result while assembling and debugging the code.
The speaker argues that AI will accelerate security operations and attacker workflows. He describes potential AI-assisted SOC triage and phishing, while emphasizing that defenders need strong technical judgment to assess AI-generated results.
The tutorial shows how to use SC launcher to wrap shellcode in a PE file, inspect it in IDA Pro, and set breakpoints to step through it with the local Windows debugger.
Darknet Diaries recounts how a Yonkers crew used cloned prepaid debit cards to steal $2.8 million from New York ATMs in 2013. Prosecutor Loretta Lynch explains how processor intrusions enabled inflated withdrawal limits.
The hosts discuss claims that Anthropic’s Claude Mythos Preview can find and chain vulnerabilities, debate Project Glass Wing’s restricted access and the hype around its capabilities, and urge defenders to learn AI workflows and prepare for faster vulnerability research
The tutorial demonstrates loading 32-bit shellcode with SCLauncher, attaching the matching x32dbg debugger, setting a software breakpoint, and running the code to inspect its execution.
A tutorial demonstrates using SCLauncher with WinDBG and X32 to load shellcode, attach a debugger, set breakpoints, inspect memory, and step through execution.
Elias Bachaalany demonstrates IDA Pro plugins for database recovery, script iteration and AI-assisted reverse engineering, including workflows that combine static analysis with debugger traces.
A shellcode-series introduction covers the Flare VM setup, NASM and Visual Studio Code, course scripts, runtime API resolution using PEB traversal and hashed exports, and assembling 32-bit shellcode as a raw binary.
Researcher D3ada55 describes unauthenticated root access, aggressive network probing and botnet infections involving SuperBox streaming devices. The interview also examines residential proxy abuse and an FBI warning about compromised IoT devices.
The hosts discuss Trivy and Axios supply-chain compromises, a Claude Code source leak quickly weaponized to distribute malware, and charges alleging a $53.3 million Uranium Finance hack.
A reverse-engineering tutorial demonstrates using CAPA output and IDA Pro to locate runtime linking, recognize PEB access, trace code references, and prepare for time-travel debugging.
The video introduces runtime linking through analysis of a malware sample with no static imports or useful strings, showing how analysis tools help identify runtime-resolved function pointers and related behavior.
The panel discusses a reported destructive attack on Striker affecting more than 200,000 devices across 79 countries, an unauthenticated root-level Telnet RCE in GNU inetutils, and allegations that Delve fabricated audit reports.
The video breaks down a Windows C reverse shell, explaining Winsock initialization, IPv4/TCP connection setup, process creation, redirecting standard I/O to the socket, cleanup, IDA inspection, and 32-bit versus 64-bit compilation.
The video demonstrates a lab reverse shell in C: a Windows process connects back over a socket, redirects its standard streams to that socket, and accepts commands through a Netcat listener. The series plans to convert the working program to shellcode.
The panel reviews Anthropic's report of large-scale model distillation by three Chinese AI labs, law enforcement purchases of real-time-bidding ad identifiers, and reports that Cyber Strike AI enabled access to 648 firewalls across 55 countries.
A tutorial demonstrates how XOR-obfuscated strings and runtime linking with LoadLibrary and GetProcAddress can hide API names and imports from static analysis, while decoded strings and import-table inspection still provide clues.
Beatdapp co-founder Andrew Batey describes how stolen streaming accounts, bot networks and manipulated music feeds divert royalties. He explains detection methods and estimates streaming fraud steals $3 billion annually from artists.
A malware-analysis tutorial shows how Procmon stack traces distinguish an intentionally loaded DLL from dependency noise, connect DLL loads to dynamically resolved APIs, and map captured call sites in IDA.
