Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
328 articles
In a ThreatLocker-sponsored episode, IT practitioners recount ransomware recovery and a hospital intrusion using purchased VPN credentials, illustrating application allowlisting, MFA and the risks of connected networks.
Two cybersecurity engineers assess social media career advice, discussing coding requirements, salary expectations, entry-level pathways and hands-on security training.
Apple security engineering chief Ivan Krstić outlined formal verification for cryptography, the SPTM replacement for PPL, and MIE memory protections. He also announced higher Apple Security Bounty awards, including up to $2 million for zero-click exploit chains.
Day demonstrates using Splunk and Sysmon in a TryHackMe Advent of Cyber 2025 lab to investigate a simulated web attack, correlate Apache logs and process events, decode Base64 payloads, and identify command execution and whoami reconnaissance.
A tutorial of AWS Security Hub’s general-availability release covers how it aggregates security findings, correlates exposures, and supports vulnerability and posture management, account coverage, dashboards, automation, integrations, and cross-region aggregation.
A tutorial demonstrates using a pattern.py script to fuzz a 32-bit program, identify an access violation, find the EIP overwrite offset, and verify the 740-byte offset against the stack layout in IDA.
Cybersecurity professionals explain how help desk and IT experience can transfer into security roles, highlighting communication, documentation, technical skills, security-focused resumes, hands-on projects, and professional visibility.
Hexacon opening speaker Renaud Feil discusses how AI and automation may change vulnerability research, why practitioners should retain hands-on code-analysis skills, and the ethical responsibilities of offensive security work.
Tao Yan and Edouard Bochin explain a six-year-old Firefox Promise.allSettled flaw and its exploitation through garbage collection and type confusion. Their Firefox 138 demo disabled the sandbox because the exploit was renderer-only.
At HEXACON 2025, Benny Isaacs and Neil Braha explain how they exploited a Redis Lua use-after-free for 0-click RCE at Pwn2Own Berlin. Redis had disclosed a patch, and they withheld a PoC while organizations upgrade.
A Hexacon talk details reverse engineering of MediaTek Wi-Fi 6/7 firmware and kernel-module flaws, including unauthenticated frame injection and a beacon-triggered buffer overflow demonstrated for remote code execution. The presenter says all discussed issues have been.
At Hexacon 2025, Csaba Fitzl and Gergely Kalman demonstrated how a race condition in Mac OS OS analytics helperd could enable local privilege escalation and a sandbox escape. Apple patched the issue with entitlement and symlink-handling checks.
Sergei Volokitin says a USB buffer overflow in a Cyper rock hardware wallet let him extract a PIN and 24-word root seed. He says the vendor fixed the bug two days after his report, but took 186 days to respond; he also found an unchecked NFC APDU overflow.
Pumpkin explains a Linux io_uring race in buffer upgrades that can cause a use-after-free and map arbitrary kernel memory, then demonstrates privilege escalation in kernelCTF. The fix allocates a new buffer object instead of reusing one.
Quentin Salingue’s talk examines Apple Secure Enclave architecture and its protections, including pointer authentication, firmware patching and the trusted boot monitor. He explains how signed firmware and execution checks add layers of defense.
At HEXACON 2025, Philippe Laulheret demonstrated how flaws in Dell Control Vault enable persistent firmware modification, fingerprint login bypass and Windows SYSTEM access through a compromised security chip.
A team describes VirtualBox VGA and network-device flaws used to build a guest-to-host exploit. The speaker reports adapting it for Pwn2Own 2025, where the team won the virtualization category.
Wilfried Bécard describes NTLM and Kerberos reflection against Windows SMB that can yield SYSTEM-level access when SMB signing is not required. He says Microsoft’s June patch blocks the coercion path and recommends enabling SMB signing.
William Liu and Savino Dicanosa explain how a Linux traffic scheduler bug becomes a root exploit through red-black tree manipulation, including a variant that bypasses experimental kernelCTF mitigations.
HEXACON speakers described exploiting an Android Bluetooth heap overflow fixed in 2023 to obtain shells without user interaction. Tests on Xiaomi and Samsung devices showed low reliability, with repeated attempts taking roughly two to five minutes.
At HEXACON 2025, IBM X Force researchers demonstrated an NVIDIA GPU driver exploit that escaped a container on Azure serverless GPU compute and obtained a root shell on the host, exposing risks from shared-kernel isolation.
The hosts discuss Cloudflare’s outage, which the company attributed to a database-permissions change rather than a cyberattack, share holiday fraud precautions, and report a wind-farm manager’s punishment for secretly installing crypto-mining equipment.
Security engineer Day shares lessons from security work: ship a useful first-pass IOC-based cloud detection during a monitored crypto-mining campaign, refine it later, model cloud threats at scale, prioritize intelligence by organizational impact, and document repeatab
The video outlines skills for five cybersecurity engineering archetypes: guardian, architect, mercenary, researcher, and diplomat, from detection and secure design to research and cross-functional communication.
