Contextualizing The Vulkan Leaks & State-Sponsored Offensive Ops
Joe Slowik analyzes leaked Russian NTC Vulkan documentation, contextualizing state-sponsored offensive cyber programs, automated scanning, and attack infrastructure.
Summary
Deconstructing the NTC Vulkan Documentation Leaks
In early 2023, leaked internal files from Russian defense contractor NTC Vulkan exposed architectural blueprints for state-sponsored cyber offensive programs including 'Scan-V' and 'Amezit'.
Automating Attack Surface Mapping and Exploitation
Joe Slowik evaluates Scan-V's automated scanning capabilities, which continuously correlate global internet infrastructure vulnerabilities to feed targeted offensive targeting pipelines.
Historical Precedents in State Signals Intelligence
Comparing Vulkan capabilities with historic disclosures—including Russia's SORM, China's Great Cannon, and US intelligence tools—reveals a decade-long trajectory toward industrial-scale cyber operations.
The Proliferation and Industrialization of Offensive Tooling
Slowik warns that state-backed cyber programs have shifted from bespoke intrusion toolkits to standardized, modular enterprise software platforms designed for persistent warfare.
Related talks
War Stories·48 min
Mikko Hypponen
Mikko Hypponen reflects on living 100 miles from Russia, tracing the evolution of Russian state cyber programs, patriotic hacker collectives, and NATO integration.
Will Thomas
How Russian state-sponsored APTs weaponize public red team tools and POCs within days of release.
Main Stage·35 min
Andrew Brandt
Sophos researcher Andrew Brandt chronicles a five-year investigation into Chinese nation-state campaigns weaponizing zero-days against perimeter firewall appliances.