Black Hat·43 min
Presenters detail vulnerability discovery and exploitation in Abusing Bleeding Edge Web Standards for Appsec Glory.
appsecwebstandards
appsec
529 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 507 talks / 529 · loading…
Black Hat·7 min
Presenters detail vulnerability discovery and exploitation in Cloud Native AppSec in 2021.
appseccloudnative
Black Hat·47 min
Mario Lauande Lacroix · Will Yeager
Security researchers examine technical aspects of SecTor 2025 | Scaling the AppSec Program Without Scaling Security Headcount.
appsecsectorscaling+1
BSidesSF 2025·41 min
Mukund Sarma · Tad Whitaker · Sarah Liu · Ariel Shin · Jacob Salassi
Analysts investigate attack surfaces and defenses concerning AppSec as Glue... (Mukund Sarma, Tad Whitaker, Sarah Liu, Ariel Shin, Jacob Salassi).
appsecgluemukund+3
BSidesSF 2025·31 min
Kennedy Toomey
Engineers explore architecture and security mechanisms for Follow the Trace: How Traditional AppSec Tools Have Failed Us (Kennedy Toomey).
appsecfollowtrace+2
BSidesSF 2025·45 min
Seth Law · Ariel Shin · Lakshmi Sudheer · Ken Johnson
Analysts investigate attack surfaces and defenses concerning State of (Absolute) AppSec (Seth Law, Ariel Shin, Lakshmi Sudheer, Ken Johnson).
appseclawstate+3
Car Hacking Village·22 min
Eaton Zveare
Reveals critical API vulnerabilities in a major automotive dealer platform that allowed national admin account creation and remote vehicle command access.
automotiveapi-securityaccess-control-bypass+2
Cloud Village·20 min
Danielle Aminov · Yaara Shriki
How misconfigured authentication allows unauthenticated access to cloud resources.
cloudazureauthentication+1
Creator Stage·21 min
Utvecklas · George
Traces the evolution of wallet draining attacks across Ethereum, Solana, and TON, demonstrating token spoofing exploits and transaction tracking methods.
blockchaincryptocurrencydrain-attacks+2
Creator Stage·25 min
Whit Taylor
Uncovers client-side gadgets, race conditions, and business logic flaws hidden within referral and reward systems across major bug bounty programs.
bug-bountyappsecweb+2
Creator Stage·29 min
Tanya Janca
Advocates for treating secure software code as vital critical infrastructure, bridging application security practices with public policy reforms.
appsecpolicysoftware-supply-chain+2
Creator Stage·26 min
Jasmin Landry
Chronicles serendipitous bug bounty discoveries, from unexpected blind XSS triggers to misdirected sensitive internal data distributions.
bug-bountyappsecxss+2
CyberRisk TV·20 min
BH24 explores AppSec Evolution: Navigating the Path to Maturity - Boaz Barzel.
appsecevolutionnavigating+3
CyberRisk TV·17 min
Idan Plotnik
Idan Plotnik investigates AppSec under AI pressure with Idan Plotnik of Apiiro.
appsecpressureidan+2
CyberRisk TV·15 min
Shahar Man
Shahar Man investigates Modernizing AppSec for the Vibe Coding Era.
appsecmodernizingvibe+1
CyberRisk TV·16 min
Idan Plotnik
Idan Plotnik analyzes New AppSec Risks in the AI Era.
appsecriskrisks
CyberRisk TV·17 min
Avi Douglen
Avi Douglen explores OWASP 2025 Wrap-Up: Community, AI Security, and the Future of AppSec.
appsecaiowasp+1
Eye on Tech·22 min
Presenters detail vulnerability discovery and exploitation in How GitHub Code Quality connects to AppSec.
appsecgithubcode+3
Eye on Tech·25 min
Industry experts analyze emerging threats surrounding IT Ops Query: How GitHub Code Quality connects to AppSec.
appsecquerygithub+3
Hackers of CypherCon·21 min
Presenters detail vulnerability discovery and exploitation in The Upside Down: Going from NetSec to AppSec with Cody Florek \ CypherCon 2.0.
appsecupsidenetsec+1
Main Stage·40 min
Julian Horoszkiewicz
Demonstrates rapid vulnerability discovery methodologies that uncovered seven zero-day local privilege escalation flaws in pre-installed OEM bloatware.
vulnerability-researchprivilege-escalationwindows+2
Main Stage·38 min
Zhengyu Liu · Jianjia Yu
Introduces Hulk, the first dynamic analysis tool to automatically detect and generate exploit payloads for complex DOM Clobbering vulnerabilities at web scale.
appsecdom-clobberingxss+2
Main Stage·50 min
Lior Shmueli · Tomer Peled
Exposes UI redressing and clickjacking vectors in popular browser extensions that trick users into granting administrative cloud permissions with a single click.
browser-extensionsclickjackingcloud+2
Main Stage·34 min
Ji'an Zhou · Ying Zhu · ZiYang Li
Reveals critical architectural and deserialization vulnerabilities across Apache Kafka client and server implementations, enabling remote code execution.
kafkaappsecremote-code-execution+2