Def Con Sg1 Csit Village Kenneth Huang Shaoqi How A No Write Can Compromise System Security

Summary

Compilers generate all our code, but they don't get it right all the time. In this talk, we'll introduce how compilers Join us as we go behind-the-scenes of threat hunting and investigation. From daily workflows to real-world incident response, ... During this session, we will share an automated end-to-end AI workflow to perform digital analysis on Windows images with ... You on a link. A download prompt appears. Your mouse suddenly seems to take on a life of its own and clicks the pop-up. Audiovisual hardware - from web conferencing cameras to meeting room This session re-examines physical Understanding the adversary mindset is essential for cyber defenders to anticipate how attackers operate and strategically ... We share our findings from using AI tools for web penetration testing on bug bounty programmes. An insecure JavaScript bridge (JSB) in Android WebView allows attackers to abuse exposed interfaces to read local files and ... Critical vulnerabilities CVE-2025-52691 remind us that “low-hanging fruit” still exists today. This session deconstructs how ... Using the rubber ducky to deploy a large payload in an air-gapped environment is The InfoSecurity Challenge (TISC) is one of Singapore's most anticipated Capture-the-Flag competition (CTF), hosted annually by ... A thought experiment on Rolling API Tokens, leveraging the Double Ratchet Protocol to eliminate long-lived secrets through ... We share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared. We will ...