# \#2025 **URL:** https://discourse.ossbase.org/tag/22-tag/22.md [Latest](https://discourse.ossbase.org/latest.md) · [Categories](https://discourse.ossbase.org/categories.md) · [Tags](https://discourse.ossbase.org/tags.md) --- ## [Yoga for geeks — Georges Kesseler](https://discourse.ossbase.org/t/yoga-for-geeks-georges-kesseler/666)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 7, 2026, 8:51am UTC](https://discourse.ossbase.org/t/yoga-for-geeks-georges-kesseler/666 "2026-10-07T08:51:23Z")
Join us at hack.lu 2026 — Info & Registration Duration: 90 min Type: Workshop Speakers: Georges Kesseler Abstract Get your day started with a nice intensive yoga session Description Based on ashtanga yoga, this… --- ## [Detection Engineering with Sigma — Thomas Patzke](https://discourse.ossbase.org/t/detection-engineering-with-sigma-thomas-patzke/648)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 7, 2026, 8:50am UTC](https://discourse.ossbase.org/t/detection-engineering-with-sigma-thomas-patzke/648 "2026-10-07T08:50:46Z")
Join us at hack.lu 2026 — Info & Registration Duration: 180 min Type: Training (long) Speakers: Thomas Patzke Abstract Sigma is an open and generic format to share log detection signatures. In this hands-on works… --- ## [Empowering the Ecosystem: MISP’s 2025 Progress and the Open Source Future](https://discourse.ossbase.org/t/empowering-the-ecosystem-misp-s-2025-progress-and-the-open-source-future/748)
**Author:** [@adulau](https://discourse.ossbase.org/u/adulau)\ **Replies:** 0\ **Last updated:** [January 7, 2026, 7:35am UTC](https://discourse.ossbase.org/t/empowering-the-ecosystem-misp-s-2025-progress-and-the-open-source-future/748 "2026-01-07T07:35:31Z")
In 2025, the MISP project hit its stride with the transition to the 2.5 branch, delivering a major UI/UX overhaul and modernized background processing to enhance platform performance. This progress was bolstered by signi… --- ## [Hack your brain — Pauline Bourmeau (Cookie)](https://discourse.ossbase.org/t/hack-your-brain-pauline-bourmeau-cookie/704)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 31, 2025, 9:14am UTC](https://discourse.ossbase.org/t/hack-your-brain-pauline-bourmeau-cookie/704 "2025-10-31T09:14:29Z")
Join us at hack.lu 2025 — Info & Registration Duration: 90 min Type: Workshop Speakers: Pauline Bourmeau (Cookie) Abstract If you are done hearing about focus on one side and productivity on the other, you are no… --- ## [How to better identify (weaponized) file formats with ftguess — Philippe Lagadec](https://discourse.ossbase.org/t/how-to-better-identify-weaponized-file-formats-with-ftguess-philippe-lagadec/683)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 2\ **Last updated:** [October 28, 2025, 9:40am UTC](https://discourse.ossbase.org/t/how-to-better-identify-weaponized-file-formats-with-ftguess-philippe-lagadec/683 "2025-10-28T09:40:42Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Philippe Lagadec Abstract Ftguess is an open-source tool designed to identify file formats in a more precise and robust way than… --- ## [CLI ambush — William Robinet](https://discourse.ossbase.org/t/cli-ambush-william-robinet/619)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 28, 2025, 9:25am UTC](https://discourse.ossbase.org/t/cli-ambush-william-robinet/619 "2025-10-28T09:25:12Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: William Robinet Abstract In this talk, I’ll present how I discovered a vulnerability common to various TLS/SSL cryptographic too… --- ## [DCOM Turns 20: Revisiting a Legacy Interface in the Modern Threatscape — Julien Bedel](https://discourse.ossbase.org/t/dcom-turns-20-revisiting-a-legacy-interface-in-the-modern-threatscape-julien-bedel/628)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:39pm UTC](https://discourse.ossbase.org/t/dcom-turns-20-revisiting-a-legacy-interface-in-the-modern-threatscape-julien-bedel/628 "2025-10-24T14:39:51Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Julien Bedel Abstract Part of Windows operating system for over 20 years, DCOM (Distributed Component Object Model) has received… --- ## [Automotive Security Analyzer for Exploitability Risks: An Automated and Attack Graph-Based Evaluation of On-Board Networks — Martin Salfer](https://discourse.ossbase.org/t/automotive-security-analyzer-for-exploitability-risks-an-automated-and-attack-graph-based-evaluation-of-on-board-networks-martin-salfer/672)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:32pm UTC](https://discourse.ossbase.org/t/automotive-security-analyzer-for-exploitability-risks-an-automated-and-attack-graph-based-evaluation-of-on-board-networks-martin-salfer/672 "2025-10-24T14:32:13Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Martin Salfer Abstract Our lives depend on automotive cybersecurity, protecting us inside and near vehicles. If vehicles go rogu… --- ## [Exploiting Legit APIs for Covert C2: A New Perspective on Cloud-based Malware Operations — cocomelonc](https://discourse.ossbase.org/t/exploiting-legit-apis-for-covert-c2-a-new-perspective-on-cloud-based-malware-operations-cocomelonc/695)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:12pm UTC](https://discourse.ossbase.org/t/exploiting-legit-apis-for-covert-c2-a-new-perspective-on-cloud-based-malware-operations-cocomelonc/695 "2025-10-24T14:12:18Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: cocomelonc Abstract As modern security defenses evolve, attackers continue to leverage legitimate cloud services for command-and… --- ## [Lethal Language Models: From Bit Flip to RCE in Ollama — Paul Gerste](https://discourse.ossbase.org/t/lethal-language-models-from-bit-flip-to-rce-in-ollama-paul-gerste/621)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 2:11pm UTC](https://discourse.ossbase.org/t/lethal-language-models-from-bit-flip-to-rce-in-ollama-paul-gerste/621 "2025-10-24T14:11:38Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Paul Gerste Abstract AI and LLMs are everywhere, but how are they actually implemented? In this session, we will take a detailed… --- ## [Russian-speaking underground - changes in the risks, attack surface and modus operandi — Vladimir Kropotov](https://discourse.ossbase.org/t/russian-speaking-underground-changes-in-the-risks-attack-surface-and-modus-operandi-vladimir-kropotov/649)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 1:18pm UTC](https://discourse.ossbase.org/t/russian-speaking-underground-changes-in-the-risks-attack-surface-and-modus-operandi-vladimir-kropotov/649 "2025-10-24T13:18:36Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Vladimir Kropotov Abstract Criminal business processes are significantly reshaped in recent years due to appearance and accessib… --- ## [From YAML to Root: CI/CD Pipeline Attacks and Countermeasures — Hugo](https://discourse.ossbase.org/t/from-yaml-to-root-ci-cd-pipeline-attacks-and-countermeasures-hugo/637)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 1:15pm UTC](https://discourse.ossbase.org/t/from-yaml-to-root-ci-cd-pipeline-attacks-and-countermeasures-hugo/637 "2025-10-24T13:15:28Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Hugo Abstract As CI/CD pipelines become integral to modern software development through systems like Azure DevOps or GitHub Acti… --- ## [Palo Alto GlobalProtect : Remote Full Compromise Exploit Chain — Maxime Escourbiac](https://discourse.ossbase.org/t/palo-alto-globalprotect-remote-full-compromise-exploit-chain-maxime-escourbiac/694)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 11:58am UTC](https://discourse.ossbase.org/t/palo-alto-globalprotect-remote-full-compromise-exploit-chain-maxime-escourbiac/694 "2025-10-24T11:58:45Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Maxime Escourbiac Abstract This session provides an in-depth analysis of multiple critical vulnerabilities discovered by Micheli… --- ## [Breaking Android IPC: A Deep Dive into AIDL Fuzzing — Rajanish Pathak](https://discourse.ossbase.org/t/breaking-android-ipc-a-deep-dive-into-aidl-fuzzing-rajanish-pathak/664)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 9:39am UTC](https://discourse.ossbase.org/t/breaking-android-ipc-a-deep-dive-into-aidl-fuzzing-rajanish-pathak/664 "2025-10-24T09:39:24Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Rajanish Pathak Abstract In this talk, we’ll deep dive inro fuzzing Android’s IPC mechanisms, focusing on the AIDL fuzzing in pa… --- ## [Practical intro to deeplearning: chihuahuas vs muffins — Pauline Bourmeau (Cookie), William Robinet](https://discourse.ossbase.org/t/practical-intro-to-deeplearning-chihuahuas-vs-muffins-pauline-bourmeau-cookie-william-robinet/676)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 8:56am UTC](https://discourse.ossbase.org/t/practical-intro-to-deeplearning-chihuahuas-vs-muffins-pauline-bourmeau-cookie-william-robinet/676 "2025-10-24T08:56:28Z")
Join us at hack.lu 2025 — Info & Registration Duration: 90 min Type: Workshop Speakers: Pauline Bourmeau (Cookie), William Robinet Abstract Once upon a time, an algorithm’s goal was to make a distinction between … --- ## [Livewire : remote command execution through unmarshalling — Rémi Matasse (@\_remsio\_), Pierre Martin (@\_Worty), Pierre MARTIN](https://discourse.ossbase.org/t/livewire-remote-command-execution-through-unmarshalling-remi-matasse-remsio-pierre-martin-worty-pierre-martin/644)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 6:14am UTC](https://discourse.ossbase.org/t/livewire-remote-command-execution-through-unmarshalling-remi-matasse-remsio-pierre-martin-worty-pierre-martin/644 "2025-10-24T06:14:04Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Rémi Matasse (@remsio), Pierre Martin (@\_Worty), Pierre MARTIN Abstract Livewire is a full-stack framework for Laravel that stre… --- ## [2038 is gonna be epoch! — Pedro Umbelino, Trey Darley](https://discourse.ossbase.org/t/2038-is-gonna-be-epoch-pedro-umbelino-trey-darley/679)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 6:12am UTC](https://discourse.ossbase.org/t/2038-is-gonna-be-epoch-pedro-umbelino-trey-darley/679 "2025-10-24T06:12:44Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Pedro Umbelino, Trey Darley Abstract 19 January 2038 at 03:14:07 UTC implementations relying on 32-bit signed integer representa… --- ## [Wyse Management Subversion : Taking over Dell's Wyse Management Suite — Alain Mowat](https://discourse.ossbase.org/t/wyse-management-subversion-taking-over-dells-wyse-management-suite-alain-mowat/647)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 6:11am UTC](https://discourse.ossbase.org/t/wyse-management-subversion-taking-over-dells-wyse-management-suite-alain-mowat/647 "2025-10-24T06:11:48Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Alain Mowat Abstract By it’s own definition, Dell’s Wyse Management Suite is “a secure hybrid cloud management solution for Dell… --- ## [What's New in Suricata 8: Enhanced Detection and Performance — Eric Leblond, Peter Manev](https://discourse.ossbase.org/t/whats-new-in-suricata-8-enhanced-detection-and-performance-eric-leblond-peter-manev/622)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 6:11am UTC](https://discourse.ossbase.org/t/whats-new-in-suricata-8-enhanced-detection-and-performance-eric-leblond-peter-manev/622 "2025-10-24T06:11:13Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Eric Leblond, Peter Manev Abstract Suricata is a widely-used high performance, open source network analysis and threat detection… --- ## [Hacking for hoodies: MISP edition — Jeroen Pinoy](https://discourse.ossbase.org/t/hacking-for-hoodies-misp-edition-jeroen-pinoy/635)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 24, 2025, 6:07am UTC](https://discourse.ossbase.org/t/hacking-for-hoodies-misp-edition-jeroen-pinoy/635 "2025-10-24T06:07:14Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Jeroen Pinoy Abstract Cyber threat information sharing continues to be important. The tools we use for this should be regularly … --- ## [Building a pipeline to analyse iOS devices at scale — David Durvaux, Christophe Vandeplas](https://discourse.ossbase.org/t/building-a-pipeline-to-analyse-ios-devices-at-scale-david-durvaux-christophe-vandeplas/640)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 23, 2025, 4:28pm UTC](https://discourse.ossbase.org/t/building-a-pipeline-to-analyse-ios-devices-at-scale-david-durvaux-christophe-vandeplas/640 "2025-10-23T16:28:19Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: David Durvaux, Christophe Vandeplas Abstract Building a pipeline to analyse iOS devices at scale Overview and Abstract This talk… --- ## [My other ClassLoader is your ClassLoader: Creating evil twin instances of a class — Dimitrios Valsamaras](https://discourse.ossbase.org/t/my-other-classloader-is-your-classloader-creating-evil-twin-instances-of-a-class-dimitrios-valsamaras/638)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 23, 2025, 4:27pm UTC](https://discourse.ossbase.org/t/my-other-classloader-is-your-classloader-creating-evil-twin-instances-of-a-class-dimitrios-valsamaras/638 "2025-10-23T16:27:31Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Dimitrios Valsamaras Abstract The class loader is a fundamental component of the Java Virtual Machine, responsible for dynamical… --- ## [Field guide to physical attacks against full-disk encryption — Edouard D'hoedt, Hayk Gevorgyan](https://discourse.ossbase.org/t/field-guide-to-physical-attacks-against-full-disk-encryption-edouard-dhoedt-hayk-gevorgyan/660)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 23, 2025, 4:26pm UTC](https://discourse.ossbase.org/t/field-guide-to-physical-attacks-against-full-disk-encryption-edouard-dhoedt-hayk-gevorgyan/660 "2025-10-23T16:26:51Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Edouard D’hoedt, Hayk Gevorgyan Abstract How safe is your “encrypted” laptop when someone walks off with it? Full-disk encrypti… --- ## [One day at the Internet Storm Center — Xavier Mertens](https://discourse.ossbase.org/t/one-day-at-the-internet-storm-center-xavier-mertens/636)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 23, 2025, 12:06pm UTC](https://discourse.ossbase.org/t/one-day-at-the-internet-storm-center-xavier-mertens/636 "2025-10-23T12:06:36Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Xavier Mertens Abstract Born in 2001, the Internet Storm Center (or ISC) is a volunteer-driven threat-monitoring and early-warni… --- ## [Attacking The Developer Environment Through Drive-by Localhost Attacks — Joseph Beeton](https://discourse.ossbase.org/t/attacking-the-developer-environment-through-drive-by-localhost-attacks-joseph-beeton/673)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 23, 2025, 12:05pm UTC](https://discourse.ossbase.org/t/attacking-the-developer-environment-through-drive-by-localhost-attacks-joseph-beeton/673 "2025-10-23T12:05:49Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Joseph Beeton Abstract There is a widespread belief that services that are only bound to localhost are not accessible from the o… --- ## [Instrumenting software builds to detect stealth backdoors and other curiosities — Hilko Bengen](https://discourse.ossbase.org/t/instrumenting-software-builds-to-detect-stealth-backdoors-and-other-curiosities-hilko-bengen/685)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 23, 2025, 12:04pm UTC](https://discourse.ossbase.org/t/instrumenting-software-builds-to-detect-stealth-backdoors-and-other-curiosities-hilko-bengen/685 "2025-10-23T12:04:59Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Hilko Bengen Abstract The backdoor that had been added to xz-utils by an unknown threat actor (CVE-2024-3094) may be seen as a w… --- ## [Compromising Threat Actor Communications — Ben (@polygonben)](https://discourse.ossbase.org/t/compromising-threat-actor-communications-ben-polygonben/705)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 23, 2025, 12:03pm UTC](https://discourse.ossbase.org/t/compromising-threat-actor-communications-ben-polygonben/705 "2025-10-23T12:03:35Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Ben (@polygonben) Abstract This talk exposes how a simple OPSEC mistake—a threat actor testing malware on his own production sys… --- ## [Nightmare on NTLM street: Legacy’s Revenge — Marina Bochenkova](https://discourse.ossbase.org/t/nightmare-on-ntlm-street-legacy-s-revenge-marina-bochenkova/620)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 23, 2025, 12:02pm UTC](https://discourse.ossbase.org/t/nightmare-on-ntlm-street-legacy-s-revenge-marina-bochenkova/620 "2025-10-23T12:02:50Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Marina Bochenkova Abstract We know the world runs on legacy. We know it’s not supposed to. But when vendors or LinkedInfluencers… --- ## [In bed with Qubes OS - tips & tricks exchange party — William Robinet](https://discourse.ossbase.org/t/in-bed-with-qubes-os-tips-tricks-exchange-party-william-robinet/663)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 2\ **Last updated:** [October 23, 2025, 10:10am UTC](https://discourse.ossbase.org/t/in-bed-with-qubes-os-tips-tricks-exchange-party-william-robinet/663 "2025-10-23T10:10:45Z")
Join us at hack.lu 2025 — Info & Registration Duration: 90 min Type: Workshop Speakers: William Robinet Abstract I’ve been using Qubes OS in my professional life since 2017 (version 3.2). With this workshop, I w… --- ## [Integrating Zeek With Third-Party Applications — Christian Kreibich](https://discourse.ossbase.org/t/integrating-zeek-with-third-party-applications-christian-kreibich/651)
**Author:** [@system](https://discourse.ossbase.org/u/system)\ **Replies:** 1\ **Last updated:** [October 22, 2025, 4:57pm UTC](https://discourse.ossbase.org/t/integrating-zeek-with-third-party-applications-christian-kreibich/651 "2025-10-22T16:57:00Z")
Join us at hack.lu 2025 — Info & Registration Duration: 30 min Type: Talk Speakers: Christian Kreibich Abstract The Zeek network monitor offers a range of mechanisms to interact with it while up and running. Exam… [Next page](https://discourse.ossbase.org/tag/22-tag/22.md?match_all_tags=true&page=1&tags%5B%5D=2025)