44CONnect June Week – What to expect

We have a fantastic week planned from June 4th – 7th with training, a 44CONnect evening and of course hanging out with our friends at BSides London. If you want to join in there’s still time, just book a seat on the Exploiting Insecurity course, or contact us from your early bird ticket e-mail address. Continue reading “44CONnect June Week – What to expect”

What Now For The 44CON CFP?

A couple of years ago we wrote a blog post about what happens once the CFP closes. Much has changed since then, so we thought we’d write something up to date.

What The CFP?

Most of what happens today is basically the same as back in 2017. We now have our own CFP platform (Gambit), handling submissions and reviews. Aidan and I run the CFP platform and process, with help from Marizel, Sam, Nathalie and our review panel.

We have 100-200 submissions a year, mostly in the last week and the last day. We expect a slight reduction in 2019 submissions due to Brexit-related uncertainty. Submission quality mostly follows a classical bell curve, with most talks being reasonable, some being outstanding and a few being a bit meh. Sadly, we don’t have 100-200 speaking slots. This means that we have to conduct some form of triage. We use a panel of former speakers, people involved in other events and longstanding attendees to select talks. Continue reading “What Now For The 44CON CFP?”

4 New 44CON 2018 Videos

We’ve added another 4 videos from 44CON 2018 to 44CON TV. Our older conf talk videos are also moving over to the channel. If you want them in your YouTube stream, don’t forget to subscribe to 44CON TV and click the bell. Once all the videos are up, we’ll start work on other ways to access our content. Lets see what’s new! Continue reading “4 New 44CON 2018 Videos”

44CONnect June 2019

44CONnect is an invite-only event taking place on the 6th of June, somewhere in London. The purpose of the day is to bring together people attending 44CON training, so they can connect with trainers and people on different courses. It’s our way of giving people who’ve attended our courses the chance to get a taste of upcoming training, and the opportunity to get some extra credit to take back to the office.

This time, 44CONnect will be an evening event, with talks, food and drinks. Training attendees will have food provided and we’ll have a small bar tab. Continue reading “44CONnect June 2019”

44CON CAFE at IPEXPO 21st May

If you weren’t at IPEXPO Manchester to witness 44CON Cafe in action then you missed out on some great talks.

But luckily for you we have a recap of them all below.

Paul Pratley, Head of Investigations & Incident Response at MWR

Smoke Detectors & Super Spies

Paul’s talk looked at the cutest trends in serious and targeted security incidents in the UK and what you can do to get your cyber smoke detectors working. As a very UK centric Incident Response practice and operating under the CPNI cyber incident response scheme, MWR is able to observe the trending nature of data breach incidents in the UK. Despite the ever pervading perception of nation state actors and APTs being the principal threat using highly advanced tools and techniques, the reality we are seeing is that attackers are following some basic common methodologies. What most organisations fail to accomplish in their security postures is detection and response capabilities to deal with the reality of most common attacks. In addition, there is a marked lack of knowledge around the attack timelines and techniques that can be used to slow down attackers, trigger internal compromise alerting and carry out response in a timely manner to limit the damage to victim organisations.

You can find out more about MWR at http://www.mwrinfosecurity.com/ or follow them on Twitter @mwrlabs

Dean Brown – Red Team Engineer at Cortex Insight Limited

An examination of telephony security

Dean, a thoroughly interesting guy, gave a revised version of a talk he gave at Secure Word Expo 2003, but the topics of the original talk are still as applicable today as they were in 2003. Dean’s talk was split in to two parts.

During part 1, Dean did a review of old school phreak & hack of the PSTN/Office PBX systems mentioning the likes of John Draper, Kevin Mitnick and Stephen Wozniak. Part 2 focused on a Live, yes live, VoIP interception, looking at GSM.

To find out more about Cortex Insight and the work they do, visit www.cortexinsight.com and follow them on Twitter @CortexInsight

Ben Williams – Senior Security Consultant for NCC Group UK

The L@m3ne55 of Passw0rds: Notes from the field

Ben’s talk was a Penetration Tester’s view on the world of passwords, describing the day-to-day experience of attacking networks and applications. Forget exploits and 0-day for the moment, this talk focuses on how attackers can gain and expand access using a variety of practical password attack techniques. NCC customers are often surprised when NCC gain unauthorised access with these techniques, especially when they have enforced a password strength policy and account lockout. In many cases these things can be merely a hindrance to a determined attacker.

You can find out more about the work NCC Group by visiting www.nccgroup.trust/en/ or following them on Twitter @NCCGroupplc

If you have an interesting talk to share with us, why not submit it to our CFP?

IP EXPO Manchester 20-21st May 2015

44CON Café will be making an appearance at this year’s IP EXPO Manchester. As the threat of cyber crime for leading organisations continues to grow it is clear that this topic is more important than ever. Staying up to date with the latest developments in computer attacks is one way to stay ahead of the threat.

At 44CON Café you will:

  • See real world attacks take place in real time, and gain an insight into how businesses can learn to detect and defend against them
  • Network with and learn from the UK’s leading information security technical specialists and face up to your information security defence issues
  • Discuss cyber crime prevention with professionals and researchers from all sides of the industry
  • Mingle and share knowledge in the IdeaHub – Whiteboards and Pens will be provided

IP EXPO Manchester is the new launch event in the IP EXPO series for 2015. IP EXPO is the UK and Europe’s leading IT infrastructure and Cloud event series for those looking to find out how the latest IT innovations can drive their business forward. The events showcase brand new exclusive content and senior level insights from across the industry, as well as unveiling the latest developments in IT. IP EXPO Manchester will house over 60 exhibitors, 65 free to attend seminars and 5 theatres, all under one roof.

If you are in Manchester and want to find out more or register to attend please follow this link http://www.ipexpomanchester.com.

Suits and Spooks May 2015

Suits and Spooks are offering 44CON attendees a promotional rate for tickets to attend their Suits and Spooks event taking place in London on the 6th & 7th of May.

Suits and Spooks London 2015 will be held at a techUK facility in London. Following their event in 2014, Suits and Spooks London 2015 will be their first 2 day event.

During Suits and Spooks London they will have representatives from the British government speaking and in attendance, along with British Venture Capitalists and the usual mix of public and private sector participants.

Speakers will include Marina Litvinenko, the widow of the Russian FSB officer who was poisoned in London with radiation, EJ Hilbert of Kroll Associates, Zach Tumin of the NYPD, and many more.

44CON Members will be entitled to a membership rate ticket for £319. All you have to do is visit their website to register. When you register, select Membership in the amount option.

The two day event includes two continental breakfast and two lunches plus all the sessions.

If you are in London during this time then why not take advantage of this promotional rate?