BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: NTLM - The Last Ride\n   When: Saturday\, Aug 10\, 1
 3:30 - 14:15 PDT\n   Where: LVCC West/Floor 1/Hall 1/Track 2 - [1]Map\n\n 
   Description:\n\n   Microsoft is planning to kill off NTLM (New Technolog
 y Lan Manager)\n   authentication in Windows 11 and above. Let's speedrun 
 coercing hashes\n   out of a few more things before it fades into obscurit
 y over the next\n   twenty five years or so.\n\n   There will be a deep di
 ve on several new bugs we disclosed to\n   Microsoft (including bypassing 
 a fix to an existing CVE)\, some\n   interesting and useful techniques\, c
 ombining techniques from multiple\n   bug classes resulting in some unexpe
 cted discoveries and some\n   absolutely cooked bugs. We’ll also uncover
  some defaults that simply\n   shouldn't exist in sensible libraries or ap
 plications as well as some\n   glaring gaps in some of the Microsoft NTLM 
 related security controls.\n\n     1. [2]link\n\n     2. [3]link\n\n     3
 . [4]link\n\n     4. [5]link\n\n     5. Varonis Threat Labs discovered a n
 ew Outlook exploit and three\n       new ways to access NTLM v2 hashed pas
 swords. [6]link\n\n   Speakers:Jim Rush\,Tomais Williamson\n\n   SpeakerBi
 o:  Jim Rush\n\n   I'm a former software developer who has somehow ended u
 p hacking\n   things for a living\, which is infinitely more fun as most o
 f you know.\n   I'm an active security researcher with several CVEs\, incl
 uding\n   Blackboard\, Moodle\, Nuget\, MS-Office and Kramer products.\n\n
    SpeakerBio:  Tomais Williamson\n\n   I'm an enthusiastic hacker who enj
 oys CTFs and have competed at an\n   international level in the ICC CTF as
  well as being part of the\n   CursedCTF 2024 winning team. I'm also an ac
 tive security researcher\n   with a bunch of CVEs and countless other bugs
  for a bunch of 'solved\n   problems' in security.\n\n   '\n\n   1. #LVCCW
 _Level1_Hall1\n   2. https://blog.yappare.com/2019/01/bug-000114489-ssrf-i
 n-portal-for-arcgis.html\n   3. https://blog.ss23.geek.nz/2023/09/21/iraci
 ng-electron-rce-exploit.html\n   4. https://www.blazeinfosec.com/post/web-
 app-vulnerabilities-ntlm-hashes/\n   5. http://varonis.com/blog/outlook-vu
 lnerability-new-ways-to-leak-ntlm-hashes\n   6. https://varonis.com\n\n\n
DTEND:20240810T211500Z
DTSTART:20240810T203000Z
LOCATION:DC - LVCC West/Floor 1/Hall 1/Track 2
SUMMARY:NTLM - The Last Ride
END:VEVENT
END:VCALENDAR