# defcon Published articles for defcon. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## A DEFCON 33 Presentation Revisits the Security Risks of Unencrypted VXLAN Tunnels DevFeed: [A DEFCON 33 Presentation Revisits the Security Risks of Unencrypted VXLAN Tunnels]() Original publisher: [Read original article]() Published: 2026-02-04T06:22:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [VXLAN](), [Security]() Tags: [defcon](), [presentation](), [security](), [vxlan](), [worth-reading]() ### AI overview The article revisits long-known security concerns about unencrypted VXLAN tunnels and points readers to a summary and slides from a DEFCON 33 presentation on using GRE and VXLAN. ### Source excerpt In 2017 (over eight years ago), I was making fun of the fact that "VXLAN is insecure" was news to some people. Obviously, the message needed to be repeated, as the same author gave a very similar presentation two years later at a security conference. Unfortunately, it seems that everything old is new again (see also RFC 1925 rules 4 and 11), as proved by a "Using GRE and VXLAN for Fun and Profit" (my summary) presentation at DEFCON 33. Even if you knew that unencrypted tunnels are insecure (duh!) for decades, you might still want to read the summary of the talk (published on APNIC blog) and view the slides. ## Exploring the Chainguarden at Black Hat USA 2025 DevFeed: [Exploring the Chainguarden at Black Hat USA 2025]() Original publisher: [Read original article]() Published: 2025-08-15T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Security](), [Containers](), [Vulnerabilities]() Tags: [2025](), [attacks](), [black-hat](), [chainguard](), [chainguard-containers](), [container](), [container-escape](), [containers](), [defcon](), [events](), [orca-security](), [security](), [security-events](), [talks](), [trust](), [vanta]() ### AI overview Chainguard recaps its activities at Black Hat USA 2025, including the garden-themed Chainguarden booth, partnerships with Vanta and Orca Security, and follow-up participation at DEF CON 33. The article also highlights a Container Escapes 101 workshop covering container escape attacks, exploitation potential, and vulnerabilities in container use. ### Source excerpt See what Chainguard was up to at Black Hat USA 2025, from a garden-themed booth to several engaging activations with organizations like Vanta and Orca Security. ## HTTP/1.1 Must Die: What This Means for AppSec Leadership DevFeed: [HTTP/1.1 Must Die: What This Means for AppSec Leadership]() Original publisher: [Read original article]() Author: Andrzej Matykiewicz Published: 2025-08-06T22:23:49Z Content type: article Language: en Sources: [PortSwigger Blog]() Topics: [HTTP](), [Application Security](), [Vulnerabilities](), [Testing](), [Architecture & Design]() Tags: [2025](), [architectures](), [attacks](), [audit](), [black-hat](), [defcon](), [exploit](), [http](), [scanner](), [security](), [testing](), [vulnerabilities]() ### AI overview PortSwigger research presented at Black Hat USA and DEFCON 2025 argues that HTTP/1.1 request smuggling remains a widespread protocol-level threat. Parsing ambiguities in modern chains of interconnected systems can enable session hijacking, cache poisoning, data leakage, and site takeover. The article argues that individual patches are insufficient and recommends upstream HTTP/2 as a stronger long-term solution while organizations audit their exposure to desync vulnerabilities. ### Source excerpt At Black Hat USA and DEFCON 2025, PortSwigger's Director of Research, James Kettle, issued a stark warning: request smuggling isn't dying out, it's evolving and thriving. Despite years of defensive ef ## HTTP/1.1 Must Die: What This Means for In-House Pentesters DevFeed: [HTTP/1.1 Must Die: What This Means for In-House Pentesters]() Original publisher: [Read original article]() Author: Andrzej Matykiewicz Published: 2025-08-06T22:23:41Z Content type: opinion Language: en Sources: [PortSwigger Blog]() Topics: [Vulnerabilities](), [Security](), [Web](), [Architecture & Design](), [backends]() Tags: [2025](), [architectures](), [attacks](), [backends](), [black-hat](), [defcon](), [exploits](), [http](), [research](), [security](), [techniques](), [vulnerabilities](), [web]() ### AI overview The article presents PortSwigger research arguing that HTTP request smuggling and desynchronization attacks remain widespread and increasingly difficult to detect. It attributes the risk to inconsistent request-boundary parsing across proxies, CDNs, and distributed backends, and argues that moving upstream traffic to HTTP/2 is a stronger long-term response than patching individual implementations. ### Source excerpt At Black Hat USA and DEFCON 2025, PortSwigger's Director of Research, James Kettle, issued a stark warning: request smuggling isn't dying out, it's evolving and thriving. Despite years of defensive ef ## Chainguard Announces Participation in Hacker Summer Camp Security Conferences DevFeed: [Chainguard Announces Participation in Hacker Summer Camp Security Conferences]() Original publisher: [Read original article]() Published: 2023-08-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Cybersecurity](), [supply-chain-security](), [open-source-security](), [container-security](), [software composition analysis]() Tags: [black-hat](), [chainguard](), [container-security](), [cybersecurity](), [defcon](), [open-source-software-security](), [sboms](), [sca]() ### AI overview Chainguard announces its participation in BSides, Black Hat, and DEFCON in Las Vegas, including a talk on limitations of software composition analysis and software bills of material in vulnerability management. ### Source excerpt Join the Hacker Summer Camp: A hub for cybersecurity enthusiasts to explore, learn, and collaborate on cutting-edge security strategies. ## Use the Defcon Wifi DevFeed: [Use the Defcon Wifi]() Original publisher: [Read original article]() Author: Adam Published: 2023-08-02T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [Networks](), [TLS (Transport Layer Security)](), [Bluetooth](), [Microsoft]() Tags: [bluetooth](), [defcon](), [microsoft](), [networks](), [security](), [tls](), [wifi]() ### AI overview The article argues that using the official Defcon Wi-Fi can be reasonable when devices are fully patched, users join the official networks, and applications use TLS. It contrasts this with the risks of cellular infrastructure and notes that airplane mode does not disable Bluetooth or Wi-Fi; a Faraday cage provides stronger isolation. ### Source excerpt Why it's ok to use the Defcon wifi ## When to Threat Model DevFeed: [When to Threat Model]() Original publisher: [Read original article]() Author: Adam Published: 2020-08-12T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Application Security](), [.NET Conf]() Tags: [appsec](), [defcon](), [supply-chain](), [talk]() ### AI overview The article discusses when organizations should perform threat modeling. It notes that practices such as doing it every sprint or aligning it with waterfall development are not universal, particularly when considering software supply chains, and highlights organizational discipline factors from a Biohacking Village talk at DefCon. ### Source excerpt A talk from the Biohacking Village at DefCon brought up a good point. ## Interesting Finds: Liberalism, machine learning, encryption and learning DevFeed: [Interesting Finds: Liberalism, machine learning, encryption and learning]() Original publisher: [Read original article]() Author: Adam Published: 2019-10-28T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [Machine Learning, Security Attacks](), [Cryptography](), [Learning]() Tags: [competition](), [defcon](), [digital](), [encryption](), [learning](), [machine-learning]() ### AI overview A curated set of interesting recent finds covering liberalism, machine-learning malware evasion, encryption debates from former NSA and FBI general counsels, and Liberating Structures for group dialogue. ### Source excerpt Some interesting things I've recently found ## BlackHat/DEFCON 2011 talk: Breaking out of KVM DevFeed: [BlackHat/DEFCON 2011 talk: Breaking out of KVM]() Original publisher: [Read original article]() Author: Nelson Elhage Published: 2011-08-08T13:32:29Z Content type: article Language: en Sources: [Nelson Elhage]() Topics: [Exploit](), [bug](), [Code](), [Linux](), [test]() Tags: [black-hat](), [bug](), [defcon](), [exploit](), [kernel](), [kvm](), [linux](), [release](), [talk](), [test]() ### AI overview The article announces final slides and code from a DEFCON and Black Hat talk about breaking out of KVM, the Linux Kernel-based Virtual Machine. It says the exploit can be run in a local test environment and that the underlying bug was found using a KVM fuzzer. ### Source excerpt I've posted the final slides from my talk this year at DEFCON and Black Hat, on breaking out of the KVM Kernel Virtual Machine on Linux. Virtunoid: Breaking out of KVM from Nelson Elhage [Edited 2011-08-11] The code is now available. It should be fairly well-commented, and include links to everything you'll need to get the exploit up and running in a local test environment, if you're so inclined. In addition, as I mentioned, this bug was found by a simple KVM fuzzer I wrote.