We couldn't miss Cyberweek in Las Vegas. Here's a look at the great time we had at Black Hat, DEF CON, and BSides Las Vegas this year.
At Black Hat 2025, ELLIO launched the new open-source defense tool, TCP Fingerprint Firewall, designed to protect networks from malicious and promiscuous scanners. Powered by eBPF and leveraging XDP (eXpress Data Path) for inline packet processing, this firewall uses MuonFP’s advanced TCP fingerprinting technology to detect and block reconnaissance traffic with exceptional speed and accuracy.
More at GitHub
At DEF CON 2025, the ELLIO team offered hands-on experience with TCP and TLS fingerprinting in a live lab setting. Participants learned how to apply modern fingerprinting techniques for proactive defense. They captured real packets using tools like MuonFP, p0f, JA3, JA3n, and JA4; normalized JA3 to JA3n; converted MuonFP detections into p0f signatures; and compiled these into BPF and ip tables rules for dynamic threat blocking. Attendees sharpened skills to detect and block malicious traffic with advanced fingerprinting.
During Cyberweek, the ELLIO team hosted a fun and flavorful event called Hot Takes: Where Spice Meets Security. The gathering mixed spicy sauce tasting with lively chats about the latest in cybersecurity. It was a great chance for folks who love spice and those passionate about cybersecurity to connect, share ideas, and enjoy some tasty heat together. Thanks to everyone who joined us !
June 26, 2025
Online
We discussed advanced dynamic blocking, leveraging behavior analysis, anomaly detection, threat intelligence, fingerprinting, and precise automation for efficient prevention.
June 3, 2025
The Honeynet Project Annual Workshop, Prague
Designed for anyone ready to dive into modern network fingerprinting and learn how to turn raw data into actionable defenses. We covered JA3, JA3N, JA4, p0f, MuonFP, and various TCP/IP fingerprinting techniques.
May 1, 2025
San Srancisco
A workshop on practical techniques to enhance firewall defenses against illegitimate traffic, emerging threats, and zero-day attacks, tailored for today’s threat landscape dominated by mass scanning, and AI-driven attacks.
