What is Linux Kernel Keystore and Why You Should Use It in Your Next Application
Explore Linux kernel keystore's secure credential management, data encryption, and key negotiation capabilities. Learn its benefits for cloud-native environments and integration with specialized security hardware.
Test Driven Application Security
Explore test-driven application security with automated tests to validate defenses. Learn to prevent OWASP TOP 10 vulnerabilities through clear requirements and security-focused testing in C# and ASP.NET Core 6.
Building a Sustainable Security Requirements Process with the ASVS
Learn to integrate security requirements early in development using OWASP ASVS. Discover strategies for buy-in, prioritization, and maintaining a sustainable security process tailored to your organization's needs.
Reducing Third-Party Security Risk in .NET Core Applications
Explore strategies to mitigate security risks from third-party dependencies in .NET Core, including compartmentalization and API review, to enhance application safety and reduce vulnerabilities.
A Tale of Two Sides of 2FA
Explore the complexities of two-factor authentication, its implementation challenges, and best practices for enhanced security in applications. Learn from real-world examples to protect users effectively.
The Implementation and Practice of DevSecOps
Explore DevSecOps implementation, tools integration, and maturity models. Learn to shift security left, automate vulnerability detection, and enhance development team skills through practical training approaches.
Running PHP Apps on .NET 5
Explore PeachPie: an open-source compiler bridging PHP and .NET, enabling interoperability and enhancing performance for large-scale web applications like WordPress and Laravel.
Demystifying Front-End Security
Explore modern front-end security challenges, attack techniques, and mitigation strategies. Learn why frameworks aren't foolproof and how to enhance your web applications' defenses against evolving threats.
Preventing DoS Attacks in Node.js Applications - Security Best Practices
Master essential security techniques for protecting Node.js applications from DoS attacks, covering JSON parsing, XML bombs, regex vulnerabilities, and storage operations optimization.
API Security Testing with Noname Security - Overview and Live Demo
Discover how to integrate API security testing into CI/CD pipelines with pre-production capabilities, ensuring rapid and secure API development through hands-on demonstrations.
Cisco Secure Firewall 4200 Series and Threat Defense 7.4 - Features and Architecture Overview
Discover the latest innovations in Cisco's 4200 Series firewalls and Threat Defense 7.4, featuring enhanced encrypted traffic handling, ML-driven threat blocking, and Zero Trust application access capabilities.
Next Level Python Applications with PyScript
Discover how to build powerful browser-based Python applications using PyScript, exploring scalability, mobile support, and seamless integration with JavaScript libraries for enhanced web development.
Blackbox Containers: Container Security in the Enterprise
Dive into container security fundamentals, lifecycle management, and enterprise-level best practices for securing containerized applications in modern development environments.
Scaling the Security Wall: Agile Threat Modeling for Complex Systems
Discover practical approaches to agile threat modeling for large-scale systems, focusing on cloud architectures, SDLC integration, and cost-effective security strategies.
Taking Down Applications with Logic - DEF CON 31
Dive into advanced application security techniques and learn how logical vulnerabilities can be exploited to compromise web applications, demonstrated through real-world examples.
Finding and Exploiting Local Security Vulnerabilities in 1Password for MacOS
Explore critical security vulnerabilities in 1Password's MacOS app, including local vault exploitation, IPC weaknesses, and Chrome extension flaws that could compromise password security.
Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana
Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.
Transforming Application Security: Protecting Everything as Code
Explore modern application security challenges and solutions in cloud-native environments, from threat modeling to real-time detection, with emphasis on securing 'everything as code' ecosystems.
Manipulating Shim and Office Infrastructure for Code Injection and Privilege Escalation
Delve into advanced Windows exploitation techniques, focusing on stealthy shim manipulation and Office infrastructure vulnerabilities for code injection and privilege escalation attacks.
Defeating ATM Disk Encryption - Security Vulnerabilities in Vynamic Security Suite
Delve into critical ATM security vulnerabilities, focusing on Diebold Nixdorf's VSS encryption weaknesses, exploitation methods, and essential defense strategies for financial systems protection.
Thriving in the Age of AI
Explore AI's transformative impact on security, business, and daily life. Gain insights on mitigating risks, ethical implications, and future trends in AI-driven threat intelligence from an industry expert.