How to Think - About Complex Adversarial Systems
Eleanor Saitta explores advanced security thinking, focusing on patterns, system-wide approaches, and human factors. She discusses key concepts like resource conflicts, intuition, vulnerabilities, and adaptive capacity for effective security practices.
Exploits in Wetware
Exploits in wetware: social engineering techniques, OSINT strategies, and defensive measures against human vulnerabilities in cybersecurity, based on real-world experiences.
Data Breaches - Barbarians in the Throne Room
Analyze hundreds of data breach disclosures to understand common vulnerabilities, focusing on preventable issues like patching and configuration failures, and their impact on enterprises.
Hacking POS Systems
Explore PoS system vulnerabilities, from physical access to data extraction. Learn about kiosk breakouts, privilege escalation, and real-world examples of critical security flaws in hotel management platforms.
What is Agile and How Can I Use it Well?
Learn Agile methodology principles, implementation strategies, and best practices for effective team management and project delivery in this concise, practical guide.
Community Career Panel or How to Get More than a T-Shirt Working at a Con
Explore career opportunities in cybersecurity events through expert insights on volunteering, networking, and professional growth. Gain valuable tips for resume building and conference management.
Security and DevOps Are Really Best Friends
Explore the synergy between security and DevOps, focusing on asset management, automation, and best practices for enhanced cybersecurity in modern IT environments.
Abusing Password Reuse at Scale - Bcrypt and Beyond
Explore advanced techniques for exploiting password reuse vulnerabilities, focusing on bcrypt and other hashing methods to enhance cybersecurity knowledge and ethical hacking skills.
Building Ambassadors to Reduce Friction, Drive Change, and Get Sh*t Done
Discover strategies for building effective ambassadors to drive change, reduce friction, and improve organizational efficiency in cybersecurity and beyond.
Security Awareness Training Refresh
Refresh your security awareness with practical tips on password management, phishing prevention, and role-based training. Learn to engage users effectively and create impactful, tailored security programs.
Vulnerability Management 101 - Practical Experience and Recommendations
Practical insights on vulnerability management, covering discovery, scoring, and risk acceptance plans, with recommendations for effective implementation in various organizational contexts.
Red Teaming a Manufacturing Network - Without Crashing It
Explore techniques for safely red teaming manufacturing networks, including reconnaissance, passive methods, and potential attack vectors, while learning mitigation strategies and best practices.
You're Good and You Should Feel Good
Gain insights on interviewing, career growth, and leadership in cybersecurity. Learn to navigate company culture, contribute effectively, and seize opportunities for professional development.
Zero Trust Networks - In Theory and in Practice
Comprehensive exploration of Zero Trust Networks, covering theory, implementation strategies, key systems, and practical considerations for enhanced network security.
Federated Login CSRF
Explore federated login CSRF vulnerabilities in OpenID Connect and OAuth 2.0, examining attack scenarios, risks, and mitigation strategies for secure identity linking in web applications.
Fixing Broken Enterprise Threat Models with OWASP Efforts - Commissioning AppSec Professionals for Real Change
Explore how OWASP projects can revolutionize enterprise threat modeling, addressing compliance issues, undefined attack surfaces, and risk distortions to create measurable security impact.
5 Steps to Drive Enterprise Software Security
Learn a disciplined five-step approach to implement enterprise-wide software security initiatives, addressing organizational challenges and ensuring productive application security efforts.
Scaling Security in Agile Scrum
Learn strategies for integrating security into Agile Scrum development, optimizing interactions between security and engineering teams, and fostering in-house security expertise for efficient monthly releases.
The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers
Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.
Cloud Security at Scale and What it Means for Your Application
Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.
Temporal - Decoded - Leverage Cybersecurity as a Business Enabler
Discover how to transform cybersecurity from a cost center to a business enabler through strategic auditing, stakeholder engagement, and operational integration.