The Metaverse of Vulnerability
Explore the cybersecurity challenges and vulnerabilities in the metaverse, from technical issues to operational risks, and learn proactive strategies to address these concerns.
Making Security Simpler
Experts discuss simplifying security through built-in features, automation, and improved architectures, aiming to reduce resource needs and enhance protection for various organizations.
Sherlock Holmes - Finding Threats We Didn’t Know We Were Looking For
Explore threat detection using human intuition, visualization, and abductive reasoning. Learn to uncover hidden security risks and develop actionable intelligence through innovative analytical approaches.
Evading Microsoft ATA for Active Directory Domination
Explore techniques to bypass Microsoft ATA's threat detection in Active Directory, covering reconnaissance, credential attacks, lateral movement, and persistence methods.
Fad or Future - Getting Past the Bug Bounty Hype
Panel discussion on bug bounty programs: insights, challenges, and best practices from experienced program managers. Covers ROI, hunter interactions, and lessons learned for effective implementation and management.
Keeping Secrets - Emerging Practice in Database Encryption
Explore emerging database encryption practices for high-sensitivity workloads, covering threat models, production ops, data in-use protection, and blind administrator approaches.
Running a Security Operations Center - Challenges, Solutions and Key Learnings
Explore challenges and solutions in operationalizing a Security Operations Center, covering threat hunting, behavioral analytics, and rapid product deployment for enhanced cybersecurity.
An Unauthenticated Journey to Root - Pwning Your Company's Enterprise Software Servers
Uncover critical vulnerabilities in SAP enterprise software, exploring unauthenticated access to root privileges. Learn attack steps, prevention strategies, and potential impacts on Fortune 1000 companies.
Engineering Empathy - Adapting Software Engineering Principles and Process to Security
Explore how software engineering principles can enhance security practices, featuring insights from a role-reversal experiment between security and runtime teams.
My Cloud is APT's Cloud - Investigating and Defending Office 365
Investigate and defend Office 365 against sophisticated attacks. Learn authentication types, attack lifecycle, and effective countermeasures for cloud-based enterprise security.
Hiding Process Memory via Anti-Forensic Techniques
Explore novel anti-forensic techniques for hiding malicious process memory, evading detection by memory analysis tools while maintaining accessibility for malware functionality.
On Trust - Stories from the Front Lines
Explore how companies develop character through their approach to security and privacy, with insights from leading security programs during times of change and adversity.
The Enemy Within - Modern Supply Chain Attacks
Practical guidance on defending against and responding to supply chain attacks, covering prevention strategies, risk assessment, and best practices for both SecOps and App Development professionals.
Unveiling the Underground World of Anti-Cheats
Explore anti-cheat techniques in gaming, from market analysis to advanced methods like memory manipulation, with insights on implementation and real-world examples.
Transparency in the Software Supply Chain - Making SBOM a Reality
Explore the concept of Software Bill of Materials (SBOM) and its potential to enhance transparency in the software supply chain, discussing benefits, challenges, and implementation strategies.
Office in Wonderland
Explore novel techniques abusing Microsoft Office features for offensive purposes, including new vulnerabilities, attack vectors, and security impacts of the suite's architectural design.
Testing Your Organization's Social Media Awareness
Explore automated social media intelligence gathering techniques to identify potential targets within organizations and learn strategies for enhancing social media awareness and protection.
Attacking Electric Motors for Fun and Profit
Explore electric motor vulnerabilities and attacks bridging cyber and physical realms. Learn about security risks, attack methods, and protective measures for this critical technology.
Attacking and Defending Blockchains - From Horror Stories to Secure Wallets
Explore blockchain security failures, risks, and best practices for crypto wallets. Learn about smart contract vulnerabilities, custom cryptography pitfalls, and potential exploits in popular Bitcoin software.
Practical Approach to Automate the Discovery and Eradication of Open-Source Software Vulnerabilities
Discover and eradicate open-source vulnerabilities in web applications at scale. Learn Netflix's pragmatic approach to identifying risks, triaging vulnerabilities, and implementing effective remediation strategies.
Phishing for Funds - Understanding Business Email Compromise
Explore the surge in Business Email Compromise, its global impact, and strategies to protect organizations from this lucrative cybercrime targeting various market segments.