Operation Chimera - APT Operation Targets Semiconductor Vendors
Analysis of APT attacks on semiconductor industry, focusing on Taiwan. Explores threat actors, campaigns, and security status, highlighting potential global supply chain impacts.
The Discovery of a Government Malware and an Unexpected Spy Scandal
Explore the eSurv case study and trace the evolution of lawful intercept from Windows Trojans to professional spyware, uncovering a government malware scandal and its implications.
First Contact - Vulnerabilities in Contactless Payments
Explore vulnerabilities in contactless payment systems, examining protocols and potential security risks in this comprehensive analysis of NFC technology.
A Decade After Stuxnet's Printer Vulnerability - Printing is Still the Stairway to Heaven
Explore the enduring security risks in Windows Print Spooler service, a decade after Stuxnet's infamous exploit, and learn about current vulnerabilities in printing systems.
Architecting a Security Program for the Future
Interactive workshop on risk-based security management, using role-playing to assess, prioritize, and mitigate risks in a fictional company. Provides practical tools and strategies for modern cybersecurity challenges.
Leveling Up Your Bug Bounty Program
Explore bug bounty programs: benefits, pitfalls, and implementation strategies. Learn from Indeed.com's experience in leveraging diverse skills to enhance security and uncover critical vulnerabilities.
Building Information Security Program from Scratch
Aprenda a construir um programa de segurança da informação eficaz, focando em métricas, gerenciamento de riscos e contratação de profissionais apaixonados pelo tema.
Lean Security
Explore lean security strategies to align with DevOps and Continuous Delivery, enhancing transparency and efficiency while maintaining robust defense systems in fast-paced business environments.
Building Effective Cyber Security and Risk Management Programs
Explore strategies for developing robust cyber security and risk management programs with insights from Dr. Ron Ross, enhancing organizational resilience against digital threats.
Analyzing Malicious Office Documents
Learn techniques to analyze malicious Microsoft Office documents using Python tools like oledump and YARA rules. Hands-on exercises guide you through step-by-step analysis without requiring Office software.
DDoS Mitigation Epic Fail Collection
Explore 10 critical DDoS mitigation failures, their technical details, and recommended solutions. Learn from industry leaders' mistakes to enhance your defense strategies against sophisticated attacks.
Meaningful Measurement - It’s About Time We Got This Right
Explores flaws in current cybercrime metrics, advocating for standardized, business-focused measurements to improve threat intelligence and risk analysis across all enterprise sizes.
Attacks on SAP HANA Platform
Explore vulnerabilities in SAP HANA platform, including on-premise, cloud, and IoT deployments. Learn attack vectors, technical details, and prevention strategies for securing critical business data.
I'm the Guy Your CSO Warned You About
Explore modern social engineering tactics and tools used by cybercriminals, with live demonstrations and practical defense strategies for individuals and organizations.
House of Cards - How Not to Collapse When Bad Things Happen
Discover how to build resilient enterprise security by actively testing defenses, validating controls, and learning from simulated scenarios to prepare for real-world threats and challenges.
Weak Analogies Make Poor Realities
Exploring the shift from viewing cybersecurity as risk to security debt, challenging traditional paradigms and proposing a new approach to articulate and measure software security benefits.
Software Security Austerity - Software Security Debt in Modern Software Development
Explore software security debt in modern development, its sources, management strategies, and consequences with expert insights on risk assessment and mitigation techniques.
Communicating with the Boss - Don't Talk S, It's BS That the C's Understand or How to Talk to Your Executives
Discover effective strategies for conveying complex security concepts to executives, enhancing communication and decision-making in information security leadership.
The Real Cost of Security
Explore the complexities of security costs with Wendy Nather as she shares research findings, challenges assumptions, and discusses affordability in this thought-provoking LASCON presentation.
Why Does Bad Software Happen to Good People
Explore the root causes of software failures and their impact on users in this insightful keynote, offering valuable perspectives on improving software quality and reliability.
Mitigating Business Risks with Application Security
Explore strategies for mitigating business risks through application security, covering software assurance, supply chain management, and best practices for secure development.