Attacking with Automation - How Office 365 Automation Provides Another New Risk to the Cloud
Explore Office 365 automation risks, including Flow vulnerabilities, DLP concerns, and potential for botnet creation. Learn about monitoring, firewall bypasses, and scope creep in cloud security.
Product Security Shouldn't be Painful
Explore strategies for effective product security, including audience understanding, metrics management, and innovative approaches to enhance security practices.
Social Engineering in Nonlinear Warfare
Explore social engineering tactics in non-linear warfare, examining case studies like Estonia and Ukraine to understand modern information warfare and cybersecurity challenges.
Opening the Door to InfoSec
Explore InfoSec career paths, challenges, and strategies for success with insights on teamwork, networking, and personal growth in the cybersecurity field.
Cloudy with a Chance of SecOps
Explore cloud security operations challenges and solutions in this insightful talk, covering best practices for effective SecOps in cloud environments.
I PWN Thee, I PWN Thee Not
Explore social engineering tactics, insider threats, and cybersecurity challenges through real-world examples and industry insights. Learn to empower employees and improve organizational security measures.
Black Hats, White Collars, Bitcoin, Dark Nets, and Insider Trading
Explore the intersection of cybercrime, financial fraud, and cryptocurrency in this talk on black hat tactics, insider trading, and dark web operations.
The Importance of Relevant Timely and Qualitative Intelligence Analysis
Explore the critical aspects of intelligence analysis, focusing on relevance, timeliness, and qualitative methods to enhance threat assessment and risk management in cybersecurity.
How Nathan Crashed and Burned
Candid account of personal failures and lessons learned in cybersecurity, offering valuable insights for professionals to avoid similar pitfalls and improve their career trajectories.
Host Hunting on a Budget
Discover cost-effective techniques for host hunting in cybersecurity, exploring efficient methods to identify and analyze network vulnerabilities without breaking the bank.
MSSPs Are Great and Other Lies I Tell Myself
Explores challenges and misconceptions of Managed Security Service Providers (MSSPs), offering insights on selection, negotiation, and implementation for businesses considering outsourced security solutions.
Custom Robust AWS Monitoring for Cents a Day Using EQL
Learn to implement cost-effective, robust AWS monitoring using EQL. Discover techniques for customizing and optimizing your cloud infrastructure security.
Big Plane Little Plane - How Common Aviation Attacks Affect Airlines and General Aviation
Explore common aviation security vulnerabilities and their impact on commercial airlines and general aviation, highlighting potential risks and mitigation strategies.
Rethinking Privileged Access Management for Agile Clouds Data Center Environments
Explore innovative approaches to privileged access management in agile cloud and data center environments, addressing modern security challenges and evolving infrastructure needs.
Prizes and Closing Remarks
Closing ceremony featuring prize distribution and final thoughts, wrapping up the BSidesCT 2019 conference with gratitude and future event insights.
Digital Transformation Means Security Transformation
Explore how digital transformation impacts security practices, emphasizing the need for adaptive strategies in an evolving technological landscape.
Taking the Next Steps in Cyber Security
Explore career advancement in cybersecurity, covering governance, risk, compliance, networking, certifications, and leadership skills. Gain insights on professional development and industry involvement.
Turn Down for RaaS - Separating Hype from Reality in the Ransomware as a Service Market
Explore the reality of ransomware-as-a-service, separating fact from fiction in this insightful analysis of the current market landscape and its implications for cybersecurity.
Broken Arrow
Explore digital security threats and practical defense strategies for personal data protection in various online platforms and everyday technologies.
Lessons Learned Implementing SDLC and How To Do It Better
Insights on implementing SDLC effectively, covering management buy-in, security awareness, threat modeling, code review, and testing for better software development practices.
Chats, Cheats and Cracks - Abuse of Collaboration Platforms in Malware Campaigns
Explores abuse of collaboration platforms like Discord and Slack in malware campaigns, covering distribution methods, command and control, and protective measures.