Lessons Learned Implementing Meaningful Access Controls to Customer Data
Insights on implementing robust access controls for customer data, reducing internal access by 70% through improved tooling, processes, and automation at Intercom.
Keep it Like a Secret - When Android Apps Contain Private Keys
Análisis de seguridad en apps Android: descubrimiento de miles de claves privadas expuestas, técnicas de craqueo de contraseñas y potenciales riesgos asociados.
Blue Team Fundamentals
Explore effective strategies to counter common cyber attacks, including credential stuffing, phishing, and RCE attempts, with practical takeaways to enhance your organization's security posture.
Using Ancient Math to Speed Up Security Assessments of Windows Executables
Discover how to accelerate Windows executable security assessments using Euclidean Distance and Bayes Theorem, enabling rapid triage and efficient risk reduction in regulated environments.
Caught My WebApp Cheating on Me
Exploring techniques to detect and prevent client-side injections and tampering in web applications, ensuring integrity and security of code executed in the browser.
Listen to Your Engine - Unearthing Security Signals from the Modern Linux Kernel
Exploring Linux kernel security signals through system call analysis, focusing on detecting privilege escalation, resource abuse, and side-channel attacks in cloud-native environments.
Logging, Monitoring, and Alerting in AWS - The TL;DR
Comprehensive guide to AWS security services for effective monitoring, alerting, and incident response. Learn critical configurations to immediately enhance your infrastructure's protection.
Practical Steps for Reducing Exposure and Detecting Compromise
Strategies for securing DNS services, protecting against common attacks, and monitoring traffic for compromise. Covers both authoritative and recursive perspectives to enhance overall network security.
Moving Security from Cost Center to Revenue Generator
Discover strategies to transform security from a cost center to a revenue generator by communicating its value in financial terms and highlighting revenue enabled by effective security measures.
Unraveling the Threat of Chrome Based Malware
Explore Chrome extension vulnerabilities, their potential for network compromise, and strategies for identifying and mitigating risks in enterprise environments.
Tales of Red Teaming - Continuous Intrusion Continuous Deception
Explore advanced red teaming techniques for attacking large corporate networks, including compromising deployment systems, backdooring software, breaking out of containers, and exploiting misconfigurations in multi-tenant systems.
Ask the EFF
Panel discussion with EFF staff on digital civil liberties, covering current issues and answering audience questions about privacy, security, and online rights.
KubeScope for the Extraordinary World of Containers
Explore KubeScope, a tool combining machine learning and rule-based detection to secure Kubernetes deployments against various threats, including malformed input attacks, DDoS, and credential leaks.
Overcoming Obstacles in Operationalizing Security - A Tale from the Trenches
Practical insights on implementing security strategies in startups, addressing challenges like limited budgets and talent shortage. Learn to anticipate obstacles and make sensible trade-offs in real-world scenarios.
From Bounties to Bureaucracy - The Hidden Market Factors of Exploit Economics
Explore the evolution of bug bounty programs, their impact on cybersecurity, and how they shape the vulnerability marketplace. Learn about exploit trends, disruption of threats, and future predictions in this insightful talk.
Managing Secrets in Your Cloud Environment - AWS, GCP, and Containers (and Beyond)
Comprehensive guide to managing sensitive data in cloud environments, covering storage options, common mistakes, identity considerations, evaluation criteria, and solutions for AWS, GCP, and Azure containers.
Fuzzing Ruby and C Extensions
Explore fuzzing techniques for Ruby and C extensions, focusing on security implications and using AFL fuzzer to identify vulnerabilities in Ruby language and gems.
PostgreSQL Threats and Attacks in the Wild
Explore PostgreSQL vulnerabilities through honeypot findings, including exploits, malware, and brute force attacks. Learn about honeypot development and integration with security tools.
Privacy for Safety - OPSEC When the Threat is in the Home
Exploring digital safety strategies for individuals facing threats within their homes, focusing on improving awareness and tools to protect vulnerable groups from domestic abuse.
Fix All The Things - Rapid-Fire Stories of Creative Solutions to InfoSec Problems
Engaging presentation showcasing innovative approaches to solving information security challenges, offering practical insights and creative problem-solving techniques for InfoSec professionals.
Navigating the Vast Ocean of Browser Fingerprints
Explore browser fingerprinting and machine learning for fraud detection, combining techniques to create effective blue team applications and enhance cybersecurity measures.