Ethical Hacking - DIY Mobile Security Workstation for Cheap
Learn to build a cost-effective mobile security workstation using affordable parts and open-source software. Discover how to create a powerful system capable of running Kali Linux or Parrot OS for ethical hacking and network testing.
Implementing a Kick-Butt Training Program - Blue Team Go
Discover a framework for building a robust cybersecurity training program that empowers analysts with hands-on skills in incident response, forensics, and threat hunting.
Treat the Problems, Not the Symptoms
Explore alternative approaches to Active Directory security, focusing on actionable steps for complex multi-domain environments beyond traditional defensive products.
Journey to Command Injection - Hacking the Lenovo ix4-300d
Demonstration of chaining vulnerabilities to remotely exploit a Lenovo NAS device, showcasing command injection, XSS, and CSRF techniques for full system compromise.
Shall We Play a Game?
Develop effective security exercises using MITRE ATT&CK framework. Learn to create, run, and score drills that turn threat intelligence into practiced action for improved incident response.
Making Sense of Unstructured Threat Data
Explore how Natural Language Processing and Word2Vec can organize unstructured cybersecurity intelligence, making it actionable by mapping to frameworks like MITRE ATT&CK.
Automating Web Application Bug Hunting
Discover techniques for automating web application vulnerability scanning to enhance bug bounty hunting and application security analysis efficiency.
Securing Online Identities with Simple, Secure, Open Standards
Explore the evolution of online identity security, from U2F to FIDO2, and learn how open standards are shaping the future of passwordless authentication across devices.
Deploying Two-Factor Authentication to Millions of Users
Comprehensive guide on implementing two-factor authentication for large-scale websites, covering design, architecture, and various methods like TOTP, push notifications, and FIDO security keys.
How to Build an Application Security Program
Practical insights on creating and improving application security programs, drawing from 20 years of experience across various sectors. Covers successful strategies and pitfalls to avoid.
Conquer the Enterprise from Inside
Explore penetration testing dropboxes: types, setup, and attacks. Learn how these tools simulate internal threats, uncover security gaps, and benefit both red and blue teams in enterprise environments.
Abusing WCF Endpoint for RCE and Privilege Escalation
Explore WCF vulnerabilities in .NET programs, focusing on privilege escalation and remote code execution. Learn to identify and exploit these bugs through a real-world case study.
Containers - Your Ally in Improving Security
Explore built-in security tactics for Kubernetes and Docker, including automated configurations, read-only filesystems, and limiting cross-container communications to enhance service security.
How to Orchestrate a Cyber Security Incident Tabletop Exercise
Interactive presentation on orchestrating cyber security incident tabletop exercises, focusing on "assume breach" scenarios and guiding participants through simulated timelines and decision-making processes.
Lyft Cartography - Automating Security Visibility and Democratization
Explore Lyft's open-source security intelligence platform for asset tracking, relationship mapping, and automated decision-making. Learn how it improves visibility and empowers teams to enhance security posture.
A Deep Dive into Go Malware - Using Metadata to Empower the Analyst
Explore Go malware's unique characteristics, metadata analysis techniques, and insights into malware authorship through examination of stripped Go binaries and their structural elements.
Profiling VIP Accounts Access Patterns in User-Centric Data Streams
Innovative real-time analysis technique for detecting compromised privileged accounts using Kafka streaming, enabling scalable, per-account risk assessment and evolving individual risk profiles.
Anti-Privacy Anti-Patterns
Exploring data collection practices, privacy implications, and the need for perspective shifts in digital privacy. Examines research findings, technological innovations, and the impact of seemingly harmless data.
Do You Even Tech Anymore - Management & Leadership in Security
Insights on transitioning from engineering to management in security, addressing challenges, self-doubt, and maintaining technical relevance while developing leadership skills and fostering a collaborative team culture.
Do Androids Dream of Electric Fences?
Explore Android enterprise security features, threats, and best practices for protecting users in organizations. Learn how Google implements these measures and where to begin enhancing your security.
How to Fix the Diversity Gap in Cybersecurity
Explore strategies to address the cybersecurity diversity gap, examining unconscious bias, underrepresented experiences, and actionable steps to increase and retain qualified candidates from diverse backgrounds.