An Unlikely Friendship - Why Security Engineers and Product Managers Should Be Working Together
Discover strategies for security engineers to collaborate with product managers, enhancing security features, accelerating team growth, and unlocking revenue from security-conscious customers.
Read the Fantastic Manual - Writing Security Docs People Will Actually Read
Strategies for creating effective security documentation that people will read and use. Covers identifying needs, iterative creation, and measuring success in technical writing.
Go With The -Work-flow
Unveiling security risks in cloud workflow platforms: misconfigurations, credential exposure, data leakage, insecure coding, and containerized malware. Eye-opening research for IT professionals.
Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt
Discover how to treat security vulnerabilities as debt, moving beyond rigid SLAs and exception overload. Learn strategies for responsible risk management in cybersecurity.
Biohacker - The Invisible Threat
Exploring the emerging threat of biohacking: how human implants can compromise contactless technology and pose risks to physical and digital security systems.
Redefining Threat Modeling - Security Team Goes on Vacation
Discover innovative approaches to scale threat modeling programs without compromising quality. Learn strategies for efficient security practices that empower teams and enhance overall effectiveness.
CTF Writeup - Log 'em All
Detailed walkthrough of a challenging Hacking/Reverse Engineering CTF challenge inspired by a Pokemon Red bug, with step-by-step instructions for setup and execution.
Offensive Javascript Techniques for Red Teamers
Explore advanced JavaScript techniques for network reconnaissance and exploitation, focusing on rapid execution and targeting internal vulnerabilities from external sources.
How Software Transparency Can Help Save the World
Explore software transparency through SBOMs, enhancing vulnerability management and supply chain visibility. Learn how this approach can revolutionize cybersecurity and software development practices.
A Look at Jython-Enhanced Reverse Engineering with Ghidra
Explore Jython scripting in Ghidra for efficient malware analysis, using real-world examples to enhance reverse engineering techniques and streamline the process of analyzing obfuscated binaries.
Dispatch - Crisis Management Automation When Everything is On Fire
Explore Dispatch, an automation tool for crisis management lifecycles, streamlining incident response from initial report to post-incident review.
Leveraging Osquery for DFIR at Scale
Explore efficient incident response using Osquery for digital forensics, accelerating breach investigations and uncovering attacker breadcrumbs in large-scale environments.
The Metrics Manifesto
Discover predictive analytics for security, including decision science, Bayesian methods, and quantitative risk management. Learn to measure attack surface and present advanced metrics to boards.
Retain and Recruit a Diverse Talent Pool
Strategies for building and maintaining a diverse cybersecurity workforce, addressing talent shortages through inclusive practices and innovative retention approaches.
Common Security Frameworks
Explore essential security principles and frameworks with industry leaders, gaining valuable insights to enhance your understanding of current and emerging security topics.
How to Find the Money - Interviews with Leading Venture Capitalists
Venture capitalists share insights on securing funding for startups, from stealth to exit, and navigating the competitive marketplace in this informative seminar.
How to Get the CISO's Attention
Insights from industry leaders on effectively engaging CISOs, exploring strategies for startups to stand out in cybersecurity and gain executive attention.
In the Wake of an Attack - Thoughts from a Seasoned CISO
Insights from a seasoned CISO on cybersecurity best practices, including secure by default, effective communication, and protecting high-profile organizations and political campaigns.
Scouting for Talent - The Solution in the Next Generation
Discover how Girl Scouts nurtures STEM talent, promotes diversity, and shapes future leaders. Learn strategies to foster inclusivity and drive positive change in the tech industry.
A Separate Network for Critical Infrastructure - Is It a Good Idea?
Explore the feasibility, costs, and benefits of creating separate networks for critical infrastructure operations, discussing industry perspectives and government's role in protection.
Public-Interest Tech in Silicon Valley
Explore public interest tech in Silicon Valley with industry leaders. Gain insights on balancing innovation with societal impact and learn strategies for advocating for the public good in tech organizations.