Why We Can't Have Nice Things - Original Research on Conflict Resolution Styles in Information Security & Risk Management
Explore conflict resolution styles in InfoSec and Risk Management through original research, focusing on improving social skills and effective negotiation techniques for better outcomes.
How I Hacked a Bank Using Pen & Paper
Discover how a security expert exploited vulnerabilities in a Norwegian bank's systems using only pen and paper, revealing critical flaws in identity verification and account access processes.
Gamification of Tabletop Exercises
Explore innovative approaches to cybersecurity training through gamification of tabletop exercises, enhancing engagement and effectiveness in scenario-based learning.
Lessons Drawn From Cybersecurity in the Rise of Privacy Tech
Explore lessons from cybersecurity applied to privacy tech, discussing compliance, product excellence, and the evolving relationship between privacy and security in business contexts.
Why It's All Snake Oil - And That May Be Ok
Explore cybersecurity challenges, computational limitations, and the implications of "snake oil" solutions in modern technology and threat detection.
Applying Information Security Paradigms to Misinformation Campaigns - A Multidisciplinary Approach
Explore multidisciplinary approaches to combat misinformation campaigns using information security paradigms, focusing on influence tactics, mitigation strategies, and community-building efforts.
No IOUs with IOT
Explore IoT security challenges, outbreaks, and solutions with insights on smart TVs, herd immunity, and enterprise perspectives. Learn practical strategies for safeguarding connected devices.
Birthday Hunting
Explore the Birthday Paradox in cybersecurity, learning its applications in incident response, investigations, and threat detection. Gain insights into mathematical concepts and practical implementations.
Exploiting Windows Group Policy for Reconnaissance and Attack
Explore Windows Group Policy vulnerabilities, reconnaissance techniques, and attack paths. Learn defensive strategies to protect against Group Policy exploitation.
Have You Distributed Randomness?
Explore distributed randomness generation, its importance in cryptography, and the innovative drand protocol for secure, decentralized random number creation.
ATT&CKing Your Adversaries - Operationalizing Cyber Intelligence in Your Own Environment for Better Sleep and a Safer Tomorrow
Learn to operationalize cyber threat intelligence using ATT&CK framework for improved security and detection capabilities in your organization's environment.
Who dis? The Right Way To Authenticate
Explore secure authentication methods, including tokens, OAuth, and SAML. Learn best practices, common issues, and key takeaways for implementing robust authentication in your systems.
Scheming with Machines
Explore machine learning techniques for sandbox detection, feature selection, and model deployment in cybersecurity. Gain insights on client-side models and data acquisition strategies.
Getting CVSS, NVD, and CVEs to Work for You - Standardizing and Scaling Your Vulnerability Risk Analysis
Standardize and scale vulnerability risk analysis using CVSS, NVD, and CVEs. Learn to effectively assess and communicate security risks across stakeholders with practical examples and visualizations.
I'm a Hunter! Cyber Intelligence in the New-ish Frontier
Explore cyber intelligence techniques, from malware analysis to hacker mindset, with real-world examples and practical skills for navigating the digital frontier.
Hacking the Pentagon - How a Rebel Alliance Shifts Culture to Protect National Security
Explore how a rebel alliance shifts Pentagon culture to enhance national security through innovative hacking, data science, and digital transformation strategies.
The Drunk Colonel and the Flipped Stone - Game Theory for a Defensive Strategic Advantage
Explore game theory's application in cybersecurity, focusing on strategic defense, resource allocation, and unpredictability to gain advantages against adversaries.
Old Things Are New Again - Efficient Automatic Signature Generation for Malware Detection
Explore efficient automatic signature generation for malware detection using machine learning techniques and engrams, with a focus on registry key signatures and practical applications.
The SOC Counter ATT&CK
Explore SOC strategies using the ATT&CK framework to enhance threat detection, track progress, and improve security metrics for effective cybersecurity management.
An Investigation of the Security of Passwords Derived From African Languages
Explore password security derived from African languages, analyzing data collection, conversion methods, and vulnerabilities to enhance cybersecurity practices.
Hacking from Above - A Brief Guide for Transitioning to Leadership
Practical guide for hackers transitioning to leadership roles, covering key differences between leaders and managers, essential soft skills, and strategies for effective team management.