Applying Forensic Engineering in Cybersecurity Incidents
Discover how forensic engineering principles enhance incident response, support regulatory inquiries, and identify legal liability in cybersecurity incidents.
The Old is New Again - An Intro to SMS Security and Why It’s Vital
Explore SMS security, phishing threats, and protective measures to safeguard messaging revenue and consumer trust in today's sophisticated threat landscape.
Rethinking Recruiting - Effective Hiring Practices to Close the Skills Gap
Discover innovative hiring strategies to bridge the cybersecurity skills gap, featuring insights from a viral job posting and a successful career transition from journalism to cybersecurity.
Ghosts in the Machine - Is There a Security Patch for People
Explore a three-pronged approach to address insider threats, combining technical and non-technical indicators with dark web intelligence. Learn actionable strategies from real-world incidents.
Cloud Agnostic or Devout - How Cloud Native Security Varies in EKS - AKS - GKE
Explore security variations in Kubernetes across major cloud providers, empowering teams to implement consistent controls for truly cloud-consistent applications.
Standards on the Horizon - What Matters Most
Experts discuss recent developments and future priorities in cybersecurity standards, focusing on their impact on innovation, interoperability, and global trade. Insights for shaping organizational roadmaps.
From the Cluster to the Cloud - Lateral Movements in Kubernetes
Explore Kubernetes lateral movement techniques and learn how attackers can pivot from container access to cloud resources. Discover practical tools for threat mitigation and detection in cloud-based Kubernetes environments.
Trust Unearned? Evaluating CA Trustworthiness Across 5 Billion Certificates
Explore insights from 5 billion TLS certificates to assess CA trustworthiness, revealing key factors and practical strategies for enhancing organizational security.
EXPOSURE - The 4th Annual RSAC SOC Report
Dive into the humorous and eye-opening findings from monitoring the RSAC wireless network, revealing surprising user behaviors and evolving trends in cybersecurity awareness.
Turning the Backpage - Combating Human Trafficking with Threat Intelligence
Explore how threat intelligence can combat human trafficking by monitoring classified ads for indicators, generating leads, and assisting investigations to help survivors.
How to Adapt to Security Changes in Cloud SaaS Transformation
Explore the security advantages of cloud migration and learn to evaluate SaaS environments using a detailed framework for comparing on-premise and cloud security postures.
Corporate Reputation Attacks - Dissecting the Latest Job Offer Scams
Uncover the tactics behind job offer scams targeting corporate reputations. Learn to identify, respond to, and prevent these fraudulent attacks through real-world case studies and expert insights.
Conducting a Pre-Mortem on the Next Zero Trust Breach
Explore future Zero Trust breaches through a pre-mortem analysis, examining potential vulnerabilities and attack vectors in 2028's cybersecurity landscape to enhance current defensive strategies.
The Fearless Cybersecurity Leader and Future CISO
Explore 7 essential skills for aspiring CISOs, including leadership traits and real-life examples. Gain insights into the CISO role and develop crucial competencies for cybersecurity leadership.
Adversary Emulation - How I Stopped Being Polite and Got Real Results
Explore how real adversaries differ from testers in cybersecurity, using data from actual intrusions to improve threat detection and adversary emulation techniques.
Abuse of Repository Webhooks to Access Hundreds of Internal CI Systems
Explore a novel attack vector abusing repository webhooks to access internal CI systems, revealing vulnerabilities in common CI/CD architectures and their potential impact on organizations.
Verifiable Credentials and the Future of Enterprise Security
Explore how verifiable credentials revolutionize enterprise security by tying data to owners, enabling privacy-preserving sharing, and eliminating single points of failure in digital authentication.
Perspectives on the Developing Cyber Workforce Strategy
Explore key pillars and objectives of the National Cyber Workforce and Education Strategy, addressing federal workforce, education, training, and digital awareness initiatives.
Verifiable Credential in Actions During ID-Verification Process
Explore modernizing credential proofing with verifiable credentials, reducing frustration in HR and IT. Learn implementation details through a customer scenario for efficient identity attestation.
Why Having a Security Reference Architecture Matters
Explore the importance of security reference architecture in adhering to frameworks, achieving Zero Trust and SASE, and enhancing Security Operations for effective threat management.
Managing the Mobile Endpoint Attack Surface
Explore risk management for enterprise mobility, focusing on mobile threats and mitigation strategies. Learn from NCCoE's analysis of common mobile device security threats.