A Year in the Wild - Fighting Malware at the Corporate Level
Explore Yelp's automated malware defense system, featuring in-house tools like AIR and OSXCollector, complemented by open-source solutions for swift threat detection and response in corporate networks.
Sweet Security - Deploying a Defensive Raspberry Pi
Explore open-source tools and inexpensive hardware like Raspberry Pi to monitor, protect, and mitigate threats in IoT environments, addressing security challenges of outdated devices.
Fraud Detection and Real-time Trust Decisions
Explore fraud detection techniques in online commerce, from traditional attacks to real-time marketplace challenges. Learn about combating fraud and its parallels with network security.
Fuzz Smarter, Not Harder - An AFL-Fuzz Primer
Comprehensive guide to efficient fuzzing using afl-fuzz, covering instrumentation techniques, optimization strategies, and crash analysis for effective bug hunting and software security testing.
Elliptic Curve Cryptography for Those Who Are Afraid of Math
Demystifying Elliptic Curve Cryptography: Learn the basics, understand its applications, and grasp the importance of ECC expertise without delving into complex mathematics.
Employee Hijacking - Building a Hacktober Awareness Program
Engaging Hacktober program teaches employees security awareness through interactive hacking exercises, prizes, and fun activities, improving human defense against cyber threats.
Developing a Rugged DevOps Approach to Cloud Security
Strategies for integrating continuous security into DevOps processes, emphasizing automation, monitoring, and agile security practices for cloud environments.
Digital Intel Gathering - OSINT for Blue - Red Teams
Explore OSINT techniques for cybersecurity, leveraging social media and public records to enhance threat intelligence and defensive strategies.
The Art of the Jedi Mind Trick
Explore effective communication techniques for security professionals to convey messages to management, overcome obstacles, and drive real change in organizations.
Using Behavior to Protect Cloud Servers
Explore behavior-based analytics for cloud server security, focusing on dynamic privilege management to identify and prevent insider threats and privilege escalation attacks in real-time.
What Should and Shouldn't Scare You - Kubernetes and Containers
Explore Kubernetes and container security: debunking myths, identifying real threats, and discovering opportunities for improved security practices in modern app deployment.
Creating Data-Driven Threat Intelligence Signals in a Zero Trust Environment
Explore dynamic, data-driven threat intelligence signals for "Zero Trust" environments, reshaping security approaches for modern network architectures.
The Red Square - Mapping the Connections Inside Russia’s APT Ecosystem
Explore Russian APT ecosystem analysis, learn about open-source tools for investigating cyber attacks, and gain insights into the connections within this complex landscape.
Secure by Design - Usable Security Tooling
Explore strategies for creating effective security products by prioritizing usability, leading to better and more secure experiences for users.
So You’re the First Security Hire - Creating a Security Program and Integrating Security into Your Company’s Culture
Guidance for pioneering security professionals on establishing a robust security program, integrating it into company culture, and balancing protection with business needs.
Operation PZCHAO - Dissecting a Cyber-Attack
Explore a sophisticated cyber-attack targeting Asian institutions, dissecting its modules, capabilities, and impact on victims' data in this in-depth analysis of Operation PZCHAO.
Owning the Smart Home with Logitech Harmony Hub
Explore reverse engineering of Logitech's Harmony smart home hub, uncovering vulnerabilities and discussing their implications for device security and potential exploitation.
Fighting Email Phishing with a Custom Cloud IDS
Learn to build a custom cloud-based email IDS to combat phishing, enhancing security while improving operational efficiency. Explore real-time threat adaptation and AWS implementation.
DNS Attacks - Past, Present, and Future
Explore DNS vulnerabilities, their historical impact, and potential future threats in this comprehensive overview of attack techniques and pentesting applications.
Reverse Engineering the Tesla Battery Management System to Increase Power Available
Explore Tesla's Battery Management System reverse engineering, focusing on power upgrades in performance models. Learn about architecture, data structures, and hardware modifications for enhanced vehicle performance.
Ruling StarCraft Game Spitefully - Exploiting the Blind Spot of AI-Powered Game Bots
Explore techniques to exploit vulnerabilities in AI-powered game bots, focusing on StarCraft. Learn about deep reinforcement learning, adversarial attacks, and potential defenses in gaming AI.