Threat Hunting - Demystified
Demystifies threat hunting as a cyber-defense strategy, exploring its implementation, phases, and best practices to effectively combat unknown threats in cybersecurity.
Taking Control of Cyber-Supply Chain Security
Explore cyber-supply chain security risks, best practices, and policy recommendations. Learn about Software Bill of Materials and its role in managing software dependencies and vulnerabilities.
Drone Penetration Testing and Vulnerability Analysis Framework
Explore an open-source framework for drone security testing, covering attack types and vulnerability analysis. Learn to assess and enhance drone safety in various applications.
Two Weeks with a Russian Ransomware Cell
Insights from two weeks of dialogue with Russian ransomware operators, revealing their methods, motivations, and advice for IT security, with implications for future cybersecurity strategies.
Hacking People's Mind - When Threat Actors Master Social Engineering
Explore the evolving landscape of social engineering in cybersecurity, focusing on new attack vectors, their sophistication, and strategies for fraud prevention teams to counter these emerging threats.
Seven Deadly Sins of Security Communication Part 2
Explore effective security communication strategies, learn to develop targeted plans, and gain insights on avoiding common pitfalls in large-scale security initiatives.
Seven Deadly Sins of Security Communication Part I
Improve security communication effectiveness by analyzing document elements like headings and calls to action, with examples of impactful messaging to drive desired behavioral changes.
Access Control Design Best Practices
Learn best practices for designing robust access control systems in web applications, covering anti-patterns, principles, and practical examples for secure implementation.
How to Get the Most Value out of Your Penetration Test
Maximize penetration test value: Learn strategies for internal buy-in, aligning with business goals, choosing testers, and evaluating results. Gain practical insights from industry expert Ed Skoudis.
Coordinated Vulnerability Disclosure - You’ve Come a Long Way, Baby
Explore new research on coordinated vulnerability disclosure, examining perspectives of researchers and organizations to understand behaviors, preferences, and practices in software flaw reporting.
Data Ethics and Privacy Engineering in Cybersecurity
Explore data ethics and privacy engineering in cybersecurity, focusing on ethical considerations, stakeholder expectations, and practical applications to create better security products.
Mercedes-Benz and 360 Group - Defending a Luxury Fleet with the Community
Explore Mercedes-Benz's approach to cybersecurity for connected cars, including fleet defense strategies and research by 360 Group on vehicle vulnerabilities and attack surfaces.
Breaking Password Dependencies - Challenges in the Final Mile at Microsoft
Explore Microsoft's journey to eliminate password vulnerabilities, focusing on legacy authentication challenges and practical strategies for achieving 100% remediation in large enterprises.
SIMs, eSIMs and Secure Elements - Dynamic Security for Connected Devices
Explore SIMs and Secure Elements for flexible, secure connectivity in IoT devices. Learn implementation strategies, security principles, and benefits for various industries.
API Abuse through Mobile Apps - New Attacks, New Defenses
Explore mobile app API security challenges and defenses, including OAuth2, TLS pinning, and app attestation. Learn through a simulated battle between a delivery app and an attacker.
Genomics - A New Frontier for Privacy and Security
Exploring genomics' impact on privacy, security, and healthcare, with insights from industry leaders on opportunities, challenges, and ethical considerations in this emerging field.
Nowhere to Hide - How HW Telemetry and ML Can Make Life Tough for Exploits
Explore how CPU telemetry and machine learning can detect concealed malicious code, with insights on feature selection, overhead management, and platform-specific design for effective threat detection.
Defending Serverless Infrastructure in the Cloud
Explore real-world attacks on serverless infrastructure and learn effective security controls to defend against them in this technical session on cloud workload protection.
Fear and Loathing in Cybersecurity - An Analysis of the Psychology of Fear
Explore the psychology of fear in cybersecurity, learn why scare tactics fail, and discover effective strategies to positively impact awareness, behavior, and culture.
A Forward Look at the Cyberspace Solarium Commission
Explore key cybersecurity challenges and recommendations from the Cyberspace Solarium Commission, including government reform, resilience, private sector collaboration, and strengthening norms.
The CCPA Is Here - What’s Changed and What You Need to Know for Compliance
Experts discuss CCPA compliance, recent amendments, and practical steps for businesses to adapt to California's privacy law, including enforcement priorities and future implications.