Contact Center Authentication
Explore best practices for secure phone authentication in contact centers, covering research findings, real-world examples, and innovative solutions to enhance customer and agent experiences.
The Path to Infosec is Not Always Linear
Explore a unique journey into infosec, from neuroscience to live hacking, offering insights and lessons for those considering non-traditional paths in cybersecurity.
Checking Your --privileged Container
Explore container security, focusing on privileged containers, capabilities, and security contracts. Learn practical demos and admission controller techniques for enhanced protection.
How to Kill an AWS Access Key
Learn to eliminate static AWS Access Keys using Security Token Service, SAML, and Identity Providers for enhanced cloud security and short-lived credentials.
Visualizing Security
Explore data analysis and visualization techniques for security through real-world examples, covering various chart types and data transformation methods to enhance security insights.
Mental Health for Hackers - Contents Under Pressure
Experts discuss mental health challenges in infosec, addressing burnout, anxiety, and depression. Offers insights on building supportive cultures and improving workplace well-being.
Phishy Little Liars - Pretexts That Kill
Discover advanced techniques for creating specialized, custom pretexts in penetration testing, using target-specific data to enhance effectiveness and avoid detection.
Security Learns to Sprint - DevSecOps
Explore strategies for integrating security into DevOps, focusing on the "Three Ways" and providing actionable steps for immediate implementation in your organization.
Securing Coinbase's Edge Payments Infrastructure
Explore secure payment networks, KYC/AML practices, and fraud prevention in cryptocurrency exchanges. Learn about Coinbase's strategies for protecting transactions and ensuring regulatory compliance.
When GDPR and CCPA Strike - Silver Lining for Security Teams in Data Protection Clouds
Explore how data protection laws like GDPR and CCPA can benefit security teams, informing risk modeling, securing buy-in, and reducing liability exposure for organizations.
East vs West - How The Coasts Approach Information Security Differently
Explore the contrasting approaches to information security between Wall Street and Silicon Valley, uncovering valuable insights for professionals across various security roles.
Bootstrapping Security
Practical strategies for implementing effective cybersecurity on limited budgets, covering tools, techniques, and cost-saving approaches for organizations with financial constraints.
The Voight-Kampff Test for Discovering Web Application Vulnerabilities
Explore techniques to differentiate between human-discovered and machine-detected web app vulnerabilities, with insights on manual setup, chain exploits, and real-world case studies.
Security, Politics, Neutrality, and Protecting Users
Explore the intersection of security, politics, and tech neutrality, examining how these factors impact user protection and the evolving role of technology companies in society.
Break Crypto like a Pro
Explore common cryptographic vulnerabilities and learn practical exploitation techniques in this engaging talk on breaking crypto systems effectively.
Non-Political Security Learnings from the Mueller Report
Explore forensic evidence from the Mueller Report to understand network compromises, access methods, and defensive strategies for organizations.
RIS-ky Business - Exploiting Medical Information Systems
Explore medical device security, protocols, and system architecture. Learn how attackers can exploit vulnerabilities to access patient information in healthcare settings.
Serverless Osquery Backend and Big Data Exploration
Explore serverless osquery backend deployment, scalability challenges, and large-scale data processing for enhanced intrusion detection and endpoint management.
Adventures in Vendor Security and Continuous Review
Explore innovative methods for continuous vendor security assessment in the cloud era, leveraging publicly available information to evaluate and monitor provider security postures.
Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
Learn to combat vulnerability fatigue using data analytics principles from the US Tsunami Warning Center for real-time, high-impact security alerts.
Purple is the New Black - Modern Approaches to Application Security
Explore modern application security approaches combining defense, offense, automation, and continuous learning for various app types, including zero trust, supply chain, and microservices.