Incident Response and the Attorney Client Privilege
Explore legal protection of incident reports through attorney-client privilege. Learn when it applies, its limitations, and best practices for collaborating with attorneys during security incidents.
Post-Quantum Crypto - Today’s Defense Against Tomorrow’s Quantum Hacker
Overview of post-quantum cryptography and its practical applications in securing today's data against future quantum threats. Includes lessons from real-world integrations and demonstrations of quantum-safe alternatives.
It's 2019 and Special Agent Johnny Still Can't Encrypt
Examination of persistent encryption failures in law enforcement radio systems, exploring protocol vulnerabilities, implementation issues, and challenges in improving security practices for deployed systems.
The Ethics of Prosecuting an Offensive Security Campaign
Explore ethical considerations in offensive security campaigns, including impacts on company morale, deception tactics, and maintaining professional integrity. Learn best practices for conducting ethical red team engagements.
Shut Up and Listen
Strategies for bridging the gap between InfoSec job seekers and employers. Insights on challenges, tactics for success, and collaboration in the cybersecurity job market.
What's the Latest 411 on 419s?
Explore the latest tricks used by online scammers and learn three crucial OpSec strategies to protect yourself in an increasingly hostile digital environment.
Weapons of Text Destruction
Explore the hidden offensive capabilities of Vim for red team engagements. Learn how this popular text editor can be leveraged as a powerful tool in unconventional security operations.
Ground Truth - 18 Vendors, 6000 Firmware Images, 2.7 Million Binaries, and a Flaw in the Linux-MIPS Stack
Presentation of data from analysis of 6000+ firmware images, revealing trends in software hardening and a critical flaw in Linux/MIPS stack affecting security across embedded devices.
The APT at Home - The Attacker That Knows Your Mother's Maiden Name
Explores how traditional security measures fail victims of domestic violence and the need to rethink security approaches for vulnerable populations facing proximity-based threats.
Voting in 2019 - Bad or Worse
Explore electronic voting system vulnerabilities, their exploitation in 2018, and prospects for improvement before 2020 with cybersecurity expert Matt Blaze.
Deconstructing DeFeNeStRaTe.C
Dive into mainframe security with an analysis of DeFeNeStRaTe.C, exploring privilege escalation, APF unix programs, buffer overflows, and ACEE manipulation on IBM z/OS systems.
Between Two Moose
Insightful interviews with security industry leaders discussing career journeys, formative experiences, and contemporary issues, blending professional insights with lighthearted banter.
Be an IoT Safety Hero - Policing Unsafe IoT through the Consumer Product Safety Commission
Explore IoT device safety regulations, the Consumer Product Safety Commission's role, and how to report unsafe products. Learn to be an IoT safety advocate with insights from experts.
CryptoLocker Deep-Dive - Tracking Security Threats on the Bitcoin Public Ledger
Explore WhiteRabbit, an open-source tool for tracking ransomware payments on Bitcoin's public ledger. Learn to leverage blockchain data for threat intelligence and cybersecurity investigations.
Patchwerk - Kernel Patching for Fun and Profit
Explore techniques for patching and securing Linux kernels on IoT devices without source code. Learn to inspect, compile, and apply patches to vendor OEM kernels for vulnerability mitigation and reverse engineering.
How the Press Gets Pwned
Explore real-world cyberattacks on journalists and learn effective tools for protecting press freedom. Gain insights on digital security measures for at-risk media professionals.
Libation Escalation - Scotch and Bubbles
Explore Scotch whisky and Champagne with an infosec professional turned sommelier. Learn origins, tasting techniques, and how to impress others while dispelling common misconceptions about these premium libations.
Patching - It's Complicated
Explore the complexities of patching in cybersecurity, addressing challenges, best practices, and innovative solutions for various devices and systems to enhance organizational security.
The First Thing We Do, Let's Kill All The CISOs
Provocative discussion on the effectiveness of CISOs in improving cybersecurity, questioning the role's impact and exploring alternative approaches to address industry challenges.
Your Defense Is Flawed - and It's Only Kinda Your Fault
Discover how attackers exploit enterprise defenses and why zero breach mentality fails. Learn to think like a hacker and understand the limitations of security products.
Everything You Wanted to Know About Creating an Insider Threat Program - But Were Afraid To Ask
Comprehensive guide to establishing an effective insider threat program, covering key steps, strategies, and considerations for organizational security.