The Application Security State of the Union
Explore the current and future landscape of AppSec, including threats, vulnerabilities, tools, and strategies. Gain insights to build robust security programs and prepare for emerging challenges.
Droned Out - Surveilling the Noise in the Russian War in Ukraine
Explore the evolving cybercriminal landscape since Russia's invasion of Ukraine, analyzing threat actor activities and dark web engagements to provide measurable insights on current and future trends.
The Devil's in the Data - Role of Data Governance in Cyber Risk Mitigation
Explore data governance strategies to mitigate cyber risks and minimize data exfiltration impact. Gain practical insights for aligning information management with organizational protection.
Architecting Security for Regulated Workloads in Hybrid Cloud
Explore architectural practices for integrating security and compliance into regulated workloads on hybrid cloud, focusing on zero trust principles and transparent assurance.
Tools for Privacy-Enhancing Technologies
Explore advanced privacy-enhancing technologies, including PAPR for anonymous credentials and unlinkable policy-based sanitizable signatures, presented by PhD researchers from leading universities.
Bon Appetit - Establishing an Effective Cyber Risk Appetite
Explore foundational principles and emerging practices for developing an effective cyber risk appetite, including guidance on compliance thresholds, KPIs, KRIs, and KCIs for enhanced information security.
Mapping the Ransomware Payment Ecosystem and Opportunities for Friction
Comprehensive analysis of ransomware payment ecosystem, exploring collective actions to disrupt operations. Examines information sharing, friction points, and community roles in making ransomware less profitable.
I Shot a Deceptive Arrow into the Air - A Mock Hearing
Explore legal implications of deceptive cybersecurity techniques through a mock hearing, examining the concept of digital artifacts as attractive nuisances and their potential consequences.
Unveiling The Truth - A Case Study on Zero Trust for Consumers
Explore real-world challenges and lessons in applying Zero Trust to consumer identities, balancing user experience with fraud prevention and detection of malicious actors.
Making oRAT Go Further
Comprehensive analysis of macOS malware oRAT using unconventional methods, revealing its full functionality through custom command and control server interactions.
REvil - Riches to Rags – The Rise and Takedown of a Cybercrime Empire
Explore the rise and fall of REvil, a notorious ransomware group, through years of research. Learn about cybercriminal empire building, takedown processes, and the impact of public/private partnerships in combating ransomware.
How to Design and Execute Superior Employee Privacy Practices
Learn best practices for implementing employee privacy rules, understand new regulations, and gain insights into employee privacy expectations to achieve compliance and foster trust.
Crypto FinTech Systems - Can the Ultimate Trust Machine Be Trusted?
Explore blockchain's security and trustworthiness in Crypto FinTech systems, analyzing technology and social context to inform business and cybersecurity decisions.
Reconsidering Ragnarok - The Cyber Threat Terrain After the Ukraine Invasion
Experts analyze the unexpected absence of cyber Armageddon following Ukraine's invasion, discussing observations, reasons, and future implications for global cybersecurity landscape.
Web3 - Paving a Path to Identity First
Explore how Web3's shift to decentralized systems impacts identity and access management, paving the way for enhanced online security and user experience.
When Everything Is Critical, Nothing Is - ISA and Mitigation Prioritization
Learn Infrastructure Susceptibility Analysis (ISA) to prioritize cyber vulnerabilities and focus mitigation efforts on critical weaknesses most likely to be exploited, enhancing organizational security.
Destroying Long-Lived Cloud Credentials with Workload Identity Federation
Explore Workload Identity Federation to replace long-lived cloud credentials with short-lived tokens, enhancing security against cloud breaches and improving authentication workflows for external identity providers.
Telling Fairy Tales to the Board - Turn Attack Graphs into Business Stories
Learn to transform complex security issues into compelling narratives for effective board communication. Discover techniques to convert technical attack paths into actionable stories that drive decision-making.
How to Benefit from Internal Audit
Learn techniques for effective internal audits in cybersecurity, including risk management, control assessment, and reporting cyber maturity. Explore industry standards like CIS Controls and FAIR to enhance your audit practices.
Hybrid Active Directory Attacks - Anatomy and Defenses
Explore Active Directory vulnerabilities and defense strategies for both on-premises and Azure environments. Learn to identify and mitigate common attack vectors to enhance organizational security.
Pwning the CI - GitHub Actions Edition
Explore GitHub Actions security vulnerabilities and their impact on CI/CD pipelines. Learn about common exploits and best practices to protect your supply chain from potential attacks.