Stop That Release, There's a Vulnerability!
Explore BlackBerry's software defect tracking system and risk-based release evaluation process for effective security gating in product development.
Vibe Check - Why Students May Shy Away From Cyber in a Surveillance State
Explores impact of surveillance and strict laws on cyber talent in Asia Pacific, discussing challenges for ethical hacking and threat research in a censorship-heavy environment.
Understanding and Exploiting Implanted Medical Devices
Explore vulnerabilities in implanted medical devices, including pacemakers and neurostimulators. Learn about remote exploitation risks, therapy disruption, and patient safety concerns in this technical presentation.
From Hackathon to Hacked - Web3's Security Journey
Explore Web3 and blockchain security challenges, examining the risks of emerging tech, high-stakes environments, and immutable transactions. Learn about current vulnerabilities and potential solutions.
Your Software IS - NOT Vulnerable - CSAF, VEX, and the Future of Advisories
Explore the future of software security advisories, focusing on CSAF and VEX, and learn how to manage the increasing volume of vulnerability information effectively.
Breaking Access Controls With BLEKey
Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.
AndroBugs Framework - An Android Application Security Vulnerability Scanner
Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.
Stranger Danger - What Is The Risk From 3rd Party Libraries
Explore the risks of third-party libraries in software, analyzing vulnerability metrics and exposure times. Learn strategies to mitigate risks and improve security practices in your organization.
Getting the Most Out of Your Covert Physical Security Assessment - A Client's Guide
Learn effective strategies for covert physical security assessments, including methodology, risk assessment, and practical techniques like drone hacking and badge cloning.
Hacking Humans - Addressing Vulnerabilities in the Advancing Medical Device Landscape
Explore vulnerabilities in medical devices and their impact on human health, discussing potential risks and security measures in the evolving healthcare technology landscape.
The Emerging Product Security Leader Discipline
Explore product security leadership, covering defense strategies, DevOps integration, threat modeling, and real-world examples. Learn to leverage risks, implement security practices, and adapt to emerging technologies.
Submersion Therapy - No One Cares About Your Data Breach Except You and Why Should They
Explore data breach impacts, risk management, and lessons from Sony's experience. Learn to prepare for security incidents and engage in effective risk conversations.
The Hitch Hikers Guide to Information Security
Explore key information security concepts through a humorous lens, drawing parallels to "The Hitchhiker's Guide to the Galaxy" for a unique and engaging learning experience.
Who's Breaking into Your Garden - iOS and OS X Malware You May or May Not Know
Explore iOS and OS X malware threats, understanding potential vulnerabilities and attack vectors to enhance your device and network security.
Usernames, The Missing Piece - The OSINT Jigsaw Puzzle
Explore the risks of shared usernames across services and their significance in OSINT investigations, challenging assumptions about username disclosure and recycling.
Vendors, and Risk, and Tigers, and Bears, Oh My - How to Create a Vendor Review Process From the Ground Up
Learn to create a vendor review management process from scratch using simple tools like email and Google Forms, without expensive software or large teams.
Reliable Data Processing with Minimal Toil
Explore strategies for safer, automated batch job processing across millions of users, featuring insights from Google and Slack on canarying, rollouts, and validations.
One Year After a Major Attack at DefCamp 2018
Análisis retrospectivo de un ataque cibernético significativo ocurrido en DefCamp 2018, examinando sus consecuencias y lecciones aprendidas un año después.
Security Pitfalls in Scriptable Infrastructure Pipelines
Explore security vulnerabilities in infrastructure pipelines, focusing on script-based systems. Learn to identify and mitigate risks in automated deployment processes.
Riskware Betrayer - Who Is the Biggest One?
Explore the concept of riskware betrayers in cybersecurity, analyzing potential threats and identifying key players in this critical area of information security.
Misleading Implementations That Compromise the Privacy and Information Security
Análisis de implementaciones engañosas que comprometen la privacidad y seguridad de la información, explorando vulnerabilidades y mejores prácticas en ciberseguridad.