Insiders are the New Malware
Explore insider threats, data breaches, and effective strategies for protecting sensitive information through access control, data ownership, and risk assessment.
Optimize Kubernetes on vSphere with Event-Driven Automation
Explore event-driven automation for optimizing Kubernetes on vSphere, using VMware Event Broker Appliance to enhance availability, auditing, and compliance. Learn popular use cases and best practices from the K8s VMware User Group.
I Went Phishing and Caught a Charge - Maryland Law for Pentesters
Explore legal implications of penetration testing in Maryland, focusing on phishing and cybersecurity laws. Learn crucial insights for ethical hacking and compliance.
The Decision Makers Guide to Managing Risk
Explore decision-making, risk management, and overcoming imposter syndrome. Learn practical tips and principles for justifying decisions and proactively reducing risks in various scenarios.
Cybersecurity for Real Life - Using the NIST Framework to Protect Your Critical Infrastructure
Explore NIST Framework for real-world cybersecurity, focusing on critical infrastructure protection, compliance, and practical implementation strategies.
Software Supply Chains and the Illusion of Control
Explore software supply chain vulnerabilities and misconceptions, uncovering hidden risks and strategies for enhanced security in modern development practices.
Red Team Yourself - Thomas Richards
Learn to assess your organization's security through red teaming techniques. Discover threat actors, asset protection, and engagement strategies for comprehensive security program improvement.
Realizing Software Security Maturity - The Growing Pains and Gains
Explore software security maturity stages, from low to high, and learn strategies for building effective application security programs with practical insights and metrics.
Malicious Cryptomining is Exploding - Are You at Risk
Explore the rising threat of malicious cryptomining, its risks, and how to protect yourself in this informative cybersecurity talk by John Fatten at GrrCON 2019.
Understanding How Public Places Introduce Additional Risks to Business - Len Noe
Explore public space cybersecurity risks for businesses, covering captive portals, QR codes, and physical attacks. Learn defensive strategies and awareness techniques.
Escalating Insider Threats Using VMware's API
Discover how VMware's API can be exploited to escalate insider threats, bypassing security measures that separate infrastructure and guest machine domains in enterprise environments.
Quantifying Risk in Consumer Software at Scale - Consumer Reports' Digital Standard
Explore methodologies for quantifying software security risks, predicting vulnerabilities, and evaluating consumer products using the Digital Standard developed by Consumer Reports and CITL.
Abuse of CPE Devices and Recommended Fixes
Exploring vulnerabilities in consumer network devices, quantifying risks, and proposing solutions for improved security in home and small office networks.
From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices
Translating threat intelligence into actionable defensive strategies using community-driven approach. Explores evolution of threat modeling and its integration with risk management frameworks.
Sexy Defense - Maximizing the Home-field Advantage
Proactive defense strategies: intelligence gathering, modeling, and expanding defender roles. Maximize existing resources for effective security posture against penetration testers and red teams.
The M2M Risk Assessment Guide - A Cyber Fast Track Project
Comprehensive guide for assessing and mitigating security risks in Machine-to-Machine (M2M) technologies across industries, focusing on vulnerabilities and design strategies.
The Myth of Twelve More Bytes - Security on Post-Scarcity Internet
Exploring security implications of IPv6, DNSSEC, and new top-level domains on enterprise IT, fraud prevention, and network defense in the evolving Internet landscape.
Tomorrow’s News is Today’s Intel - Journalists as Targets and Compromise Vectors
Explore how journalists become targets for cyber attacks and compromise vectors, examining the intersection of cybersecurity, journalism, and intelligence gathering.
Combating the Insider Threat at the FBI - Real World Lessons Learned
Insider threat detection at FBI: multidisciplinary approach combining psychology, technology, and analytics. Lessons from real-world program implementation, focusing on deterrence, behavioral analysis, and predictive techniques.
National Security, Industrial and Corporate Information Security, and Information Security Providers
Explore national security, industrial and corporate information security, and the role of security providers in this comprehensive discussion by industry experts.
Rapid Threat Modeling
Learn rapid threat modeling techniques to identify and mitigate security risks in software systems. Enhance your ability to protect against potential vulnerabilities and attacks.