XZ Backdoor - Navigating the Complexities of Supply Chain Attacks Detected by Accident
Explore the intricacies of supply chain attacks through the lens of the XZ Backdoor incident, uncovering detection methods and implications for cybersecurity professionals.
OWASP Cornucopia - Introduction to Application Security Card Game
Explore OWASP Cornucopia, a card game designed to help software developers identify security requirements in web applications, with expert insights from Johan Sydseter.
Assessing Third-Party Libraries More Easily with Security Scorecards
Learn to evaluate third-party library security efficiently using Security Scorecards, enhancing your ability to assess and mitigate potential vulnerabilities in software dependencies.
Start Covering Your Bases and Stop Chasing APT Headlines
Learn effective cybersecurity strategies to protect against common threats, moving beyond headline-grabbing APTs to focus on fundamental security practices and risk mitigation.
Blood in the Water: Preparing for the Feeding Frenzy - Cybersecurity Threats to US Water Systems
Explore vulnerabilities in US water systems, recent cyber attacks, and potential consequences. Discuss strategies to strengthen defenses against accidents and adversaries in critical infrastructure.
The Fault in Our Metrics - Rethinking How We Measure Detection and Response
Rethinking cybersecurity metrics: A practical framework for developing effective detection & response measurements that incentivize progress and tell a compelling story to leadership.
Difficult Conversations: AI, Software Safety, and Security Risk
Explore critical definitions and tackle tough policy questions on AI, software safety, and security risk. Unpack obstacles to improving security and discuss evolving approaches to digital system failures.
Security Trek: The Next Generation - Teaching Resilience Beyond Data Security
Explore the evolution of cybersecurity education, shifting focus from data protection to holistic resilience and recovery strategies for the next generation of security professionals.
Nothing Went to Plan - Creating an Effective Incident Response Strategy
Discover essential steps for creating an effective incident response plan, ensuring clear decision-making processes and defined roles to minimize damage during cybersecurity crises.
Threat Modeling at Scale: More Than Shifting Left
Empower developers with scalable threat modeling techniques to enhance application security, save time and money, and make secure development more attainable.
Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation
Explore automated, risk-oriented vulnerability management strategies using SBOM, CSAF, and VEX to streamline processes and align remediation with genuine risk impacts.
Living with the Enemy - How to Protect Yourself and Energy Systems
Explore strategies for reducing risks in energy systems integrating IoT devices, focusing on clean energy infrastructure security amidst climate change and manufacturing uncertainties.
Cybersecurity and AI Risk Management Challenges for Next-Generation Public Safety Systems
Explore cybersecurity and AI risks in next-gen public safety systems. Learn how the tech community can support agencies in responsible adoption of advanced technologies for enhanced emergency response.
Reassessing 50,000 Vulnerabilities: Insights from SSVC Evaluations in Japan's Largest Telco
Practical vulnerability prioritization using SSVC: Insights from evaluating 50k+ vulnerabilities in Japan's largest telco, improving efficiency and effectiveness over CVSS-based approaches.
Defending Critical Infrastructure: Deep Enumeration and Proprietary Protocol Analysis
Explore deep enumeration and proprietary protocol analysis to enhance critical infrastructure security. Learn methodologies for dissecting protocols and understanding their potential vulnerabilities and defensive applications.
Intel-Driven Adversary Simulation for A Holistic Approach to Cybersecurity
Explore intelligence-driven adversary simulation for comprehensive cybersecurity risk management. Learn to integrate threat intelligence, best practices, and cross-functional teams to enhance organizational security posture.
Complexity Kills - Examining IT Security Challenges in Healthcare Facilities
Explore IT security complexities in healthcare facilities, examining challenges and potential solutions for safeguarding critical medical systems and patient data.
Considerations on AI Security
Explore key considerations for AI security in this TROOPERS24 conference talk, covering potential risks, vulnerabilities, and strategies for safeguarding AI systems.
The Double-Edged Sword of AI in Cybersecurity
Explore AI's dual impact on cybersecurity: enhancing defenses while posing new threats. Gain insights from expert Alexander Benoit on navigating this complex landscape in the digital age.
NIS 2 Directive Overview - Cybersecurity Regulations and Implications
Comprehensive overview of the NIS 2 Directive, exploring its impact on cybersecurity regulations and practices across Europe, presented by a national cyber security expert.
Ransomware as a Service - Are You Prepared?
Explore Ransomware as a Service and its implications for cybersecurity preparedness in this DefCamp Cluj-Napoca 2024 presentation by Alexander Benoit, CEO of Water IT Security & Defense.