
Strategies for career growth in cybersecurity: improving influence, visibility, and promotion chances through effective stakeholder management and asset tracking techniques.

Discover actionable strategies to dramatically enhance your company's security posture without significant financial investment. Learn from distilled insights and lessons from DevSecOps and modern AppSec experts.

Explore the modern 2FA landscape with data-driven analysis, comparing security strength and user experience of various authentication methods like SMS, soft tokens, push, and WebAuthn.

Practical advice for security professionals on improving technical writing skills, from starting to finishing, with tools and tips for presenting professional work.

Explore privacy challenges in ML/AI applications and learn about a framework that integrates data security with machine learning technologies to address potential nightmares.

Explore MOSE, a post-exploitation tool for leveraging configuration management servers to compromise associated agents en masse, simplifying large-scale system takeovers.

Explore offensive and defensive scenarios in Kubernetes security, and learn about k-rail, a tool for mitigating risks and managing configurations securely at scale.

Comprehensive overview of DevSecOps best practices, tools, and methodologies. Distills insights from industry leaders to help AppSec teams improve security integration, automation, and culture.

Learn to build a cost-effective mobile security workstation using affordable parts and open-source software. Discover how to create a powerful system capable of running Kali Linux or Parrot OS for ethical hacking and network testing.

Discover a framework for building a robust cybersecurity training program that empowers analysts with hands-on skills in incident response, forensics, and threat hunting.

Explore alternative approaches to Active Directory security, focusing on actionable steps for complex multi-domain environments beyond traditional defensive products.

Demonstration of chaining vulnerabilities to remotely exploit a Lenovo NAS device, showcasing command injection, XSS, and CSRF techniques for full system compromise.

Develop effective security exercises using MITRE ATT&CK framework. Learn to create, run, and score drills that turn threat intelligence into practiced action for improved incident response.

Explore how Natural Language Processing and Word2Vec can organize unstructured cybersecurity intelligence, making it actionable by mapping to frameworks like MITRE ATT&CK.

Explore the evolution of online identity security, from U2F to FIDO2, and learn how open standards are shaping the future of passwordless authentication across devices.

Comprehensive guide on implementing two-factor authentication for large-scale websites, covering design, architecture, and various methods like TOTP, push notifications, and FIDO security keys.

Practical insights on creating and improving application security programs, drawing from 20 years of experience across various sectors. Covers successful strategies and pitfalls to avoid.

Explore WCF vulnerabilities in .NET programs, focusing on privilege escalation and remote code execution. Learn to identify and exploit these bugs through a real-world case study.

Explore Lyft's open-source security intelligence platform for asset tracking, relationship mapping, and automated decision-making. Learn how it improves visibility and empowers teams to enhance security posture.

Explore Go malware's unique characteristics, metadata analysis techniques, and insights into malware authorship through examination of stripped Go binaries and their structural elements.

Innovative real-time analysis technique for detecting compromised privileged accounts using Kafka streaming, enabling scalable, per-account risk assessment and evolving individual risk profiles.