
Explore graph-based solutions for consolidating security intelligence and improving decision-making in complex infrastructures, using tools like Neo4j to enhance visibility and risk assessment.

Insights from operating S3 honeypots: Discover who's hunting for exposed buckets, their methods, and how to protect your AWS assets through monitoring and defensive strategies.

Explore Windows kernel debugging essentials, including symbol servers, BSOD analysis, and live debugging. Learn practical approaches to diagnose CPU issues, deadlocks, and blue screens for improved software security.

Explore open-source malware classification using machine learning, featuring a diverse Windows PE file dataset, pre-trained models, and reproducible code for enhanced static malware detection research.

Empirical analysis of HTTP-based botnet C&C panels, exploring design, technologies, and characteristics of crimeware control systems used by cybercriminals for managing botnets and other malicious operations.

Explore techniques for forensic investigation in container environments, focusing on evidence retention and artifact gathering to understand adversarial activities.

Discover TruffleHog: a tool for identifying secrets in source code, its applications in DevOps, and new approaches to detecting secrets in package managers like npm and pypi.

Explore Netrepser, a unique JavaScript-based espionage tool using freeware utilities for targeted attacks. Learn its techniques, impact, and how it blends into environments for data exfiltration.

Análisis detallado del ataque de cadena de suministro a CCleaner, explorando su sofisticación, objetivos y conexiones con el grupo APT17/Axiom, destacando la persistente amenaza de ataques estatales avanzados.

Insights on building a security program, emphasizing emotional intelligence, cross-team collaboration, and shared responsibility to achieve compliance and meet customer demands.

Explore MacOS supply chain vulnerabilities and learn proactive defense strategies using open-source tools for threat detection and malware identification in network environments.

Learn to build a predictive pipeline using Python and machine learning to detect phishing domains in real-time, leveraging Certificate Transparency logs and supervised learning techniques.

Learn to build an effective intrusion detection program using affordable tools. Covers cloud apps, endpoints, network security monitoring, and crowdsourced incident response to catch breaches quickly.

Strategies for creating effective, actionable security alerts: improving signal-to-noise ratio, standardizing definitions, and implementing self-service tools to enhance team efficiency and incident response.

Explore the flaws in cyber insurance and its impact on security incentives, with insights on better alternatives for improving cybersecurity practices.

Practical tools and methodologies to transform software security posture by eliminating false distinctions between security bugs and other defects, improving product quality and aligning teams.

Explore GCP Metadata API security: risks, attacks, defenses, and best practices. Learn about service accounts, Kubernetes, and Cloud Build implications for your organization's cloud infrastructure.

Explore Chrome extension risks, malicious examples, and Lyft's strategic approach to mitigate threats at scale. Learn effective strategies for enhancing browser security.

Explore VoIP vulnerabilities and hacking techniques, from historical phone phreaking to modern threats like toll fraud and vishing, with insights on protecting communication systems.

Explore effective software obfuscation techniques, their limitations, and a novel approach to enhance code protection against reverse engineering and analysis.

Explore creating a remote access trojan using TCP services like Whois and Finger, discussing implementation, detection, and mitigation strategies for this Live Off the Land technique.