
Learn essential techniques and strategies for identifying and reporting software vulnerabilities, enhancing your skills in ethical hacking and cybersecurity.

Explore engineering-focused principles for building scalable threat detection programs, moving beyond traditional SOC models to create more effective and efficient security responses.

Explore a counterintuitive approach to strengthening security by ignoring over 90% of vulnerability alerts, enabling improved workflows and behavior in supply chain security management.

Insights on security management drawn from teenage work experience at Hollywood Video, relating retail theft prevention to modern cybersecurity practices and principles.

Explore the White House's approach to space systems cybersecurity and national strategy, led by the Office of the National Cyber Director, aligning with Biden-Harris Administration's initiatives.

Explore a graph-based approach for efficient vulnerability management in microservices, focusing on identifying and fixing inherited vulnerabilities across large-scale architectures.

Demonstración en vivo de ciberataques a dispositivos IoT, con hallazgos de investigación de seguridad y técnicas de mitigación de amenazas para proteger contra actores maliciosos.

Explore strategies for secure account recovery with 2FA, balancing user convenience and protection against account takeovers while minimizing support overhead.

Explore the limitations of narrow bug bounty scopes and learn why expanding them can enhance security, as hackers and cybercriminals don't adhere to predefined boundaries.

Explore vulnerabilities in support systems and live chat services by exploiting placeholders to extract sensitive user data, as demonstrated by Rojan Rijal's research findings.

Explore machine learning techniques for identifying sensitive documents on SharePoint, addressing insider threats and data exfiltration risks while discussing unique challenges in security-focused ML model development.

Explore effective threat modeling techniques for new features and devices, focusing on team education, security communication, and creating understandable models for diverse audiences.

Explore the risks and challenges of empowering business users with Low-Code/No-Code platforms, examining potential security implications and enterprise-wide impacts.

Explore the growing trend of cybersecurity professionals leaving the field, understand the underlying causes, and discover potential solutions to address this critical industry challenge.

Explore FAIR STRIDE, a method for creating application threat models to determine ROI on security controls and prioritize risk reduction efforts for scalable product security.

Discover Overwatch: a serverless security orchestration solution in Go, simplifying CI management and infrastructure maintenance for lean security teams shifting left.

Deep-dive analysis of MS-DOS malware, exploring infection techniques, stealth mechanisms, and persistence methods. Highlights technical complexity and graphical displays in 16-bit DOS malware through reverse-engineering.

Explore vulnerabilities in AI systems and learn about various attacks on machine learning algorithms, their potential impacts, and the importance of AI security awareness.

Strategies for maximizing learning in Capture the Flag competitions, including tips for beginners and insights from an organizer's perspective on tackling new topics effectively.

Explore how to transform security compliance frameworks into code, streamlining processes and reducing burden on engineering teams while maintaining industry standards and customer trust.

Explore the challenges of code signing for open source developers, addressing outdated mechanisms and high costs while examining the complexities and frustrations involved in the process.