Improve Likelihood Calculation by Mapping MITRE ATT&CK to Existing Controls
Explore an evidence-based approach to assess threat likelihood using MITRE ATT&CK and existing security controls, enhancing threat profiling and strategic security management.
M365 Adversary ROI - Microsoft Cloud Attack Insights
Insights from Adversary ROI research and M365 attack data to build effective security plans, reducing cloud attack risks and improving Microsoft 365 tenant protection.
The Elephant in the Security Room - Climate Change
Explore the overlooked impact of climate change on cybersecurity, its contribution to global issues, and strategies for building resilient security teams and companies in the face of environmental challenges.
Tales from the Breach - A Crash Course in Modern Adversaries
Explore modern cybersecurity breaches, defensive strategies, and offensive tactics through real-world case studies. Gain insights from a CISO's perspective on protecting organizations against sophisticated adversaries.
Food for Thought - Safer Models for Our Most Vital Critical Infrastructure
Explore innovative approaches to safeguarding vital infrastructure, focusing on cross-sector interdependencies and systems thinking to protect essential services and human needs from cyber disruptions.
Dressing Adversary Emulation in Business Attire - Outcomes and Successes
Explore how adversary emulation can deliver impactful business outcomes beyond technical execution, with real-world examples and insights from a MITRE Corporation expert.
How to Kick Off Privacy Engineering Within a Security Team
Learn to establish a privacy engineering program within a security team, leveraging existing practices and tools to enhance personal data protection.
Stay Ahead of Adversarial AI in OT - ICS Environments - Mitigating CWE-1039
Learn to protect OT/ICS environments from adversarial AI attacks, focusing on CWE-1039 mitigation through automated AI/ML model analysis and defense mechanisms against malicious training.
Diving into the Tenacious Threats of Cloud Data Lakes
Explore cloud data lake security with industry experts. Learn about collaborative research findings, threat modeling, and practical guidance for safeguarding your organization's data infrastructure.
Digital Life and Physical Death
Explore the security and privacy implications of our digital legacy after death. Learn about potential solutions and key considerations for managing personal data beyond physical life.
Exploiting Vulnerabilities and Flaws to Attack Supply Chain
Explore attack vectors in the supply chain ecosystem, including vulnerabilities in IDEs, SCMs, package managers, and CI/CD platforms trusted by developers.
Cybersecurity Strategic Activity, Recent Trends & Predictions
Explore recent cybersecurity trends, strategic activities, and future predictions with insights from industry expert Dino Boukouris on challenges, innovation, and growth in the field.
Disasters' First Responders - Nonprofits, the Other Critical Infrastructure
Explore the critical role of nonprofits in disaster response and learn how to address their cybersecurity vulnerabilities to ensure their continued effectiveness in times of crisis.
NIST Cybersecurity Framework v2.0 - What’s Changing
Explore key updates, community feedback process, and timeline for NIST Cybersecurity Framework 2.0. Learn about expected revisions and NIST's plans for wider adoption in the US and globally.
The Hidden Risk in Undocumented API Behavior
Explore undocumented Win32 API risks affecting AV and EDR vendors, potential attacks, and lessons learned for improved cybersecurity practices.
National Security to Nation State Target - Cybersecurity Effects on a Warfighter
Inspiring talk exploring how personal experiences shape cybersecurity professionals, emphasizing the human element in protecting data and driving innovation beyond technical aspects.
Applying Forensic Engineering in Cybersecurity Incidents
Discover how forensic engineering principles enhance incident response, support regulatory inquiries, and identify legal liability in cybersecurity incidents.
Rethinking Recruiting - Effective Hiring Practices to Close the Skills Gap
Discover innovative hiring strategies to bridge the cybersecurity skills gap, featuring insights from a viral job posting and a successful career transition from journalism to cybersecurity.
Ghosts in the Machine - Is There a Security Patch for People
Explore a three-pronged approach to address insider threats, combining technical and non-technical indicators with dark web intelligence. Learn actionable strategies from real-world incidents.
From the Cluster to the Cloud - Lateral Movements in Kubernetes
Explore Kubernetes lateral movement techniques and learn how attackers can pivot from container access to cloud resources. Discover practical tools for threat mitigation and detection in cloud-based Kubernetes environments.
Trust Unearned? Evaluating CA Trustworthiness Across 5 Billion Certificates
Explore insights from 5 billion TLS certificates to assess CA trustworthiness, revealing key factors and practical strategies for enhancing organizational security.