EXPOSURE - The 4th Annual RSAC SOC Report
Dive into the humorous and eye-opening findings from monitoring the RSAC wireless network, revealing surprising user behaviors and evolving trends in cybersecurity awareness.
Turning the Backpage - Combating Human Trafficking with Threat Intelligence
Explore how threat intelligence can combat human trafficking by monitoring classified ads for indicators, generating leads, and assisting investigations to help survivors.
Corporate Reputation Attacks - Dissecting the Latest Job Offer Scams
Uncover the tactics behind job offer scams targeting corporate reputations. Learn to identify, respond to, and prevent these fraudulent attacks through real-world case studies and expert insights.
Conducting a Pre-Mortem on the Next Zero Trust Breach
Explore future Zero Trust breaches through a pre-mortem analysis, examining potential vulnerabilities and attack vectors in 2028's cybersecurity landscape to enhance current defensive strategies.
The Fearless Cybersecurity Leader and Future CISO
Explore 7 essential skills for aspiring CISOs, including leadership traits and real-life examples. Gain insights into the CISO role and develop crucial competencies for cybersecurity leadership.
Adversary Emulation - How I Stopped Being Polite and Got Real Results
Explore how real adversaries differ from testers in cybersecurity, using data from actual intrusions to improve threat detection and adversary emulation techniques.
Abuse of Repository Webhooks to Access Hundreds of Internal CI Systems
Explore a novel attack vector abusing repository webhooks to access internal CI systems, revealing vulnerabilities in common CI/CD architectures and their potential impact on organizations.
Verifiable Credentials and the Future of Enterprise Security
Explore how verifiable credentials revolutionize enterprise security by tying data to owners, enabling privacy-preserving sharing, and eliminating single points of failure in digital authentication.
Perspectives on the Developing Cyber Workforce Strategy
Explore key pillars and objectives of the National Cyber Workforce and Education Strategy, addressing federal workforce, education, training, and digital awareness initiatives.
Why Having a Security Reference Architecture Matters
Explore the importance of security reference architecture in adhering to frameworks, achieving Zero Trust and SASE, and enhancing Security Operations for effective threat management.
Managing the Mobile Endpoint Attack Surface
Explore risk management for enterprise mobility, focusing on mobile threats and mitigation strategies. Learn from NCCoE's analysis of common mobile device security threats.
Do Attackers Use Algorithms to Evade ML - An In-the-Wild Phishing Case Study
Explore phishing evasion tactics and trends, including 11 current techniques and potential use of automated adversarial attacks. Gain insights from a 5-year study on ML phish evasion competitions and real-world evasive phishing sites.
The Art of Metawar - Hacking & Weaponizing the Metaverse to Redefine Reality
Explore the metaverse as the 6th domain of warfare, examining how tech giants can manipulate reality, control thoughts, and influence behavior. Uncover mind-boggling privacy and security threats in immersive simulations.
Credential Sharing as a Service - The Dark Side of No Code
Explore attack techniques exploiting low-code apps in enterprises, revealing vulnerabilities throughout the cyber kill chain and highlighting the security risks of non-IT app development.
FAA - More Than Just a Regulator
Explore how the FAA balances regulation with collaboration to maintain aviation cybersecurity, addressing growing digital vulnerabilities in the world's safest aerospace system.
A Journey in Building an Open Source Security-as-Code Framework
Explore the development of an open-source security-as-code framework, its benefits, and real-world applications in securing complex infrastructures at scale.
Connecting the Dots - An Effective Cybersecurity Strategy
Explore a novel cybersecurity approach combining threat modeling, architecture, and product management to implement secure systems efficiently and adapt to evolving threats.
From Public-Private Partnerships to Operational Collaboration
Explore the evolution of public-private cybersecurity partnerships into operational collaboration, featuring insights from key U.S. government agencies on lessons learned, successes, and future scaling plans.
Regulation and Risk When Your Customer's Browser Leaks Data
Explore data protection challenges in browsers, regulatory expectations, and strategies to manage risks associated with customer data leaks in web and mobile environments.
The Digital Trust Gap - How Cyber Pros Break Silos to Advance Digital Trust
Explore how cybersecurity professionals can collaborate across IT functions to strengthen digital trust, leveraging privacy, quality, risk management, and governance for enhanced enterprise and consumer confidence.
The Rise of Malware Within the Software Supply Chain
Explore malicious injections in open source software, their impact on the supply chain, and strategies to protect, detect, and respond to these evolving threats.