Separating Fact from Fiction: The Realities of Working in Government
Candid discussion on working in government: dispelling myths, sharing experiences, and highlighting rewards of public service. Insights from experts in various agencies.
Building Secure Hybrid Mobile Applications - A Security Professional's Guide
Learn to assess and secure hybrid mobile apps by understanding threat models and vetting external libraries, enhancing your ability to build robust applications.
Google Workspace Forensics - Insights from Real-World Hunts and Incident Response
Insights on threat hunting and incident response in Google Workspace, focusing on data exfiltration from Google Drive. Learn forensic investigation techniques for GWS logs from real-world cases.
Penetration Testing Experience and How to Get It
Discover strategies for gaining and showcasing penetration testing experience to launch your career in this field, presented by Phillip Wylie, coauthor of The Pentester Blueprint.
Towards Effective and Scalable Vulnerability Management
Explore challenges and solutions in modern vulnerability management, focusing on automation, exploitability-based prioritization, and frameworks like CSAF and VEX to improve organizational security posture.
Emulation, PowerPC, and Personal Transition in Reverse Engineering - Breaking Ground
Explore baremetal emulation for PowerPC, its applications in reverse engineering, and the personal journey of creating a new framework while embracing self-discovery and transformation.
Cognitive Security and Social Engineering: A Systems-Based Approach
Explore cognitive security's unique approach to protecting systems, considering interconnectedness and multiple scales. Learn about the Cognitive Security Attack Cycle and strategies for disrupting attacks.
Saving Lives in Healthcare: Trust, Teamwork, and Tangible Outcomes - A Decade of Change
Explore a decade of progress in healthcare cybersecurity, focusing on medical devices and tangible outcomes. Gain insights from experts on trust, teamwork, and strategies for positive change in the field.
Could Passwordless Authentication Be Worse Than Passwords?
Explore vulnerabilities in passwordless authentication, revealing how faulty implementations can lead to greater security breaches than traditional passwords. Learn best practices for developers, pentesters, and users.
The Telenovela of Latin American Banking Trojans - A Dramatic Story About Cybercrime
Uncover the dramatic rise of Latin American banking malware, exploring their anatomy, tactics, and global impact. Learn why these cybercrime threats are so persistent and difficult to eradicate.
Next Generation Enterprise Security - Lessons from Star Trek
Explore enterprise security through Star Trek: The Next Generation episodes, analyzing threats, defenders, and potential mitigations in a fun, engaging way.
Security Risks of Low-Code/No-Code Applications - What Could Go Wrong?
Explores security risks of low-code/no-code platforms used by business professionals. Presents research findings, demonstrates common security issues, and introduces OWASP framework for mitigating risks in business-led development.
Social Engineering: Training the Human Firewall Against Phishing Attacks
Explore research on psychological factors behind phishing susceptibility and learn strategies to improve security education and measure risk in your organization.
Passwords: Policies, Securing, Cracking, and More
Explore password security essentials, from creating strong policies to understanding cracking techniques. Learn to secure passwords in AD and AAD, and discover why they remain crucial despite MFA adoption.
Hungry, Hungry Hackers - A Hacker's Eye-view of the Food Supply
Explore vulnerabilities in food supply equipment beyond tractors, uncovering risks to our food ecosystem. Learn about hacker research and how to get involved in securing the agricultural technology landscape.
How to Handle Getting Dumped: Compromised Passwords
Learn strategies for managing password breaches, including identifying sources, responding effectively, and maximizing value while avoiding pitfalls in the aftermath of a company account compromise.
Perfect Vulnerability Reports and Still Getting Hacked - Limitations of Security Tools
Explore limitations of vulnerability detection tools, challenges in vulnerability management, and strategies for improving application security despite imperfect reporting systems.
IoT and OT Firmware Security Analysis with EMBA - From Firmware to Exploit
Automated firmware analysis for IoT and OT devices using EMBA, an open-source tool that detects vulnerabilities, identifies exploits, and supports penetration testing of embedded systems.
Authentik - Open Source Self-Hosted Authentication System with OIDC and SAML
Explore Authentik, an open-source authentication system. Learn installation, configuration, reverse proxy setup, forward authentication, and OIDC implementation for enhanced security.
Three Things That Each Developer Should Know to Help Secure Code Base
Discover key strategies to enhance code security: SBOM for transparency, Reproducible Builds for verification, and SigStore for signing. Learn practical tools and real-world examples to protect against cybercrime.
Breaking Ground: A Decade of Change in Cybersecurity
Explore a decade of transformative change in cybersecurity with Josh Corman, reflecting on progress, challenges, and future directions in the field.