Building a Security Audit Logging System on a Shoestring Budget
Learn to build a robust, security-focused audit logging system for fast-growing companies with limited resources. Discover cost-effective strategies and lessons from combining software engineering and hacker culture.
Free Your Mind - Battling Our Biases
Explore how expertise and fresh perspectives can impact problem-solving in cybersecurity. Gain tools for improving critical thinking and challenging biases, regardless of experience level.
Demystifying SBOMs: Strengthening Cybersecurity Defenses
Explore Software Bill of Materials (SBOMs) as a crucial tool for enhancing cybersecurity, identifying vulnerabilities, and managing software supply chain risks in organizations.
Next-Gen Detection: Harnessing LLMs for Sigma Rule Automation
Explore innovative approaches to automate Sigma rule generation using LLMs, comparing techniques like RAG, fine-tuning, and prompt-chaining for enhanced threat detection efficiency.
Crafting and Executing Successful Vishing Attacks
Explore practical OSINT techniques for vishing attacks, from target identification to pretext crafting and call execution with spoofed numbers, highlighting the growing threat of malicious phone calls.
Finetuning Large Language Models for Security Log Detections
Explore finetuning LLMs for advanced security log detection, moving beyond traditional signature-based methods to enhance threat identification capabilities.
Access - Discord's Open-Source Portal for Secure Access Management
Explore Discord's open-source Access portal for secure, transparent access management, featuring time-bounded permissions, self-serve requests, and customizable constraints.
Your Voice Confirms My Identity - Exploring Voice Authentication Security in the Age of AI
Explore AI voice cloning and its impact on voice authentication systems. Learn voice cloning techniques and discuss trends in voice security.
Effective Security on a Tight Budget
Discover strategies for maintaining robust security with limited resources, focusing on principles and practices to overcome budget constraints in challenging economic times.
PirOps - What 18th-Century Piracy Can Teach Us About SecOps
Explore historical pirate strategies and their surprising relevance to modern SecOps, drawing insights from 18th-century Caribbean piracy for today's security practices.
Skynet the CTI Intern: Building Effective Machine Augmented Intelligence
Explore integrating LLMs in cybersecurity intelligence, enhancing analyst efficiency while recognizing AI limitations. Learn to create a symbiotic human-AI relationship for proactive defense.
Phish and Furious - Campaign Builder Vulnerabilities in a Blink and Breach World
Explore campaign builder vulnerabilities and phishing attack strategies with real-world case analyses. Learn dynamic cybersecurity defense techniques for evolving digital threats.
Protecting Data vs Systems: Practicality, Performance, and Problems
Explore data protection strategies, encryption options, and trade-offs. Learn about record-level security and performance considerations for safeguarding information beyond system-level defenses.
Traceability in Cybersecurity - Lessons Learned from the Medical Sector
Explore traceability in cybersecurity through insights from the medical sector, enhancing security practices and incident response strategies.
Rollout Hardcoded Secrets Detection with Minimum Effort and Maximum Impact
Learn effective strategies for detecting hardcoded secrets in your codebase, minimizing effort while maximizing impact on security and compliance.
Designing Security and Privacy - A Developer's Guide to Threat Modeling with OWASP SAMM
Learn threat modeling techniques using OWASP SAMM to enhance security and privacy in software development, empowering developers to identify and mitigate potential risks effectively.
Transitive Vulnerabilities Exploit in Real-life
Explore real-world transitive vulnerability exploits with security experts, gaining insights into complex attack chains and practical defense strategies for robust system protection.
Managing Vulnerability Overload with OWASP Tools and Strategies
Discover OWASP's strategies for managing overwhelming security vulnerabilities, enhancing your ability to prioritize and address critical threats effectively.
Building an Effective Application Penetration Testing Team
Discover strategies for assembling and leading a high-performing application security testing team, enhancing your organization's defense against cyber threats.
Dawn of the Dead: The Tale of the Resurrected Domains
Explore the intriguing world of resurrected domains and their potential security implications in this insightful talk by Pedro Fortuna.
Growing A Security Champion Program Into A Security Powerhouse
Learn strategies to transform a security champion program into a robust security powerhouse, enhancing organizational cybersecurity and fostering a culture of security awareness.