Extracting Forensic Artifacts from Seemingly Idle iOS Devices - Dormant Devices, Chatty Logs
Uncover hidden forensic artifacts from idle iOS devices using system logs, revealing crucial data for investigations beyond traditional imaging methods.
The SaaS-y Side of Incident Response - Key Log Sources for Okta, GitHub, and Salesforce
Explore key log sources for Okta, GitHub, and Salesforce in cloud-based incident response. Learn to interpret SaaS logs, avoid common pitfalls, and improve detection strategies for effective security management.
Ghost in Your Supply Chain - APT Attacks on Taiwan's Financial Sector
Explore APT attacks on Taiwan's financial sector, focusing on supply chain vulnerabilities. Learn about MDM platform exploitation, JIRA abuse, and malware-free attacks. Gain insights into island-hopping techniques and comprehensive threat mapping.
Using Threat Modeling to Create a DevSecOps Plan
Discover how to leverage threat modeling for effective DevSecOps planning. Learn to identify threats, select appropriate security tools, and seamlessly integrate them into your development pipeline.
TP-Link XZ000-G3 GPON ONT Teardown and UART Console Access
Explore TP-Link XZ000-G3 GPON ONT through teardown, UART console access, and firmware analysis. Gain insights into hardware components and hidden features.
Securing Cloud Services with TLS X.509 Client Certificates
Learn to secure cloud services using X.509 client certificates, from generating and deploying certificates to automating processes with OpenXPKI. Includes practical examples for MQTT and home automation.
Server Certificates - Self-Signed and Let's Encrypt Certificates for the LAN
Explore server certificate options for LAN, including self-signed and Let's Encrypt. Learn to create, export, and distribute certificates using XCA tool and implement wildcard certificates.
Setting Up OpenVPN on a Router for Home Network Tunneling
Learn to set up a network-wide VPN using OpenVPN and OpenWrt. Explore advantages over WireGuard, installation steps, and configuration tips for secure home networking.
DevSecOps: Connecting Developers, Security, and Operations
Explore DevSecOps methodology, connecting developers, security, and operations. Learn about tooling, cloud security automation, and the importance of continuous learning in fostering a collaborative DevSecOps culture.
Secrets Scanning Techniques and Tools
Explore secret scanning techniques using GitLeaks, truffleHog, and orchestration with AWS Lambda, AWS Code Build, or Secure Codebox. Learn through fun comic-style explanations.
Netbird - Open Source Self-Hosted Wireguard VPN System Setup and Configuration
Learn to set up Netbird, an open-source Wireguard VPN system, with server GUI and easy client setup. Covers installation, configuration, and user management for secure, self-hosted networking.
Achieving Understandability and Privacy With Provenance-Based Explanations
Explore provenance-based explanations for query results, addressing challenges of complexity and privacy. Learn techniques for generating natural language explanations and ensuring query confidentiality.
Identity and Security Meetup - November 2023
Explore OAuth 2.0 security in frontends and gain insights from identity experts. Level up your skills with presentations on web security and identity management from industry professionals.
2022 ICS/OT Cybersecurity Year in Review - Lessons Learned from the Frontlines
Incident responders discuss industrial cybersecurity trends, mitigation strategies, and regulatory impacts, offering insights to protect ICS/OT environments based on real-world experiences.
Scarlet OT - Adversary Emulation for Operational Technology
Herramienta de emulación de adversarios OT de código abierto que combina ataques IT y OT, reproduce acciones de malware ICS y soporta múltiples protocolos para pruebas de seguridad industrial eficientes.
Securing Your Building's Most Critical Assets: Cybersecurity for Building Automation Systems
Explore BAS cybersecurity threats, their business impact, and strategies to protect critical assets. Learn from case studies and discover solutions for safeguarding building automation systems.
Exploiting NFC Vulnerabilities in Indian Metro Systems
Exploiting vulnerabilities in Indian metro systems' NFC technology for free travel. Insights into hacking MiFare cards, challenges faced, and potential solutions.
Reproducible Builds with BuildKit for Software Supply Chain Security
Learn how BuildKit enables reproducible builds to enhance software supply chain security, ensuring verifiable and trustworthy Docker images through bit-for-bit identical reproduction from source code.
The Future of Security with AI
Explore Microsoft's approach to AI in security, including Security Copilot and new capabilities for securing and governing AI, with insights from industry experts.
Choosing a Target for Bug Bounty Hunting
Learn effective strategies for selecting optimal bug bounty targets with expert Katie Paxton-Fear, enhancing your chances of success in vulnerability hunting.
Guide to Authentication and Authorization for Cloud Native Applications with Keycloak
Explore Keycloak for robust authentication and authorization in cloud-native apps. Learn about single sign-on, passwordless auth, social login, and secure API profiles for enhanced security and user experience.