Assessing Third-Party Libraries More Easily with Security Scorecards
Learn to evaluate third-party library security efficiently using Security Scorecards, enhancing your ability to assess and mitigate potential vulnerabilities in software dependencies.
OWASP DefectDojo - Introduction and Overview
Learn about DefectDojo, an open-source application vulnerability management tool. Discover its features for streamlining security testing workflows and enhancing vulnerability tracking and remediation processes.
Automating Security Test Cases Based on ASVS
Learn to automate security test cases using ASVS, enhancing your application's vulnerability assessment and overall security posture.
Start Covering Your Bases and Stop Chasing APT Headlines
Learn effective cybersecurity strategies to protect against common threats, moving beyond headline-grabbing APTs to focus on fundamental security practices and risk mitigation.
Navigating the Landscape of Client-Side Request Hijacking on the Web
Explore client-side request hijacking vulnerabilities, their impact on web security, and effective mitigation strategies to protect against these emerging threats.
Leveraging Psychological Needs for Building a Security Culture Among Developers
Explore strategies to foster a security-focused culture among developers by addressing psychological needs, enhancing motivation, and promoting sustainable behavioral change.
DOM Jungle - Can We Trust the UI?
Explore UI vulnerabilities and DOM-based attacks in web applications, learning techniques to identify and mitigate security risks in the browser environment.
API Security By Design
Explore API security best practices and design principles to build robust, secure systems with expert insights from Jose Haro Peralta.
Bypassing Entra ID Conditional Access - A Deep Dive Into Device Authentication Mechanisms
Explore device authentication in Entra ID, uncovering vulnerabilities in Conditional Access. Learn about attack methods, defense strategies, and gain insights into Microsoft's cloud security infrastructure.
Back to the Roots - Finding the Origin of CSP Security Bugs
Explore the root causes of Content Security Policy bugs in web browsers, their lifecycle, and insights for both attackers and defenders using automated analysis tools.
How to Setup Fingerprint Authentication in JavaScript
Learn to implement fingerprint and biometric authentication in JavaScript using WebAuthn APIs. Covers client and server-side setup for secure, third-party-free user registration and login.
CrowdStrike Outage - Lessons for Web Development Resilience
Explore the CrowdStrike incident's global impact, understand its causes, and learn key strategies to enhance your company's resilience against similar large-scale tech disruptions.
How Hacking Works - Web Edition
Explore web exploitation techniques and tools to enhance software security. Learn through gamified environments to build skills for safer development practices.
How Games Secretly Shape Our World
Explore how games shape society, from military strategy to AI and human behavior. Uncover their impact on learning, decision-making, and predicting the future across various fields.
Detecting Credential Abuse - Core Concepts and Challenges
Explore detection strategies for credential abuse, including core concepts, patterns, and challenges. Learn to identify suspicious activity and protect systems from unauthorized access.
What Do We Learn When We Scan the Internet Every Hour?
Explore Internet ephemerality through hourly scans, revealing insights on service stability across ports, protocols, and ASNs. Implications for research and future scanning methodologies discussed.
LO Level Shells - Weaponizing Ethernet for Evasion and Extended Communication
Weaponizing Ethernet frames for stealthy communication, bypassing common detections and extending layer 2 range limitations. Explore innovative data encoding techniques on the Data Link Layer.
Blood in the Water: Preparing for the Feeding Frenzy - Cybersecurity Threats to US Water Systems
Explore vulnerabilities in US water systems, recent cyber attacks, and potential consequences. Discuss strategies to strengthen defenses against accidents and adversaries in critical infrastructure.
Building Your Own WHOIS Dataset for Reconnaissance
Learn to build a comprehensive WHOIS dataset for enhanced reconnaissance, exploring data collection methods, WHOIS/RDAP intricacies, and open-source tools for effective cybersecurity and OSINT operations.
Detection Engineering Demystified - Building Custom Detections for GitHub Enterprise
Learn to build custom detections for GitHub Enterprise, focusing on identifying attacker behavior and protecting intellectual property through practical Detection Engineering techniques.
Introducing Serberus - A Multi-Headed Serial Hardware Hacking Tool
Explore Serberus: a versatile, multi-port hardware hacking tool with 4 channels for simultaneous UART, JTAG, SPI, I2C, and SWD interfaces. Features level shifting and open-source design for easy target connectivity.