Thwarting Malware Analysis - Integrating Established and Novel Techniques
Explore advanced techniques for protecting custom payloads from analysis, including established methods and three novel anti-copy approaches used in real-world red team engagements.
Fighting Digital Threats in the Age of AI
Explore strategies to combat evolving digital threats in the AI era, focusing on cybersecurity challenges and innovative defense mechanisms for the modern technological landscape.
Discovering Hidden Vulnerability Intelligence in CISA's KEV Catalog
Uncover hidden insights in CISA's KEV catalog for effective vulnerability prioritization. Explore exploit intelligence to enhance cybersecurity strategies across industries.
Threat Modeling at Scale: More Than Shifting Left
Empower developers with scalable threat modeling techniques to enhance application security, save time and money, and make secure development more attainable.
Introduction to Software Defined Radio for Offensive and Defensive Operations
Overview of Software Defined Radio for security professionals, covering basics to advanced tactics for adversary emulation. Learn quick SDR operations and explore offensive and defensive applications.
Rolling out the C2 - Modern Red Team Infrastructure in 2024
Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.
Building Data-Driven Access with Existing Tools - BSidesLV Talk
Explore data-driven access management strategies for growing companies, focusing on automating onboarding, offboarding, and role-based permissions using existing tools and employee data.
Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation
Explore automated, risk-oriented vulnerability management strategies using SBOM, CSAF, and VEX to streamline processes and align remediation with genuine risk impacts.
Wars and Rumors of Wars - Implications for Domestic Critical Infrastructure
Explore the implications of Volt Typhoon's cyber attacks on critical infrastructure and discuss appropriate responses for organizations and individuals facing such threats.
Preparing for the API Apocalypse - Exposing Shadow and Zombie APIs
Uncover hidden vulnerabilities in Shadow and Zombie APIs. Learn techniques to identify, understand, and mitigate risks using popular frameworks and open-source tools for enhanced API security.
Living with the Enemy - How to Protect Yourself and Energy Systems
Explore strategies for reducing risks in energy systems integrating IoT devices, focusing on clean energy infrastructure security amidst climate change and manufacturing uncertainties.
All Your Badge Are Belong to Us - Vulnerabilities in RFID Access Control Systems
Explore RFID access control vulnerabilities, their real-world exploitation, and implications. Gain insights into why insecure systems persist and learn key considerations for selecting secure solutions.
How a Simple Misconfiguration Can Break TPM Full Disk Encryption
Explore TPM-based disk encryption vulnerabilities, learn to identify and exploit misconfigurations in Linux systems, and discover proper boot sequence validation techniques.
Using a Cloud Telescope to Observe Internet-Wide Botnet Propagation Activity
Explore the Cloud Telescope: a global, cloud-native architecture for capturing cybernetic activity. Learn about its design and discover insights from recent experiments on botnet propagation and infection patterns.
DoH Deception: Evading ML-Based Tunnel Detection with Black-Box Attack Techniques
Explore vulnerabilities in ML models for DoH tunnel detection, demonstrating successful evasion techniques and highlighting critical features to avoid in model development.
Cybersecurity and AI Risk Management Challenges for Next-Generation Public Safety Systems
Explore cybersecurity and AI risks in next-gen public safety systems. Learn how the tech community can support agencies in responsible adoption of advanced technologies for enhanced emergency response.
BOLABuster: Harnessing LLMs for Automating BOLA Detection
Harnessing LLMs to automate BOLA detection in APIs and web applications, reducing requests by 99% while uncovering critical vulnerabilities and submitting multiple CVEs.
Passwords 101 - History, Cracking Techniques, and Defenses
Explore password hashing history, cracking techniques, and defenses. Learn about tools, wordlists, custom rules, and CPU vs GPU tradeoffs in this comprehensive overview of password security.
Reassessing 50,000 Vulnerabilities: Insights from SSVC Evaluations in Japan's Largest Telco
Practical vulnerability prioritization using SSVC: Insights from evaluating 50k+ vulnerabilities in Japan's largest telco, improving efficiency and effectiveness over CVSS-based approaches.
Penetration Testing Experience - How to Get It and Advance Your Career
Discover strategies to gain and showcase pentesting experience, essential for landing your dream role in cybersecurity. Learn from industry expert Phillip Wylie on building a successful career path.
How Living and Quilting History Made Me a Better Cybersecurity Professional
Discover how living history and quilt appraisal experiences enhance cybersecurity skills. Explore unexpected connections between hobbies and professional growth in technology and security.