Cloudy With a Chance of Security
Explore cloud security challenges and best practices with expert insights on protecting data, managing access, and mitigating risks in modern cloud environments.
XS Leaks - Client-Side Attacks in a Post-XSS World
Explore advanced client-side attacks beyond XSS, focusing on XS Leaks. Learn innovative techniques for exploiting web vulnerabilities and enhancing your security expertise.
Breaking the Cloud - A Tale of Three Breaches
Explore three real-world cloud security breaches, analyzing attack vectors, vulnerabilities, and lessons learned to enhance your organization's cloud defenses and incident response strategies.
Bugs Are Shallow - Finding Vulnerabilities in Top GitHub Projects
Explore techniques for identifying vulnerabilities in popular open-source projects on GitHub, enhancing your security research skills and contributing to safer software.
NoSQL Injection Tutorial Using PortSwigger - With Labs
Learn MongoDB basics and NoSQL authentication bypass techniques using PortSwigger labs. Enhance your cybersecurity skills with practical examples and expert guidance.
Sandboxing Wasm Programs - Syscall Isolation Techniques for Edge Computing
Explore Wasm runtime sandboxing techniques, including SELinux, cgroups, and seccomp. Learn about Callander, a novel syscall sandboxing tool, to enhance security in edge computing platforms.
Auth and RBAC in Multi-Tenant React Apps
Implement user authentication and role-based access control in multi-tenant React applications using Stytch's pre-built UI components and Express.js.
A Tale of Three Service Meshes
Explore the evolution and comparison of three prominent service mesh technologies, highlighting their unique features and use cases in cloud-native environments.
Safety, Security, and C/C++ Evolution - Keynote ACCU 2024
Explore C++ evolution, safety, and security with Herb Sutter. Gain insights on tool adaptation, language distinctions, and future improvements in C and C++ programming.
The Future of Cookies
Explore the evolving landscape of web cookies, their impact on privacy, and recent browser changes affecting their functionality. Learn about challenges and future trends in cookie usage.
Dangling Resources Abuse on Cloud Platforms - Identifying and Analyzing Real-Life Hijacks
Unveils real-life cloud resource hijacks, revealing unexpected attacker strategies and developing novel detection methods. Analyzes 20,904 hijacked resources, exposing prevalent abuse tactics and attacker infrastructures.
Spring Security Architecture Principles - 2024
Explore Spring Security's core architecture, building blocks, and customization techniques through diagrams and live coding. Gain practical insights for implementing robust security in your applications.
OAuth, OpenID Connect and .NET - The Good Parts
Explore OAuth and OpenID Connect essentials for .NET developers, focusing on key protocol flows, extensions, and recommended practices for implementing token-based security in modern applications.
Spring Framework 2024 Keynote
Explore the latest innovations and future directions of the Spring Framework in this comprehensive keynote from the Spring I/O 2024 conference in Barcelona.
A Passwordless Future - Passkeys for Spring Developers
Explore passkeys for enhanced security in Java applications. Learn core concepts, architecture, and implementation using WebAuthn libraries and Spring Security, with step-by-step demos.
The Anatomy of Cloud Attacks
Uncover cloud attackers' tactics and mindsets through honeypot analysis. Learn key defense strategies against threats like Headcrab Kinsing and Teamtnt in this insightful session on cloud security.
CloudSec Hero to Zero - Building Efficient and Sustainable Cloud Security Programs
Learn proven techniques for triaging and remediating cloud security issues, and build an efficient, sustainable program to tackle thousands of unprioritized findings and inadequate infrastructure.
OAuth Secret: Advanced Exploitation Techniques - NahamCon 2024
Explore advanced OAuth exploitation techniques beyond simple redirect_uri attacks. Learn to chain multiple vulnerabilities for successful account takeovers in modern web applications.
All You Need Is Guest - Securing EntraID Guest Accounts
Explore how EntraID guest accounts can pose security risks, bypass limitations, and gain unauthorized access to corporate resources. Learn steps to harden configurations and prevent attacks.
Deep Dive Into AWS Instance Metadata - NahamCon 2024
Explore AWS instance metadata across EC2, ECS, and EKS, from basics to advanced container scenarios, enhancing your ability to maximize bug impact in cloud environments.
Fuzz Faster with Turbo Intruder - Account Bruteforcing and MFA Bypass
Learn to use Turbo Intruder for efficient fuzzing, including account bruteforcing and bypassing MFA timers. Hands-on lab exercises demonstrate practical application of this powerful security testing tool.