Beyond Encryption - Why We Can't Come Together on Security and Privacy
Expert panel explores the complex relationship between privacy and security, discussing challenges beyond encryption and proposing solutions to break the current stalemate in digital policy debates.
Peek into the Future - The Security Operations Center of 2020
Explore the evolution of cybersecurity threats and the future of Security Operations Centers, focusing on extended risk management across supply chains, ecosystems, and customer touchpoints.
Not Lost in Translation - Building an Architecture to Reshape Cybersecurity
VMware CEO discusses reshaping cybersecurity through a new architecture that bridges apps, data, and IT infrastructure, offering a fresh approach for enterprises and governments seeking more effective security solutions.
Ascending the Path to Better Security
Explore methods to measure and enhance security approaches, enabling business growth and improved protection against evolving threats in today's complex cybersecurity landscape.
Trust in the Cloud in Tumultuous Times
Explore cloud computing's impact on work, security, and privacy amid geopolitical challenges. Brad Smith discusses balancing societal defense with individual freedoms in the digital age.
Fundamental Flaws in Security Thinking
Explore flaws in security thinking, examining historical assumptions and their impact on modern cybersecurity practices. Gain insights to improve organizational security strategies.
Beyond Passwords
Explore advanced authentication methods beyond traditional passwords, discussing innovative security techniques for robust digital protection.
Illusion vs Reality - An FBI Agent’s Take on Private Sector Realities and Government Sector Illusions
Former FBI agent shares insights on cybersecurity challenges, highlighting the gap between government perceptions and private sector realities, and discussing effective strategies for threat mitigation and future preparedness.
Better SSH Management with Ephemeral Keys
Explore Netflix's Bless and Lyft's Blessclient for improved SSH security and user-managed keys, enhancing infrastructure protection and empowering engineers.
Witchcraft Compiler Collection - Towards Programs Self Awareness
Innovative reverse engineering approach: undoing linker work to produce relocatable files, enabling binary reflection, scripting, and automated API prototyping for enhanced code analysis and exploitation.
Dormant DOMination
Exploring JavaScript-based network scanning techniques to discover attack surfaces across different networks, including air-gapped systems, through dormant browser objects and existing web technologies.
AtomBombing - Injecting Code Using Windows’ Atoms
Explore AtomBombing, a stealthy code injection technique exploiting Windows atom tables and Async Procedure Calls, affecting all Windows versions and evading common security solutions.
Should I Pay or Should I Go? Game Theory and Ransomware
Explore game theory concepts applied to ransomware decision-making, analyzing incentives, payoffs, and rational choices to understand the complexities of cybersecurity responses.
Look Ma, No Hands! - Decentralizing Security for Scale
Explore decentralizing security operations for scalability, empowering developers with tools and practices to integrate security seamlessly into their workflow.
Does DoD Level Security Work in the Real World?
Explore DoD-level security principles for private sector implementation, addressing common misconceptions and emphasizing foundational data protection concepts for effective cybersecurity strategies.
Access Control with Concierge - One Tool to Rule Them All
Discover Concierge, a comprehensive solution for managing access to multiple SaaS services and internal tools, streamlining onboarding, offboarding, and role changes for IT operations teams.
Who's Breaking into Your Garden? - iOS & OS X Malware You May Not Know
Comprehensive analysis of recent iOS and OS X malware, exploring attack techniques, characteristics, and trends. Insights for enhancing security measures against emerging threats on Apple platforms.
Abusing Security Products to Bypass Windows Protections
Unveiling critical vulnerabilities in security products that allow bypassing Windows protections. Explores impact, solutions, and provides a validation tool for system security.
Planning Effective Red Team Exercises
Learn best practices for planning and executing effective red team exercises, including scenario design, objective setting, and rules of engagement to simulate real adversaries and provide maximum value to clients.
Case Study in Using Bad Malware Design Against Attackers
Explore how poor design choices in malware can be exploited by defenders, featuring case studies like AlienSpy/JSocket. Learn strategies to disable malware globally by leveraging vulnerabilities in their implementation.
APT Reports and OPSEC Evolution
Explore how advanced threat actors adapt to security innovations and APT reports, and discover strategies for improving cybersecurity defenses.