Mystery and Magic Intersect with Human Behavior Analysis
Explore human behavior, security vulnerabilities, and deception with Dr. Lorrie Cranor in this intriguing discussion on the intersection of psychology and cybersecurity.
Hacking Society
Explore how a computer security mindset applies to societal systems. Learn to identify vulnerabilities and defend core structures like elections, economy, and lawmaking.
Chronicle of the Supply Chain Attack and Two Attack Strategies
Explore supply chain attack strategies, including software development environment and update server penetration, through analysis of incidents targeting Korean and global companies.
Solving for DevOps Auditors with Automated Compliance
Explore automated compliance in DevOps, learn to code security controls, and discover how to integrate them into your software stack for improved securability scores.
20 Years In - Security’s Grand Challenges, Then and Now
Explore the evolution of cybersecurity challenges over two decades, from intelligence and scale to implicit trust, password reliance, and cloud migration risks. Gain insights into mitigating advanced threats and future security landscapes.
The 5 Most Dangerous New Attack Techniques and How to Counter Them
Experts discuss cutting-edge cyber attack techniques, their mechanisms, and effective countermeasures. Gain insights into emerging threats and proactive defense strategies from leading security professionals.
What Really Happens When Hackers Attack Medical Devices
Explore medical device hacking, FDA regulations, and cybersecurity in healthcare. Includes live demo of network attack and interactive code session on data integrity protection.
Supply Chain Security in the Software Era
Explore software supply chain risks and gain insights on mitigating them through real-world examples and concrete recommendations for policy makers and executives.
IoT Bug Hunting - From Shells to Responsible Disclosure
Explore techniques to circumvent security controls in IoT devices, from uncovering vulnerabilities to responsible disclosure. Gain insights into remote attacks and manufacturer security shortcomings.
Privacy by Design Lessons from Beyoncé
Explore privacy engineering best practices and future trends through the lens of Beyoncé's approach, reflecting on GDPR's impact and emerging privacy regulations.
Hey Google, Activate Spyware! When Google Assistant Uses a Vulnerability as a Feature
Uncover Android vulnerabilities allowing remote control of photos, videos, and location data without user knowledge. Learn how researchers chained weaknesses to create a rogue spy application.
Hacking the Unhackable - Pwning the Bitfi Crypto Wallet
Explore the security flaws in the Bitfi crypto wallet, learn from its mistakes, and understand best practices for secure device development and responsible disclosure.
Probe to Pwn - Rookie Track
Explore mobile and wireless attack methods, from target identification to device compromise, and learn mitigation strategies to protect against various threats and vulnerabilities.
Crawling Metadata with Recon-ng
Explore metadata extraction using Recon-ng plugin metadamn.py, learning about its capabilities, challenges, and future developments in web reconnaissance.
InfoSec is a Board Responsibility
Elevate InfoSec to a governance issue by speaking 'board talk', addressing objections, and tailoring proposals to focus on measurable benefits, risk mitigation, and corporate objectives.
A Look at Modern Warfare
Explore the economic impact of cyber warfare compared to traditional military conflicts, analyzing cost-effectiveness and strategic implications in modern combat scenarios.
The Joy of Passwords
Explore password security, learn about vulnerabilities, and discover effective strategies for creating and managing strong passwords to enhance your online protection.
Rise of the Vermilion - Cross-Platform Cobalt Strike Beacon Targeting Linux and Windows
Explore the first cross-platform Cobalt Strike re-implementation, Vermilion Strike, targeting both Linux and Windows in real-world attacks. Learn about this significant malware discovery.
JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s
Explore JavaScript obfuscation techniques and learn a method for detecting packers to identify obfuscated files, crucial for understanding modern security threats.
Red Teaming macOS Environments with Hermes the Swift Messenger
Explore the development of Hermes, a Swift implant for macOS red teaming, integrated with Mythic C2 framework. Learn about its capabilities and detection methods using Apple's ESF.
WireGuard from the Ground Up
Comprehensive overview of WireGuard: its implementation, protocol, cryptography, and comparison with other VPN solutions. Learn when and how to use this efficient end-to-end encryption tool.