Hacker TikTok - Community, Creativity, and Controversy
Panel discussion exploring security-focused TikTok creators' experiences in bringing hacking awareness, humor, and community to a new audience, highlighting successes and challenges in this emerging frontier.
CISO Panel Discussion
Insightful discussion on building and scaling top security teams, exploring strategies for talent attraction, retention, and overcoming challenges in the cybersecurity industry.
Hook, Line and Sinker - Pillaging API Webhooks
Explore "Webhook Boomerang flaws" and learn how to exploit SSRF vulnerabilities in API webhooks, potentially compromising cloud credentials despite security measures.
Exposed Secrets - How Public Git Repositories and Docker Images Expose Millions of Secrets Like API Keys and Security Certificates Every Year
Uncover the alarming spread of exposed API keys and secrets in public repositories. Learn about research findings, causes, and implications for cybersecurity.
The Power of Guardrails - How to Slash Your Risk of XSS in Half
Discover how secure code defaults can significantly reduce XSS vulnerabilities and elevate overall security. Learn strategies to implement effective guardrails and minimize recurring security risks.
Ooga Booga - Avoiding Reinvention of the Wheel - Useful Security Tools and Lessons to Know
Discover Marie Kondo-inspired techniques for managing security challenges efficiently. Learn about useful tools and lessons to avoid reinventing the wheel in under-resourced security teams.
Practical Threat Hunting With Machine Learning
Explore practical applications of machine learning in threat hunting and detection, featuring case studies of high-value detections from two years of research and implementation.
An Unlikely Friendship - Why Security Engineers and Product Managers Should Be Working Together
Discover strategies for security engineers to collaborate with product managers, enhancing security features, accelerating team growth, and unlocking revenue from security-conscious customers.
Go With The -Work-flow
Unveiling security risks in cloud workflow platforms: misconfigurations, credential exposure, data leakage, insecure coding, and containerized malware. Eye-opening research for IT professionals.
Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt
Discover how to treat security vulnerabilities as debt, moving beyond rigid SLAs and exception overload. Learn strategies for responsible risk management in cybersecurity.
Biohacker - The Invisible Threat
Exploring the emerging threat of biohacking: how human implants can compromise contactless technology and pose risks to physical and digital security systems.
Redefining Threat Modeling - Security Team Goes on Vacation
Discover innovative approaches to scale threat modeling programs without compromising quality. Learn strategies for efficient security practices that empower teams and enhance overall effectiveness.
CTF Writeup - Log 'em All
Detailed walkthrough of a challenging Hacking/Reverse Engineering CTF challenge inspired by a Pokemon Red bug, with step-by-step instructions for setup and execution.
Offensive Javascript Techniques for Red Teamers
Explore advanced JavaScript techniques for network reconnaissance and exploitation, focusing on rapid execution and targeting internal vulnerabilities from external sources.
How Software Transparency Can Help Save the World
Explore software transparency through SBOMs, enhancing vulnerability management and supply chain visibility. Learn how this approach can revolutionize cybersecurity and software development practices.
A Look at Jython-Enhanced Reverse Engineering with Ghidra
Explore Jython scripting in Ghidra for efficient malware analysis, using real-world examples to enhance reverse engineering techniques and streamline the process of analyzing obfuscated binaries.
Leveraging Osquery for DFIR at Scale
Explore efficient incident response using Osquery for digital forensics, accelerating breach investigations and uncovering attacker breadcrumbs in large-scale environments.
The Metrics Manifesto
Discover predictive analytics for security, including decision science, Bayesian methods, and quantitative risk management. Learn to measure attack surface and present advanced metrics to boards.
Retain and Recruit a Diverse Talent Pool
Strategies for building and maintaining a diverse cybersecurity workforce, addressing talent shortages through inclusive practices and innovative retention approaches.
Common Security Frameworks
Explore essential security principles and frameworks with industry leaders, gaining valuable insights to enhance your understanding of current and emerging security topics.
In the Wake of an Attack - Thoughts from a Seasoned CISO
Insights from a seasoned CISO on cybersecurity best practices, including secure by default, effective communication, and protecting high-profile organizations and political campaigns.