NIST Privacy Framework IRL - Use Cases from the Field
Explore real-world implementations of the NIST Privacy Framework through case studies from Okta and Equifax. Learn about challenges, successes, and adoption strategies for enterprise risk management.
Cloud-Powered Compromise Blast Analysis - In the Trenches with Microsoft IT
Discover advanced methods for identity compromise detection using cloud logs, SIEMs, and telemetry. Learn from Microsoft's experience in protecting millions of authentications.
Cloud Threat Hunting
Proactive cloud threat detection techniques, including honeyclouds, integrated monitoring, and AI-driven behavioral analysis for mitigating orchestration attacks and cross-tenant threats.
Rob, Replicate and Replace - China’s Global Technology Theft and How to Confront It
Explore China's global technology theft strategies and learn effective countermeasures from top US security experts. Gain insights on mitigating vulnerabilities and protecting American innovation.
How to Use GitHub Actions with Security in Mind
Comprehensive guide to enhancing GitHub Actions security, covering access control, secrets management, containerization, and best practices for protecting CI/CD pipelines and workflows.
Passwords Are Not Going Away
Explore password security, authentication best practices, and user experience considerations in digital identity management. Insights from 23+ years of expertise in the field.
Getting API Security Right
Explore best practices for API security through real-world cases, covering attack surfaces, authorization issues, and practical guidelines to enhance your API's protection.
ASP.NET Core Meets OWASP Top 10
Explore ASP.NET Core's security features through the lens of OWASP Top 10, covering authentication, data protection, access control, and more for robust web application security.
Protect Yourself Against Supply Chain Attacks
Explore supply chain attack vectors, from CI/CD pipeline vulnerabilities to package squatting, and learn protective measures for securing your development environment.
Building Enterprise Microservices Using Ocelot and Azure
Learn to architect enterprise microservices using Ocelot and Azure. Explore API gateways, OAuth 2, VNet protection, and cloud-native services. Gain insights on transitioning from monolith to microservices and addressing key challenges.
AI - Machine Learning - What is Actually Working in Cybersecurity
Explore real-world applications of AI and ML in cybersecurity, focusing on practical use cases that have shown value in reducing detection, response, and restoration times.
Cloud Configuration - Mitigate Risks from Cloud Security Failures
Learn to identify, prevent, and resolve cloud configuration issues to protect sensitive data and mitigate security risks in enterprise environments.
Enhancing Visibility for Cloud Security Operations
Explore key privacy issues in cloud adoption and learn data protection protocols to reduce risks. Gain insights on implementing security measures for enhanced visibility in cloud operations.
The Surge of BEC Attacks and How to Mitigate Damages
Explore BEC attacks, their impact, and effective mitigation strategies through real-world case studies. Learn response procedures and recommendations to protect your organization from these prevalent cyber threats.
You See Honey, I See Beehive - Developing Honey Networks
Explore end-to-end honey networks for breach defense, combining honeypots, security sensors, and continuous monitoring. Learn open-source and enterprise options for networks of any size.
Through the Eyes of the Adversary - How to Build a Threat Intel Program
Learn to build an effective threat intelligence program by understanding adversary perspectives, focusing on key components and serving organizational stakeholders.
A Simplified and Practical Approach to Pursuing a Zero Trust Architecture
Practical guide to implementing zero trust architecture, focusing on identity, policy, and people. Learn design principles for a flexible, resource-efficient approach to enhance security.
Cyberespionage - Targeted Attacks Abusing Third-Party Cloud Services
Explore how APT groups exploit cloud services for cyberespionage, examining real-world cases, attack strategies, and implications for defenders and researchers across Windows and Android platforms.
Getting the Security and Flexibility Balance Right in a COVID-19 World
Explore balancing security and flexibility in remote work during COVID-19, addressing challenges, mitigating risks, and implementing effective cybersecurity strategies for organizations.
Securing Your M&A Activity with Cybersecurity Due Diligence
Learn to conduct cybersecurity due diligence for M&A activities, including program components, metrics for informed decisions, and strategies for both buy and sell sides to protect and evaluate effectively.
Build Privacy into Your Products and Gain User Trust
Learn strategies to integrate privacy policies and infrastructure into products, enhancing user trust and regulatory compliance while fostering growth and empowering users to understand data usage.