Threat Hunting - Demystified
Demystifies threat hunting as a cyber-defense strategy, exploring its implementation, phases, and best practices to effectively combat unknown threats in cybersecurity.
Drone Penetration Testing and Vulnerability Analysis Framework
Explore an open-source framework for drone security testing, covering attack types and vulnerability analysis. Learn to assess and enhance drone safety in various applications.
Two Weeks with a Russian Ransomware Cell
Insights from two weeks of dialogue with Russian ransomware operators, revealing their methods, motivations, and advice for IT security, with implications for future cybersecurity strategies.
Hacking People's Mind - When Threat Actors Master Social Engineering
Explore the evolving landscape of social engineering in cybersecurity, focusing on new attack vectors, their sophistication, and strategies for fraud prevention teams to counter these emerging threats.
Seven Deadly Sins of Security Communication Part I
Improve security communication effectiveness by analyzing document elements like headings and calls to action, with examples of impactful messaging to drive desired behavioral changes.
Access Control Design Best Practices
Learn best practices for designing robust access control systems in web applications, covering anti-patterns, principles, and practical examples for secure implementation.
How to Get the Most Value out of Your Penetration Test
Maximize penetration test value: Learn strategies for internal buy-in, aligning with business goals, choosing testers, and evaluating results. Gain practical insights from industry expert Ed Skoudis.
Coordinated Vulnerability Disclosure - You’ve Come a Long Way, Baby
Explore new research on coordinated vulnerability disclosure, examining perspectives of researchers and organizations to understand behaviors, preferences, and practices in software flaw reporting.
Data Ethics and Privacy Engineering in Cybersecurity
Explore data ethics and privacy engineering in cybersecurity, focusing on ethical considerations, stakeholder expectations, and practical applications to create better security products.
Mercedes-Benz and 360 Group - Defending a Luxury Fleet with the Community
Explore Mercedes-Benz's approach to cybersecurity for connected cars, including fleet defense strategies and research by 360 Group on vehicle vulnerabilities and attack surfaces.
Breaking Password Dependencies - Challenges in the Final Mile at Microsoft
Explore Microsoft's journey to eliminate password vulnerabilities, focusing on legacy authentication challenges and practical strategies for achieving 100% remediation in large enterprises.
SIMs, eSIMs and Secure Elements - Dynamic Security for Connected Devices
Explore SIMs and Secure Elements for flexible, secure connectivity in IoT devices. Learn implementation strategies, security principles, and benefits for various industries.
API Abuse through Mobile Apps - New Attacks, New Defenses
Explore mobile app API security challenges and defenses, including OAuth2, TLS pinning, and app attestation. Learn through a simulated battle between a delivery app and an attacker.
Genomics - A New Frontier for Privacy and Security
Exploring genomics' impact on privacy, security, and healthcare, with insights from industry leaders on opportunities, challenges, and ethical considerations in this emerging field.
Fear and Loathing in Cybersecurity - An Analysis of the Psychology of Fear
Explore the psychology of fear in cybersecurity, learn why scare tactics fail, and discover effective strategies to positively impact awareness, behavior, and culture.
A Forward Look at the Cyberspace Solarium Commission
Explore key cybersecurity challenges and recommendations from the Cyberspace Solarium Commission, including government reform, resilience, private sector collaboration, and strengthening norms.
JavaScript Skimmers, Formjacking and Magecart - All You Need to Know
Explore JavaScript skimmers, formjacking, and Magecart attacks. Learn detection techniques, infection methods, and mitigation strategies to protect against data theft and financial penalties.
Protect Privacy in a Data-Driven World - Privacy-Preserving Machine Learning
Explore privacy-preserving machine learning techniques to harness AI's power while maintaining data confidentiality, with insights on federated learning, trusted execution environments, and homomorphic encryption.
How to Protect Your Enterprise Data - Tools and Tips
Comprehensive guide to enterprise data protection, covering various environments and compliance strategies. Learn holistic approaches to safeguard sensitive information across networks, cloud, and applications.
Malicious Documents Emerging Trends - A Gmail Perspective
Comprehensive analysis of malicious document trends targeting Gmail users, exploring attacker tactics and Google's defensive strategies using AI detection and traditional antivirus methods.
Break the Top 10 Cloud Attack Killchains
Explore top cloud attack kill chains and effective defense strategies. Learn to identify vulnerabilities, prevent credential exposure, and secure cloud infrastructure across major providers.