Changing the Physics of Defense
Explore modern cybersecurity trends reshaping defense strategies, including cloud storage, big data analytics, information sharing, and advanced skillsets to counter evolving threats.
The Billion Dollar APT
Explore the inner workings of a sophisticated billion-dollar cybercrime operation, its methods, and how law enforcement combats these high-stakes digital threats.
Tools of NSA Playset
Explore NSA's surveillance tools, including retroreflectors, USB implants, and Thunderbolt exploits. Learn about their capabilities and implications for cybersecurity.
Desert Falcons on a Cyberhunt
Explore the tactics of cyber espionage group Desert Falcons, including their infection methods, social media exploitation, and targeted campaigns in the Middle East.
Mobile Security and Legacy Infrastructure Integration
Explore mobile security challenges, BYOD policies, and integration with legacy systems in enterprise environments. Learn about current trends and solutions in cybersecurity.
Finding Government and Vendor Hardware Backdoors
Explore techniques for identifying hidden backdoors in government and vendor hardware, covering pentesting, security appliances, and various operating systems.
Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure
Explore Azure Log Analytics exploitation as a covert channel, uncovering potential security threats in cloud logging infrastructure and learning mitigation strategies.
Got Popcorn? What's on the Vuln Channel Tonight?
Explore a platform for automated code scanning and vulnerability data streaming, designed to provide developers with fast, timely information on potential security issues.
So You Think You Can Secure Your Cloud - Red Team Engagements in GCP
Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.
Don't Turn Your Back on Ransomware
Explore ransomware's evolution, attack methods, and defense strategies. Learn to sharpen your cybersecurity skills against this persistent threat through real-world examples and practical mitigation techniques.
Avoiding Insidious Points of Compromise in Infrastructure Access Systems
Explore war stories and learn to build secure infrastructure access systems. Analyze classic incidents and discover why the industry's "zero-trust" definition may be flawed.
XSS Mitigation - The State of the Art
Comprehensive overview of XSS attacks and modern defense strategies, covering browser-based, server-side, and framework-specific mitigations for web developers and security professionals.
Threat Hunting - Using MITRE ATT&CK Against Carbanak Malware
Explore threat hunting using MITRE ATT&CK framework against Carbanak malware, covering tactics, techniques, and procedures for effective cybersecurity defense and mitigation strategies.
Mistakes Made Integrating Security Scanning into CI/CD
Explore common pitfalls and solutions for integrating security scanning into CI/CD pipelines, learning from real-world experiences and best practices.
Fantastic AWS Attacks and Where to Find Them
Explore AWS attack techniques and build effective cloud defenses using the ATT&CK framework. Learn to create and operationalize detections for enhanced AWS infrastructure security.
Graph Based Detection and Response with Grapl
Explore graph-based security analytics with Grapl, leveraging Python for powerful attack detection, behavior analysis, and streamlined investigations in complex environments.
Guarding Against Protocol Subversion at Coinbase
Explore blockchain security strategies at Coinbase, focusing on safeguarding assets against protocol subversion, 51% attacks, and smart contract vulnerabilities in Proof of Work and Ethereum networks.
Surfing the Motivation Wave to Create Security Behavior Change
Explore strategies for motivating employees to adopt secure behaviors, leveraging behavioral science and timely events to drive lasting change in organizational security culture.
You Might Still Need Patches for Denim
Explore container patch management strategies, including image registry maintenance, continuous deployment, and Google's approach to critical vulnerability patching without downtime.
Concrete Steps to Create a Security Culture
Practical strategies for fostering a strong security culture in organizations, with actionable examples and insights on measuring success in cultural change initiatives.
Building Identity for an Open Perimeter
Explore Netflix's cloud-first security approach, focusing on identity as the new perimeter through SSO, MFA, and adaptive authentication for a location-independent strategy.