Certificate Transparency Logs - Roadmaps to Riches or Ruin?
Explore the dual nature of Certificate Transparency Logs in Web PKI: their role in ensuring certificate authenticity and potential misuse by malicious actors for reconnaissance.
How Segment Proactively Protects Customer's API Keys
Discover Segment's innovative approach to safeguarding API keys, addressing the critical issue of secret leaks on GitHub and enhancing overall security for user data and actions.
Building an Endpoint Security Program from Scratch
Learn to develop a comprehensive endpoint security program to protect your organization's internal resources and data from potential threats and compromised devices.
Lessons Learned While Building a Privacy Operations Center at Headspace Health
Insights on creating a Privacy Operations Center in digital healthcare, addressing global regulations and overcoming challenges in data protection and compliance.
Secret Hunting
Discover techniques for finding, rotating, and safely managing secrets in applications. Learn best practices for secure secret storage and handling compromised credentials.
To Normalized Logs, and Beyond - Building a Threat Detection Platform from Scratch
Deep dive into building a scalable, lean threat detection pipeline. Learn automation techniques for data ingestion, detections-as-code, and filtering to create a serverless platform for effective threat detection.
The Expanding Universe of Cyber Threats
Explore cyber threat intelligence as a solution for managing the rapidly expanding threat landscape, prioritizing threats, and providing actionable insights to decision-makers in enterprise security.
Sandboxes All the Way Down - A Hitchhiker's Guide to Platform Containment
Explore modern sandboxes and isolation primitives for enhanced security. Learn when and how to use containment tools, with practical insights for immediate implementation.
The Best Defense is a Great Offense - Leveraging Automated OffSec to Build Proactive C2 Detections
Learn to develop proactive Command & Control (C2) threat detections using automated offensive security techniques. Explore push-button infrastructure for simulating complex attacker behaviors and generating high-fidelity signals.
Defining a Data Masking Framework at Scale
Explore tokenization and obfuscation as data security techniques, addressing challenges in implementing large-scale frameworks alongside conventional encryption methods.
First Security Hire - Building a Security Roadmap and Team from Scratch
Expert insights on building a security program and fostering cybersecurity culture in early-stage companies, covering roadmap creation and team development from scratch.
Advanced Attack Vectors in Azure Environments
Explore privilege escalation techniques in Azure's integrated ecosystem. Learn core concepts and advanced attack vectors for enhanced cloud security awareness.
Securing the Pipeline - Protecting Self-Hosted GitHub Runners
Learn to secure self-hosted GitHub runners, mitigate risks of compromised access tokens, and implement key configuration adjustments to protect CI/CD pipelines from potential network breaches.
New Face, Who Dis? - Recent Adversarial Approaches to Facial Recognition
Explore recent adversarial techniques to protect facial biometrics, including an open-source mobile app demonstration for real-world privacy preservation against facial recognition.
WebAuthn, Yubikeys, and You - What We Wish We Knew Before Rolling Out WebAuthn for Internal Use
Insights from Discord's implementation of WebAuthn and Yubikeys for enhanced internal security. Learn about challenges, best practices, and lessons learned in deploying FIDO2/WebAuthn as a superior MFA solution.
Take The Helm - Guidance For Prospective Future CISOs
Expert panel shares insights on becoming a first-time CISO or Head of Security, covering preparation, pursuit, and success strategies for aspiring security leaders.
Catching the Phisherman
Uncover the largest credential harvesting campaign: its discovery, impact, and ongoing response. Gain insights into cybersecurity threats and investigative techniques.
You Don't Have to Patch
Explore sandboxing and isolation as effective alternatives to rapid patching in cybersecurity. Learn strategies to enhance defense without solely relying on immediate updates.
The History of Ransomware - From Floppies to Droppers, and Beyond
Explore ransomware's evolution from floppy disks to modern cyber threats, uncovering its strange history and valuable lessons for today's cybersecurity landscape.
Protecting Pinner Passwords
Explore innovative techniques for enhancing password security and user experience on Pinterest, addressing common password-related challenges in social media platforms.
Life of a Bug - An Insight on the GitHub Bounty Program
Explore GitHub's bug bounty program, from initial submission to resolution. Learn about the roles of Bug Bounty and PSIRT teams, and gain insights into the incident response process.