I Shot a Deceptive Arrow into the Air - A Mock Hearing
Explore legal implications of deceptive cybersecurity techniques through a mock hearing, examining the concept of digital artifacts as attractive nuisances and their potential consequences.
Unveiling The Truth - A Case Study on Zero Trust for Consumers
Explore real-world challenges and lessons in applying Zero Trust to consumer identities, balancing user experience with fraud prevention and detection of malicious actors.
Making oRAT Go Further
Comprehensive analysis of macOS malware oRAT using unconventional methods, revealing its full functionality through custom command and control server interactions.
REvil - Riches to Rags – The Rise and Takedown of a Cybercrime Empire
Explore the rise and fall of REvil, a notorious ransomware group, through years of research. Learn about cybercriminal empire building, takedown processes, and the impact of public/private partnerships in combating ransomware.
Reconsidering Ragnarok - The Cyber Threat Terrain After the Ukraine Invasion
Experts analyze the unexpected absence of cyber Armageddon following Ukraine's invasion, discussing observations, reasons, and future implications for global cybersecurity landscape.
Web3 - Paving a Path to Identity First
Explore how Web3's shift to decentralized systems impacts identity and access management, paving the way for enhanced online security and user experience.
When Everything Is Critical, Nothing Is - ISA and Mitigation Prioritization
Learn Infrastructure Susceptibility Analysis (ISA) to prioritize cyber vulnerabilities and focus mitigation efforts on critical weaknesses most likely to be exploited, enhancing organizational security.
Telling Fairy Tales to the Board - Turn Attack Graphs into Business Stories
Learn to transform complex security issues into compelling narratives for effective board communication. Discover techniques to convert technical attack paths into actionable stories that drive decision-making.
How to Benefit from Internal Audit
Learn techniques for effective internal audits in cybersecurity, including risk management, control assessment, and reporting cyber maturity. Explore industry standards like CIS Controls and FAIR to enhance your audit practices.
Hybrid Active Directory Attacks - Anatomy and Defenses
Explore Active Directory vulnerabilities and defense strategies for both on-premises and Azure environments. Learn to identify and mitigate common attack vectors to enhance organizational security.
Pwning the CI - GitHub Actions Edition
Explore GitHub Actions security vulnerabilities and their impact on CI/CD pipelines. Learn about common exploits and best practices to protect your supply chain from potential attacks.
Hunting Stealth Adversaries with Graphs & AI
Discover how machine learning and graph modeling can uncover hidden adversaries in cybersecurity. Learn to apply the CHRYSALIS framework for effective threat detection using real-world data.
Comprehensive Cyber Capabilities Framework - A Tech Tree for Cybersecurity
Unveiling a pioneering cybersecurity technology tree for data security, exploring gaps in current frameworks, and demonstrating the methodology for building comprehensive cyber capabilities.
Running in the Shadow - Perspectives on Securing the Software Supply Chain
Expert panel explores challenges and solutions for securing the software supply chain, offering insights from developer, CISO, and policymaker perspectives to address critical security issues.
Negotiating with Terrorists - The High Stakes Game of Ransomware Response
Explore ransomware response strategies through a poker analogy, challenging the "never pay" stance and framing decisions as Call, Raise, or Fold for informed business choices.
Playing With Fire - The Latest Cyber Law Hot Topics
Explore critical emerging legal issues in cybersecurity with ABA leaders, covering systems of trust, privacy, AI's role, and C-Suite vulnerabilities in this informative panel discussion.
Misinformation Is the New Malware
Explore misinformation as a cyberthreat and learn about the role of security professionals in protecting truth, with insights from industry experts and policy advocates.
Zero Trust Privacy - Rethinking a Data Strategy
Explore innovative approaches to data privacy and security with Zero Trust principles, reshaping organizational strategies for enhanced protection and compliance.
How Corporate Governance Transformed Cyber Resilience of a Ukrainian Bank
A Ukrainian bank's vice-chairman shares how board support for IT and cybersecurity became crucial for the bank's survival, offering insights on corporate governance and cyber resilience from a leadership perspective.
Perilous Posts - The Risks of Biometric Patterns Exposed in Social Media
Explore the unintended exposure of biometric data in social media posts and its potential for sophisticated cyberattacks, including identity theft, authentication bypass, and deepfake creation.
Quantum Cryptanalysis
Explore quantum cryptanalysis techniques for elliptic curves, including concrete analysis via addition chains and security implications for VRFs through relative indifferentiability.