New Farming Methods for the Epistemological Wasteland of Application Security
Explore innovative approaches to application security, focusing on early-stage security testing and practical tools for immediate implementation in development processes and delivery pipelines.
Hack the Cloud, Hack the Company - The Cloud Impact on Enterprise Security
Explores cloud security vulnerabilities, common deployment mistakes, and effective attack methods. Provides insights on securing cloud services and protecting enterprise IT infrastructure.
The 13 Best Golang Security Tips You'll Ever Hear
Practical advice and best practices for building secure applications in Go, covering essential security tips for developers working with Golang.
The Node.js Highway - Attacks Are At Full Throttle
Explore new attack techniques against Node.js applications, including DDoS, password exposure, and business logic vulnerabilities. Learn to identify and mitigate security risks in this popular language.
PHP WAF - Intercept and Monitor Application Attacks
Explore integrating WAF capabilities into PHP applications for enhanced security. Learn to intercept attacks, monitor user activity, and implement a skeleton security framework.
Connected Vehicle Security
Explore security challenges in connected vehicles, potential threats, and strategies to enhance safety and privacy in the evolving Internet of Things landscape.
Automate Security Tests for APIs with Syntribos - An Open Source Security Scanner
Explore Syntribos, an open-source automated security scanner for RESTful APIs. Learn its design, configuration, and capabilities to detect vulnerabilities like SQL injection and DoS attacks efficiently.
What Do You Mean My Security Tools Don't Work on APIs?
Explores techniques for securing APIs and modern service-based web applications, discussing challenges and innovative approaches like security instrumentation for vulnerability identification and protection.
The Illusion of Control - Secrets Within Your Software Supply Chain
Uncover hidden risks in software supply chains. Learn how leading organizations boost productivity, reduce security debt, and accelerate innovation through improved visibility and control of component consumption.
Docker Security
Explore Docker's impact on DevOps, its benefits, and security concerns. Learn about container technology, identity management, and emerging solutions in the Docker ecosystem.
Doing AppSec at Scale - DevOps + Agile + CI/CD == AppSec Pipelines
Scaling AppSec through DevOps, Agile, and CI/CD practices. Learn strategies to efficiently manage application security across large organizations using automation, orchestration, and ChatOps.
Hack Wars - A New Hope
Jedi RAPst4r leads a fun-filled journey through the CyberUniverse, showcasing how to combat cyber threats with the help of allies. Learn about the "New Hope" in cybersecurity and its importance.
Security for Non-Unicorns
Strategies for uncovering, preventing, and managing security issues in legacy systems and code for established companies. Practical approaches to improving security in non-startup environments.
Rugged Software Engineering
Practical strategies for rapid and secure software development, addressing challenges in modern engineering organizations and emphasizing continuous deployment, vendor alerts, and language safety.
Baited Canaries - Monitoring Attackers with Active Beacons
Explore innovative techniques combining document viewing environments and canary tokens to detect and monitor potential attacks, gaining valuable insights into attacker behavior and victim interactions.
Enterprise Security API ESAPI 2.0 Crypto Changes
Explore ESAPI 2.0's cryptographic enhancements, including the shift from ECB mode and the importance of message authenticity in enterprise security.
Your Last Manual Assessment
Automate security assessments using browser hooks and Selenium, transforming manual tests into robust scripts ready for continuous delivery integration.
Intro to IoT Hacking
Learn essential techniques for IoT hacking, including firmware analysis and finding serial consoles. Gain insights into hardware vulnerabilities and start your journey in this exciting field of information security.
From Zero To Hero - Threat Modeling In 90 Minutes
Learn essential threat modeling techniques to identify and mitigate security risks in your systems, enhancing your ability to protect against potential vulnerabilities.
HeapLab Taster - GLIBC Heap Exploitation
Dive into GLIBC heap exploitation techniques with expert Max Kamper. Learn advanced memory corruption strategies and enhance your cybersecurity skills in this intensive session.
Introduction to GLIBC Heap Exploitation
Explore GLIBC heap exploitation techniques with expert Max Kamper. Learn essential concepts, attack vectors, and practical strategies for identifying and exploiting heap vulnerabilities in Linux systems.