Estimating Development Security Maturity in About an Hour
Discover techniques for assessing development security maturity quickly. Learn to identify key behaviors, conduct effective meetings, and evaluate training, threat modeling, and analysis practices.
Does DoD Level Security Work in the Real World
Explore DoD-level security's real-world applicability and effectiveness in modern cybersecurity landscapes with insights from industry expert Jeff Man.
Hacking the IoT - A Case Study
Explore IoT vulnerabilities through a real-world case study, uncovering security risks and practical solutions for connected devices in the modern digital landscape.
Hurt Me Plenty - The Design and Development of Arganium
Explore the design and development of Arganium, a game-based cybersecurity training platform, including its educational benefits, technical implementation, and future possibilities.
Going Past the Wire - Leveraging Social Engineering in Physical Security Assessment
Explore advanced techniques for leveraging social engineering in physical security assessments, enhancing your ability to identify vulnerabilities beyond traditional perimeter defenses.
Arming Small Security Programs - Network Baseline - Matt Domko
Learn to establish network baselines for small security programs, covering malware detection, logging, and traffic analysis using tools like Bro and Security Onion.
Easy Indicators of Compromise - Creating a Deception Infrastructure
Learn to create deception infrastructure for detecting attackers, covering security practices, detection tools, and strategies like fake information and admin accounts.
Make STEHM Great Again
Explore strategies to enhance STEHM (Science, Technology, Engineering, Health, and Mathematics) education and its impact on future workforce development and innovation.
EDNS Client Subnet ECS DNS CDN Magic or Security
Explore EDNS Client Subnet (ECS) and its impact on DNS, CDNs, and security. Learn about the magic and potential risks of this technology in modern networking.
Attacking Modern SaaS Companies
Explore techniques for attacking modern SaaS companies, including breaking into Jenkins, exploiting artifact servers, and leveraging AWS vulnerabilities for unauthorized access.
Rooting Out Evil - Defend Your Data Center Like the Secret Service Protects the President
Explore data center security strategies inspired by Secret Service methods, focusing on detection, environment understanding, and proactive measures for robust protection.
Iron Sights for Your Data
Learn data visualization techniques to effectively communicate insights and make informed decisions using powerful visual tools.
Phishing for Shellz - Setting up a Phishing Campaign
Learn to set up and execute effective phishing campaigns, including email tactics, payload delivery, privilege escalation, and various attack techniques for penetration testing and security awareness.
Embrace the Bogeyman - Tactical Fear Mongering for Those Who Penetrate
Tactical fear mongering techniques for penetration testers, exploring organizational fears, red teaming, and the impact of embracing the "bogeyman" in cybersecurity.
Security Is Dead - Long Live Infosec - David Shaw
Explore the evolving landscape of information security, its challenges, and future directions. Learn from major breaches and discover strategies to adapt and improve cybersecurity practices.
An Employee, Their Laptop, and a Hacker Walk into a Bar
Explore real-world cybersecurity risks and strategies to protect sensitive data when employees use laptops in public spaces, focusing on practical defense techniques against potential threats.
Scamming the Scammers - Hacking Scammers with Pwns
Explore techniques for turning the tables on scammers through ethical hacking, learning how to identify, track, and disrupt fraudulent activities online.
Data Loss Prevention in a Social Media World
Explore data loss prevention strategies in the age of social media, focusing on protecting sensitive information in an increasingly connected digital landscape.
Royal Testing Purple Teaming to Build and Secure Applications Better
Explore purple teaming techniques to enhance application security and development through a blend of offensive and defensive strategies.
Dark Web Economies and You Can Too
Explore dark web economies and their operations with insights from cybersecurity expert Johnny Christmas. Gain understanding of hidden online marketplaces and their impact on digital security.
DIY CTF - How to Gain Momentum on Your Security Awareness Program by Hosting a CTF
Learn to boost your security awareness program by organizing a Capture The Flag event, gaining practical insights and strategies for effective implementation.