Check Your Privilege Escalation
Learn privilege escalation techniques, from basic permissions to advanced kernel exploits, enhancing your cybersecurity skills and understanding of system vulnerabilities.
Wow It Really Is Always DNS - Becoming a Part of the DDoS Problem on Purpose
Explore DNS-based DDoS attacks, their impact, and prevention strategies. Learn about botnets, open resolvers, and legal implications in this comprehensive cybersecurity overview.
Scrapping for Pennies - How to Implement Security Without a Budget
Learn cost-effective strategies to enhance cybersecurity without breaking the bank. Discover practical tips and techniques for implementing robust security measures on a tight budget.
Puppet Masters - How Social Engineers Continue to Pull Our Strings
Explore the tactics of social engineers and learn how they manipulate human behavior to exploit vulnerabilities in organizations and individuals.
How Online Dating Made Me Better at Threat Modeling
Explore how online dating principles apply to threat modeling in cybersecurity, enhancing risk assessment and data protection strategies.
Mixing and Baking a New AppSec Person - Some Missing Audio
Learn strategies for developing application security professionals, including key skills, training approaches, and industry best practices.
Common Developer Crypto Mistakes with Illustrations in Java
Explore common cryptographic mistakes in Java development, covering random number generation, hashing, encryption, and key management. Learn best practices to enhance security.
Ship Hacking - Data on the Open Seas
Explore maritime cybersecurity threats and vulnerabilities in ship systems, protocols, and tracking technologies. Learn about methodologies for identifying and addressing risks in the maritime industry.
Battling Magecart - The Risks of Third Party Scripts
Explore the risks of third-party scripts and learn strategies to combat Magecart attacks, enhancing your website's security and protecting user data.
The Overlooked Cyber Security Risk - 3rd Party Risk Management
Explore third-party risk management in cybersecurity, covering vendor evaluation, lifecycle stages, and practical strategies for mitigating overlooked risks in organizational partnerships.
Assumed Breach Testing
Explore advanced penetration testing techniques, focusing on assumed breach methodology, CEO engagement, and red team strategies for comprehensive security assessment.
API Security Tokens Flows and the Big Bad Wolf
Explore API security, authorization flows, and authentication methods to protect digital resources from potential threats and ensure secure access in modern applications.
The Path to IAM Maturity
Explore the journey towards mature Identity and Access Management, covering key stages, strategic questions, and essential components for effective IAM implementation.
Cleaning the Apple Orchard Using Venator to Detect macOS Compromise
Explore macOS compromise detection using Venator, a powerful tool for identifying and mitigating security threats in Apple environments.
I'll Complete My Threat Model Later Mom - Infosec in Middle School
Explore cybersecurity concepts tailored for middle school students, focusing on age-appropriate threat modeling and digital safety practices.
It's Malware Time - A Bar Crawl from Skunked Homebrew to Rotten Apples
Explore the evolution and techniques of malware, from Skunked Homebrew to Rotten Apples, in this comprehensive analysis of Shlayer and related threats. Learn about distribution methods, sample identification, and attack patterns.
COM Under the Radar - Circumventing Application Control Solutions
Explore techniques for bypassing application control solutions, focusing on COM objects and their potential for evading security measures.
Reasonable Rapid Recognition and Response to Rogues
Learn effective strategies for quickly identifying and responding to security threats in your network environment.
On the Line - What Phishing Really Impacts
Explore social engineering, phishing, and incident response strategies. Learn effective corporate approaches, user empowerment, and key takeaways for enhancing cybersecurity awareness and practices.
Automated Adversary Emulation
Explore automated adversary emulation techniques to enhance cybersecurity defenses and test system vulnerabilities effectively.
Comparing Malicious Files
Explore techniques for comparing malicious files, including sample identification, shared engines, and various metadata analysis methods to enhance threat detection and incident response.