Enable Modern Privileged Access Management
Explore modern PAM workflows using Boundary and Vault for identity-driven, secure user access across dynamic environments. Learn key differences from traditional approaches and overcome common challenges.
Stanford Seminar - Virtual & Mixed Reality for Security of Critical City-Scale Cyber-Physical Systems
Explore VVateR, a virtual 3D world for visualizing cyber-physical systems and attacks on critical infrastructure. Learn about its applications in research, training, and security enhancement.
Making Open Source Secure by Design
Discover essential strategies for enhancing open source security with insights from CISA's Section Chief, covering design principles and implementation across critical infrastructure sectors.
How Hackers Can Breach CI/CD Systems - Security Vulnerabilities and Mitigation
Explore vulnerabilities in CI/CD systems, including IDE leaks, role granularity issues, and environment leaks. Learn exploitation techniques and mitigation strategies through live demos and practical examples.
Docker y Kubernetes - Seguridad 101
Explora los fundamentos de seguridad en contenedores y Kubernetes. Aprende consideraciones críticas para proteger aplicaciones y datos en entornos dinámicos. Amplía tus conocimientos en ciberseguridad.
2FAC: Facebook's Internal Multi-factor Authentication Platform
Explore Facebook's internal multi-factor authentication platform, its design challenges, and innovative solutions for enhanced security in large-scale environments.
Thwarting Intruders with Ever Morphing Infrastructure - 2019
Explore innovative cybersecurity strategies using dynamic infrastructure reshuffling to disrupt attack lifecycles and enhance network defense against intruders.
How I Learned to Stop Worrying and Love the Smart Meter
Explore smart meter technology, its vulnerabilities, and potential security implications in this insightful presentation on modern energy infrastructure.
ICS Threat Activity Groups - Dragos 2018 Year in Review
Experts analyze 8 ICS threat activity groups and discuss evolving industrial cybersecurity landscape based on Dragos' 2018 Year in Review report.
Industrial Policy: Ensuring Trusted Technology for National Security
Exploring the intersection of national security and tech market competition, focusing on strategies to mitigate risks in global supply chains and ensure access to trusted technology alternatives.
Life Behind the Tinfoil - A Look at Qubes and Copperhead
Explore QubesOS and CopperheadOS for enhanced security and privacy. Learn about real-world usage, trade-offs, and effectiveness compared to standard Linux and Android platforms.
Understanding the Threats and Attacks on Data Science Applications
Explore threats to data science applications, from infrastructure vulnerabilities to attacks on algorithms and developers. Learn to secure your data and protect against emerging risks.
Netflix's Layered Approach to Reducing Risk of Credential Compromise
Discover Netflix's multi-layered security approach to protect against credential compromise, featuring innovative tools and strategies for robust infrastructure protection.
Improving the Security of Software Defined Infrastructures - AppSec EU 2017
Explore security challenges in Software Defined Infrastructures, learn attack surfaces, vulnerability identification techniques, and remediation strategies for configuration management tools like Puppet or Chef.
Threat Modeling the CI/CD Pipeline to Improve Software Supply Chain Security
Explore threat modeling for CI/CD pipelines to enhance software supply chain security, covering key vulnerabilities, data flow analysis, and mitigation strategies.
Fireside Chat - Meet the New CISA Director, Jen Easterly
Explore CISA's priorities, challenges, and opportunities with Director Jen Easterly in this insightful discussion on cybersecurity, elections, and systemic risks.
The Bug Hunter's Methodology 2.0 - Advanced Web Application Security Testing
Explore cutting-edge techniques and tools for discovering vulnerabilities in web applications, including XSS, SSTI, SSRF, code injection, and more. Learn from expert Jason Haddix's updated methodology for effective penetration testing.
Understanding the Impact of Critical Vulnerabilities in Critical Infrastructure: A Detective Story
Explore strategies for assessing and mitigating critical infrastructure vulnerabilities, focusing on novel threats and their potential ecosystem-wide impacts across various sectors.
Cloud Native Storage Solutions for Ransomware Protection
Explore cloud-native storage solutions to protect against ransomware attacks, featuring insights from Red Hat experts on enhancing data security in modern IT environments.
Introduction to Threat Modeling in the Cloud
Learn essential techniques for identifying and mitigating security risks in cloud environments through threat modeling, with practical insights from the Argo Project Threat Model.
Exploiting and Attacking Seismological Networks Remotely
Exploiting vulnerabilities in seismological networks to gain remote control and manipulate critical research data. Step-by-step demonstration of attack scenarios and recommendations for securing these systems.