Access Keys Will Kill You Before You Kill the Password
Explore AWS API security, focusing on access key risks and MFA implementation. Learn strategies and tools for enhancing authentication without compromising workflow efficiency.
One Does Not Simply Add MFA
Explore MFA implementation best practices, security pitfalls, and real-world scenarios. Learn to protect users and systems effectively, covering authentication methods, password security, and user-friendly MFA integration.
In the World of Password123, Be Someone's #@%^)*!
Explore modern authentication methods, including multi-factor authentication, single sign-on, and federated authentication. Learn about OAuth and OIDC to enhance application security.
PSD2, SCA, WTF?
Demystifies PSD2 and SCA regulations for financial transactions, explaining compliance requirements and implementing an example of Strong Customer Authentication for businesses.
Why Some Multi-Factor Authentication Technology is Irresponsible
Critical assessment of multi-factor authentication technologies, highlighting suboptimal choices and providing guidance for selecting secure solutions. Equips viewers with questions to ask vendors and alternatives to consider.
Secrets of the Second Factor - Threat Hunting with Multi Factor Authentication
Explore advanced threat hunting techniques using multi-factor authentication data to enhance cybersecurity and detect potential breaches in organizational systems.
Think Like a Hacker
Explore hacker mindsets and strategies to enhance system security. Learn practical steps for protecting data, improving authentication, and addressing vulnerabilities in your organization's digital infrastructure.
Password Intelligence Project - Advanced Password Recovery and Modern Mitigation Strategies
Explore advanced password recovery techniques, modern mitigation strategies, and the importance of multi-factor authentication in enterprise security.
Your Password Policy Still Sucks
Explore modern password security challenges and effective policy solutions to enhance organizational cybersecurity in this insightful talk by Martin Bos.
MFA - It's 2017 and You're Still Doing It Wrong
Explore common pitfalls and best practices in multi-factor authentication implementation, enhancing your organization's security posture in the modern threat landscape.
Two Factor Too Furious - Evading and Protecting Evolving MFA Schemes
Explore evolving multi-factor authentication schemes, from pre-authentication setup to post-exploitation targeting, with strategies for both evading and protecting against advanced MFA attacks.
Common Observations from a Security Assessor
Insights from a security assessor on common vulnerabilities, cloud security best practices, and strategies to enhance organizational cybersecurity posture.
Building Better Authentication Requirements in a Zero Trust World
Explore zero trust authentication strategies and best practices for enhancing security in modern digital environments.
M-PIN Authentication in Vehicle Tracking
Explore Apache Milagro for secure IoT authentication in vehicle tracking. Learn about post-PKI internet, stronger security, and independence from third-party trust authorities through a C++14 fleet management example.
You Shall Not Pass
Exploring Moodle's security upgrades: password policies, authentication flow enhancements, and MFA implementation. Insights on applying modern security standards to legacy systems.
The Psychology of Multi-Factor Authentication
Explore the psychological aspects of multi-factor authentication, human-system interactions, and how MFA protects against online threats. Learn about security design and human behavior in digital environments.
Replacing Passwords with Multiple Factors - Email, OTP, and Hardware Keys
Explore modern authentication methods beyond passwords, including email-based, one-time passwords, and hardware keys. Learn implementation strategies for enhanced security in Python web applications.
RubyGems.org MFA - The Past, Present and Future
Explore RubyGems.org's Multi-Factor Authentication (MFA) journey, its crucial role in preventing account takeovers, and future developments to enhance security for Ruby developers.
Building Identity for a Zero Trust Network
Exploring Netflix's zero trust network architecture, focusing on identity-based security, adaptive authentication, and device health to create a cloud-first, open perimeter environment.
Cloud Kleptos: Lessons Learned Responding to Scattered Spider - SANS DFIR Summit 2024
Explore advanced cloud-focused attack techniques and defense strategies against persistent threat actors like Scattered Spider. Learn about their methodical approach, TTPs, and how to protect your organization's assets.
Real-time Cybersecurity Application on the Ledger to Protect APIs - Demo
Explore a real-time cybersecurity application using Hyperledger Fabric to provide dynamic identities and automated authentication for machine-to-machine API traffic, addressing high-scale security needs.