Navigating the Landscape of Client-Side Request Hijacking on the Web
Explore client-side request hijacking vulnerabilities, their impact on web security, and effective mitigation strategies to protect against these emerging threats.
API Security By Design
Explore API security best practices and design principles to build robust, secure systems with expert insights from Jose Haro Peralta.
Bypassing Entra ID Conditional Access - A Deep Dive Into Device Authentication Mechanisms
Explore device authentication in Entra ID, uncovering vulnerabilities in Conditional Access. Learn about attack methods, defense strategies, and gain insights into Microsoft's cloud security infrastructure.
How to Setup Fingerprint Authentication in JavaScript
Learn to implement fingerprint and biometric authentication in JavaScript using WebAuthn APIs. Covers client and server-side setup for secure, third-party-free user registration and login.
CrowdStrike Outage - Lessons for Web Development Resilience
Explore the CrowdStrike incident's global impact, understand its causes, and learn key strategies to enhance your company's resilience against similar large-scale tech disruptions.
Building a Robot Arm with .NET 8, Raspberry Pi, Blazor and SignalR
Learn to build and control a robot arm using .NET 8, Raspberry Pi, Blazor, and SignalR. Explore GPIO control, servo movement, remote operation via Blazor app, and VR interaction with Oculus Quest 2.
How Hacking Works - Web Edition
Explore web exploitation techniques and tools to enhance software security. Learn through gamified environments to build skills for safer development practices.
Passwordless Authentication: Challenges and Solutions for Account Recovery
Explore challenges in account recovery and identity verification as passwordless authentication becomes prevalent, addressing industry impacts and legacy application concerns.
Threat Modeling at Scale: More Than Shifting Left
Empower developers with scalable threat modeling techniques to enhance application security, save time and money, and make secure development more attainable.
Rolling out the C2 - Modern Red Team Infrastructure in 2024
Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.
Living with the Enemy - How to Protect Yourself and Energy Systems
Explore strategies for reducing risks in energy systems integrating IoT devices, focusing on clean energy infrastructure security amidst climate change and manufacturing uncertainties.
Using a Cloud Telescope to Observe Internet-Wide Botnet Propagation Activity
Explore the Cloud Telescope: a global, cloud-native architecture for capturing cybernetic activity. Learn about its design and discover insights from recent experiments on botnet propagation and infection patterns.
BOLABuster: Harnessing LLMs for Automating BOLA Detection
Harnessing LLMs to automate BOLA detection in APIs and web applications, reducing requests by 99% while uncovering critical vulnerabilities and submitting multiple CVEs.
Navigating the Changing Cyber Landscape - Trends, Costs, and Risk Mitigation Strategies
Explore 2023's cyber landscape: record-breaking events, evolving threats, and risk mitigation strategies. Learn about costs, trends, and how top companies quantify potential risks.
101 Things Your Application is Doing Without Your Knowledge
Uncover hidden behaviors in your applications, including unexpected file operations and network connections, even when using trusted dependencies. Learn to identify and manage these covert activities.
Securing Cloud-Native DevOps - A Zero Trust Approach
Explore Zero Trust principles for securing cloud-native DevOps environments, addressing challenges like supply chain attacks and lateral movement in microservices and serverless architectures.
Standardizing Password Surveys - Improving Reliability and Comparability
Standardizing password surveys to improve reliability and enable cross-organizational comparisons. Open-source initiative for better data collection and analysis in password security research.
Building a Secure and Scalable Cybersecurity Lakehouse - Rivian's Approach
Rivian's innovative cybersecurity lakehouse enables real-time, cross-team detections, automating response management. This scalable solution reduced implementation time and increased coverage, outperforming proprietary SIEM systems.
My Autistic Life - Working at Microsoft in the 1990s
Explore the impact of undiagnosed autism on a career at Microsoft in the 1990s, offering insights into neurodiversity in the tech industry.
Lab 01: Setting up pfSense
Configure and deploy pfSense firewall, exploring its features for network security and management. Hands-on experience with a powerful open-source firewall solution.
Practical Steps to False Positive Reduction and Benign File Analysis
Learn efficient techniques for identifying false positives and analyzing clean files in malware analysis. Gain actionable tips from real-world examples to enhance your workflow and save time and resources.