Breaking Formation - From an Error Message to Internal AWS Infrastructure
Explore a critical AWS CloudFormation vulnerability, its impact on cloud security, and the disclosure process. Gain insights into cloud infrastructure vulnerabilities and future research directions.
High-Assurance Code Reviews - How Consulting Works When the Risks Are High
Insights into high-stakes code reviews for critical software. Learn techniques for rapid, effective security assessments of cryptographic libraries, cloud-native software, and smart contracts from Trail of Bits' CEO.
Cloud as an Attack Vector
Explore how cybercriminals exploit cloud services as attack vectors, including shadow IT risks and malware delivery. Learn about emerging threats and security implications in the rapidly evolving cloud landscape.
Career Opportunities in Information Security
Explore diverse career paths in information security with insights from a seasoned professional. Learn about key roles, skills, and opportunities in this rapidly evolving field.
Evaluación de Riesgos de un Proveedor Cloud
Aprende a evaluar la seguridad de proveedores de servicios en la nube y a identificar riesgos en la implementación, basado en estándares NIST y mejores prácticas del sector.
Stop the Madness - Keynote
Enno Rey's keynote explores innovative approaches to cybersecurity challenges, offering insights on stopping ineffective practices and embracing more effective strategies in the field.
How to Measure the Security of Your Network Protection Devices
Explore methods to quantify network security device performance, efficacy, and risk. Learn to assess defensive appliances for better security design and network protection strategies.
Machine Learning Toolbox for Cybersecurity Risk Management
Explore machine learning techniques for cybersecurity risk assessment, including topic modeling, word embedding, and PCA. Learn to identify unknown risks and profile incidents effectively.
Best Practices and Proactive Strategies to Mitigate Cyberthreats
Explore current best practices and proactive strategies for comprehensive cybersecurity risk management, focusing on assessment, mitigation, and protecting corporate reputation and financial performance.
Lightning in a Bottle, or Burning Down the House?
Exploring the dual nature of AI in cybersecurity: its potential to strengthen defenses and amplify attacks. Discusses strategies for responsible innovation and delegation of AI across organizations.
What BASE Jumping Taught Me about Risk
Shyama Rose explores risk management lessons from BASE jumping, applying insights to cybersecurity. Learn to evaluate, prioritize, and mitigate risks in the digital landscape.
Your Critical System Is - Not? - Vulnerable - CSAF, VEX, SBOM and the Future of Advisories
Explore the future of vulnerability advisories with CSAF, VEX, and SBOM. Learn about critical system security, risk assessment, and automation in the evolving landscape of cybersecurity.
Red Teaming a Manufacturing Network - Without Crashing It
Explore techniques for safely red teaming manufacturing networks, including reconnaissance, passive methods, and potential attack vectors, while learning mitigation strategies and best practices.
Cloud Security at Scale and What it Means for Your Application
Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.
Boeing 737MAX - Automated Crashes - Deutsche Übersetzung
Technische Analyse der Boeing 737 MAX-Abstürze: Ursachen, Systemdesign, Risikobewertung und Zertifizierungsprozesse. Beleuchtet Pilotenkompetenz, Wartungsfehler und organisatorische Mängel bei der Entwicklung des MCAS-Systems.
Boeing 737MAX- Automated Crashes
Análisis técnico y organizativo de los accidentes del Boeing 737 MAX, explorando las causas de los fallos del sistema MCAS, los problemas de diseño y certificación, y las implicaciones para la seguridad aérea.
Tools of the Trade for a Modern CISO
Explore essential tools and strategies for modern CISOs, covering organizational roles, security frameworks, risk assessment, and effective communication in evolving cybersecurity landscapes.
I Know What You Coded Last Summer
Explore SAP system security, custom code risks, and best practices for protecting critical business systems in this comprehensive overview.
Risk Management for Teams That Get Things Done
Explore effective risk management strategies for growing organizations, focusing on peer review, communication, and automation to maintain high uptime standards without sacrificing velocity.
Offensive Threat Models Against the Supply Chain
Applying adversarial threat models to supply chain systems, focusing on geo-political risks and industry-specific threats to build effective threat libraries and attack sequences for improved security.
OWASP Standard Classification - Achieving Security by Shifting Left in Agile
Integrating security into Agile development through persona-based stories, prioritization, and testing strategies to create more secure web applications and shift security left in SDLC.