Managing Vulnerability Overload with OWASP Tools and Strategies
Discover OWASP's strategies for managing overwhelming security vulnerabilities, enhancing your ability to prioritize and address critical threats effectively.
Malice in Chains - Supply Chain Attacks Using Machine Learning Models
Explore potential supply chain vulnerabilities in machine learning models and learn strategies to mitigate risks in AI-driven systems.
OWASP IoT Security Testing Guide (ISTG)
Comprehensive guide for IoT security testing, covering methodologies and best practices to identify vulnerabilities and enhance device protection in the interconnected world.
Paved Roads to Express RBAC in Threat Models
Learn effective techniques for incorporating Role-Based Access Control (RBAC) into threat modeling, enhancing security design and risk assessment for software systems.
Cryptographic Governance - Software Supply Chain Security with CBOM
Explore software supply chain security using Cryptographic Bill of Materials (CBOM) for enhanced governance and risk mitigation in development processes.
Modern Application Security vs. GenAI Applications: Is Your AppSec Ready?
Explore the intersection of modern application security and generative AI, assessing readiness for emerging challenges in the evolving tech landscape.
OWASP Dependency Track - Fortifying the Software Supply Chain
Explore strategies to secure software supply chains using OWASP Dependency Track, a powerful tool for identifying and mitigating vulnerabilities in third-party components.
5 AppSec Stories and What We Can Learn From Them
Explore real-world application security incidents and extract valuable lessons to enhance your cybersecurity practices and prevent similar vulnerabilities in your own systems.
Assessment of Violent Ideations - Psychiatry Project ECHO
Explore assessment techniques for violent ideations with Dr. Colleen Lillard, gaining insights into psychiatric evaluation and risk management strategies.
War Stories - Fighting Ransomware Operators
Insights into combating ransomware from a cybersecurity expert, sharing real-world experiences and strategies for incident response and threat mitigation.
Using Threat Modeling to Create a DevSecOps Plan
Discover how to leverage threat modeling for effective DevSecOps planning. Learn to identify threats, select appropriate security tools, and seamlessly integrate them into your development pipeline.
Securing Your Building's Most Critical Assets: Cybersecurity for Building Automation Systems
Explore BAS cybersecurity threats, their business impact, and strategies to protect critical assets. Learn from case studies and discover solutions for safeguarding building automation systems.
The Future of Security with AI
Explore Microsoft's approach to AI in security, including Security Copilot and new capabilities for securing and governing AI, with insights from industry experts.
Open Source Projects in Safety Critical Applications
Explore open source projects in safety-critical applications with industry experts, discussing challenges, best practices, and future trends in this critical domain.
Safety vs Security: A Tale of Two Updates
Explore the tension between safety and security in product updates, focusing on embedded systems. Learn strategies to balance these conflicting needs in development and maintenance.
Zero Trust Threat Modeling - Implications for Application Security
Explore zero trust's impact on application security and threat modeling. Learn new design principles, threats, and approaches for effective zero trust threat modeling in modern environments.
Open Software Supply Chain Attack Reference (OSC&R) - OWASP Foundation
Explore the OSC&R framework for software supply chain security, analyzing real-world attacks and improving DevSecOps programs to enhance overall security posture.
Rough Seas and Ships in Storms - A 2023 Retrospective from an MSSP Perspective
Cybersecurity expert reviews 2023 challenges for Managed Security Service Providers, offering insights on navigating threats and protecting organizations in an evolving digital landscape.
AppSec Contractual Sins - Identifying and Addressing Security Issues in Contracts
Explore common AppSec contractual pitfalls and best practices for securing software development agreements in this DefCamp 2023 presentation by Canon's EMEA Information Security Manager.
The State of Cybersecurity - 2023 Year in Review
Insights on 2023's cybersecurity landscape, including attacker techniques, defense strategies, and impact on executive decisions, from Mandiant's incident response experiences.
Purple is the New Black - Modern Approaches to Application Security
Explore modern application security strategies for new technologies, emphasizing the importance of product security in today's cyber landscape and the need for innovative, affordable approaches.