Software Supply Chains and the Illusion of Control
Explore software supply chain vulnerabilities and misconceptions, uncovering hidden risks and strategies for enhanced security in modern development practices.
Malicious Cryptomining is Exploding - Are You at Risk
Explore the rising threat of malicious cryptomining, its risks, and how to protect yourself in this informative cybersecurity talk by John Fatten at GrrCON 2019.
Understanding How Public Places Introduce Additional Risks to Business - Len Noe
Explore public space cybersecurity risks for businesses, covering captive portals, QR codes, and physical attacks. Learn defensive strategies and awareness techniques.
Quantifying Risk in Consumer Software at Scale - Consumer Reports' Digital Standard
Explore methodologies for quantifying software security risks, predicting vulnerabilities, and evaluating consumer products using the Digital Standard developed by Consumer Reports and CITL.
Abuse of CPE Devices and Recommended Fixes
Exploring vulnerabilities in consumer network devices, quantifying risks, and proposing solutions for improved security in home and small office networks.
From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices
Translating threat intelligence into actionable defensive strategies using community-driven approach. Explores evolution of threat modeling and its integration with risk management frameworks.
Sexy Defense - Maximizing the Home-field Advantage
Proactive defense strategies: intelligence gathering, modeling, and expanding defender roles. Maximize existing resources for effective security posture against penetration testers and red teams.
The M2M Risk Assessment Guide - A Cyber Fast Track Project
Comprehensive guide for assessing and mitigating security risks in Machine-to-Machine (M2M) technologies across industries, focusing on vulnerabilities and design strategies.
Tomorrow’s News is Today’s Intel - Journalists as Targets and Compromise Vectors
Explore how journalists become targets for cyber attacks and compromise vectors, examining the intersection of cybersecurity, journalism, and intelligence gathering.
Combating the Insider Threat at the FBI - Real World Lessons Learned
Insider threat detection at FBI: multidisciplinary approach combining psychology, technology, and analytics. Lessons from real-world program implementation, focusing on deterrence, behavioral analysis, and predictive techniques.
National Security, Industrial and Corporate Information Security, and Information Security Providers
Explore national security, industrial and corporate information security, and the role of security providers in this comprehensive discussion by industry experts.
Rapid Threat Modeling
Learn rapid threat modeling techniques to identify and mitigate security risks in software systems. Enhance your ability to protect against potential vulnerabilities and attacks.
Paradigms Lost - Engineering vs. Risk Management
Explore the tension between engineering and risk management approaches in cybersecurity with Bruce Schneier's insightful analysis of paradigms in the field.
Web Application Security
Explore web application security fundamentals and best practices with expert Jeremiah Grossman in this comprehensive conference talk from Black Hat Europe 2001.
The Truth About ASPs
Uncover the realities of Application Service Providers (ASPs) in this insightful presentation, exploring their impact, benefits, and potential risks in the evolving tech landscape.
What Internet Service Providers Need to Know About the Law
Comprehensive legal guidance for ISPs on navigating complex internet regulations, privacy concerns, and liability issues in the digital age.
The Black Hat Time Machine - What Happens Next Year?
Explore future cybersecurity trends and potential threats in this forward-looking panel discussion, offering insights to help prepare for upcoming challenges in the digital landscape.
Managing Hackers
Explore strategies for effectively managing and leading teams of ethical hackers in cybersecurity operations, focusing on maximizing their unique skills and perspectives.
Information Security in Mergers & Acquisitions
Explore information security challenges and strategies in mergers and acquisitions, focusing on risk assessment, data protection, and integration of IT systems during corporate transitions.
Protecting Your IP Network Infrastructure
Learn strategies to safeguard your IP network infrastructure from threats, vulnerabilities, and attacks. Gain insights into best practices for network security and risk mitigation.
Climate Change - Risk, Impacts & Priority Actions
Explore climate change risks, impacts, and priority actions with Dr. Y Kiron, an accomplished entrepreneur and philanthropist, as he shares insights on this critical global issue.