The Industrial Cyberthreat Landscape - Year in Review Report with Updates
Explore the latest OT threat groups, vulnerabilities, and incident response insights. Learn how industrial environments became targets and strategies to strengthen ICS cybersecurity programs.
The Life of an Image - Evolution of Vulnerabilities in Popular Containers
Explore container security evolution, analyzing long-term vulnerability trends and their impact on popular images to enhance your understanding of container security posture over time.
Nonconsensual Tracking and Victim Safety - A Case Study in Abusability
Explore how personal trackers are exploited for stalking, learn about mitigation tactics, safety planning, and advocacy responses to address the abusability of technology in digital surveillance.
How to Create a Breach-Deterrent Culture of Cybersecurity, from Board Down
Expert panel discusses strategies for creating a hacker-deterrent cybersecurity culture, bridging gaps between CISOs, compliance, and technology to protect company assets and improve ROI across all organizational levels.
We Could Have Cracked Open the Network for Under $100
Explore the risks of inadequate device decommissioning and the potential for data breaches through secondhand hardware purchases, with insights on protecting sensitive information.
Do Better - Board-Level Accountability in Cybersecurity
Experts discuss board-level cybersecurity accountability, focusing on governance, transparency, and managing cyber risks to meet stakeholder needs and supply chain responsibilities.
Scaling Software Supply Chain Source Security in Large Enterprises
Explore strategies for securing diverse software supply chains in large enterprises, including open-source, vendor, SaaS, and hardware. Learn to operationalize SBOMs for enhanced security and risk management.
Making Standards Safe for Democracies - Rebuilding the US Standards Team
Strategies for democratic nations to regain influence in cybersecurity standards development for emerging technologies, emphasizing industry involvement and rebuilding leadership in critical decision-making venues.
Slack Hackers Slackers
Explore common vulnerabilities in Slack implementations and learn strategies to prevent, detect, and respond to breaches, enhancing organizational security in messaging platforms.
The State of Venture Capital in Cybersecurity
Explore the unique landscape of cybersecurity venture capital in 2022-2023, featuring insights from industry leaders on investment trends, challenges, and opportunities amidst economic uncertainty.
Hardware Security Following CHIPS Act Enactment - New Era for Supply Chain
Explore the impact of the CHIPS Act on hardware security and supply chain innovation with experts from government and industry, discussing policy developments and global implications.
The Application Security State of the Union
Explore the current and future landscape of AppSec, including threats, vulnerabilities, tools, and strategies. Gain insights to build robust security programs and prepare for emerging challenges.
Droned Out - Surveilling the Noise in the Russian War in Ukraine
Explore the evolving cybercriminal landscape since Russia's invasion of Ukraine, analyzing threat actor activities and dark web engagements to provide measurable insights on current and future trends.
The Devil's in the Data - Role of Data Governance in Cyber Risk Mitigation
Explore data governance strategies to mitigate cyber risks and minimize data exfiltration impact. Gain practical insights for aligning information management with organizational protection.
Architecting Security for Regulated Workloads in Hybrid Cloud
Explore architectural practices for integrating security and compliance into regulated workloads on hybrid cloud, focusing on zero trust principles and transparent assurance.
Tools for Privacy-Enhancing Technologies
Explore advanced privacy-enhancing technologies, including PAPR for anonymous credentials and unlinkable policy-based sanitizable signatures, presented by PhD researchers from leading universities.
Bon Appetit - Establishing an Effective Cyber Risk Appetite
Explore foundational principles and emerging practices for developing an effective cyber risk appetite, including guidance on compliance thresholds, KPIs, KRIs, and KCIs for enhanced information security.
Mapping the Ransomware Payment Ecosystem and Opportunities for Friction
Comprehensive analysis of ransomware payment ecosystem, exploring collective actions to disrupt operations. Examines information sharing, friction points, and community roles in making ransomware less profitable.
I Shot a Deceptive Arrow into the Air - A Mock Hearing
Explore legal implications of deceptive cybersecurity techniques through a mock hearing, examining the concept of digital artifacts as attractive nuisances and their potential consequences.
Unveiling The Truth - A Case Study on Zero Trust for Consumers
Explore real-world challenges and lessons in applying Zero Trust to consumer identities, balancing user experience with fraud prevention and detection of malicious actors.
Making oRAT Go Further
Comprehensive analysis of macOS malware oRAT using unconventional methods, revealing its full functionality through custom command and control server interactions.