The Psychology of DevSecOps
Explore how DevSecOps teams apply psychological concepts to foster security-minded development cultures, increase collaboration, and cultivate buy-in from development partners.
Container Escape - All You Need Is Cap - Capabilities
Explore container capabilities, their role in container escapes, and strategies to mitigate risks in this insightful session on container security internals.
Anatomy of the Attack - The Rise and Fall of MFA
Explore the vulnerabilities in multi-factor authentication through analysis of major 2022 attacks. Learn essential strategies to prevent breaches and strengthen your organization's security posture.
Crucial Cyber Hygiene Defenses for 2023
Learn essential cyber hygiene principles and technical defenses to protect against advanced attacks in 2023, as defined by leading security experts and organizations.
Ransom Demand - 10 Reasons to Think Before Paying
Explore 10 critical considerations before paying ransomware demands, using real-world case studies to guide decision-making in cybersecurity crises.
CatPhish Automation - The Emerging Use of Artificial Intelligence in Social Engineering
Explore how advanced AI is being incorporated into fraudulent scams and phishing attacks, and its implications for future cybersecurity threats.
Who Says Cybersecurity Can't Be Creative?
Explore how creativity and innovation in cybersecurity can proactively combat threats. Learn from industry experts about embracing unconventional approaches to stay ahead of attackers and enhance security strategies.
It's Not All Fun and Games - Cyber Threats to Professional Sports
Explore cybersecurity challenges in professional sports with CISOs from NBA, NFL, and NHL. Learn about threats, defense strategies, and collaboration with law enforcement.
Scaling Product Security with a Product Security Lead Program
Learn how a Product Security Lead program can enhance and scale your Security Champions initiative, improving overall product security effectiveness in large organizations.
Spotlight on Latest Web Application and API Attack Data
Gain insights into global web application and API attack trends, methodologies, and tools. Analyze regional and industry-specific differences, with a focus on API security challenges.
It's Getting Real and Hitting the Fan 2023 Edition - Real World SaaS Attacks
Explore real-world SaaS attacks, failed defenses, and response strategies in cloud-based corporate IT. Gain insights into securing M365, GWS, Okta, Slack, Salesforce, and more.
Reinforcement Learning for Autonomous Cyber Defense
Explore the emerging field of AI-driven cyber defense, learn to use and evaluate open-source tools, and understand the future of autonomous AI defenses in cybersecurity.
Preparing for and Defending OT Systems from Ransomware
Learn strategies to protect critical infrastructure and OT systems from ransomware threats. Gain insights on preparation, defense, and mitigation techniques for high-value corporate targets.
Symmetric Cryptanalysis I
Explore advanced cryptography topics: improved superpoly recovery for Trivium and automated differential-linear attacks on ARX ciphers. Gain insights from experts in this technical session.
Construction Time Again - A Lesson in Paving Paths for Security
Guidance on scaling security programs through technology and secure-by-defaults. Learn to find opportunities, create shared accountability, and reduce security risks in evolving engineering ecosystems.
Hack the Institution - A Map to a Strong Partner-Based Security Program
Discover strategies for building a robust partner-based security program, including governance models, execution plans, and key hires. Learn to shift from reactive to proactive security management.
Symmetric Cryptanalysis II
Explore advanced symmetric cryptanalysis techniques, including differential strategies for multiple-branch designs and rotational-XOR differential rectangle analysis on Simon-like ciphers.
Winning the Battle Against Scam Calls - How We Mitigated Caller ID Spoofing
Discover how Finland successfully combated scam calls through collaboration between telecom operators and regulators, resulting in a significant reduction of caller ID spoofing and fraudulent activities.
The Dark Underbelly of 3rd-Party Application Access to Corporate Data
Explore the hidden risks of third-party app access to corporate data, with real-world insights and practical strategies for prevention, detection, and risk mitigation in cloud environments.
Preparing for the New Era of Cybersecurity Disclosure
Explore new cybersecurity disclosure mandates and their impact on companies. Learn how transparency in reporting risks and incidents can benefit organizations and the marketplace.
Improve Likelihood Calculation by Mapping MITRE ATT&CK to Existing Controls
Explore an evidence-based approach to assess threat likelihood using MITRE ATT&CK and existing security controls, enhancing threat profiling and strategic security management.