Cloud Agnostic or Devout - How Cloud Native Security Varies in EKS - AKS - GKE
Explore security variations in Kubernetes across major cloud providers, empowering teams to implement consistent controls for truly cloud-consistent applications.
Standards on the Horizon - What Matters Most
Experts discuss recent developments and future priorities in cybersecurity standards, focusing on their impact on innovation, interoperability, and global trade. Insights for shaping organizational roadmaps.
From the Cluster to the Cloud - Lateral Movements in Kubernetes
Explore Kubernetes lateral movement techniques and learn how attackers can pivot from container access to cloud resources. Discover practical tools for threat mitigation and detection in cloud-based Kubernetes environments.
Trust Unearned? Evaluating CA Trustworthiness Across 5 Billion Certificates
Explore insights from 5 billion TLS certificates to assess CA trustworthiness, revealing key factors and practical strategies for enhancing organizational security.
EXPOSURE - The 4th Annual RSAC SOC Report
Dive into the humorous and eye-opening findings from monitoring the RSAC wireless network, revealing surprising user behaviors and evolving trends in cybersecurity awareness.
Turning the Backpage - Combating Human Trafficking with Threat Intelligence
Explore how threat intelligence can combat human trafficking by monitoring classified ads for indicators, generating leads, and assisting investigations to help survivors.
How to Adapt to Security Changes in Cloud SaaS Transformation
Explore the security advantages of cloud migration and learn to evaluate SaaS environments using a detailed framework for comparing on-premise and cloud security postures.
Corporate Reputation Attacks - Dissecting the Latest Job Offer Scams
Uncover the tactics behind job offer scams targeting corporate reputations. Learn to identify, respond to, and prevent these fraudulent attacks through real-world case studies and expert insights.
Conducting a Pre-Mortem on the Next Zero Trust Breach
Explore future Zero Trust breaches through a pre-mortem analysis, examining potential vulnerabilities and attack vectors in 2028's cybersecurity landscape to enhance current defensive strategies.
The Fearless Cybersecurity Leader and Future CISO
Explore 7 essential skills for aspiring CISOs, including leadership traits and real-life examples. Gain insights into the CISO role and develop crucial competencies for cybersecurity leadership.
Adversary Emulation - How I Stopped Being Polite and Got Real Results
Explore how real adversaries differ from testers in cybersecurity, using data from actual intrusions to improve threat detection and adversary emulation techniques.
Abuse of Repository Webhooks to Access Hundreds of Internal CI Systems
Explore a novel attack vector abusing repository webhooks to access internal CI systems, revealing vulnerabilities in common CI/CD architectures and their potential impact on organizations.
Verifiable Credentials and the Future of Enterprise Security
Explore how verifiable credentials revolutionize enterprise security by tying data to owners, enabling privacy-preserving sharing, and eliminating single points of failure in digital authentication.
Perspectives on the Developing Cyber Workforce Strategy
Explore key pillars and objectives of the National Cyber Workforce and Education Strategy, addressing federal workforce, education, training, and digital awareness initiatives.
Verifiable Credential in Actions During ID-Verification Process
Explore modernizing credential proofing with verifiable credentials, reducing frustration in HR and IT. Learn implementation details through a customer scenario for efficient identity attestation.
Why Having a Security Reference Architecture Matters
Explore the importance of security reference architecture in adhering to frameworks, achieving Zero Trust and SASE, and enhancing Security Operations for effective threat management.
Managing the Mobile Endpoint Attack Surface
Explore risk management for enterprise mobility, focusing on mobile threats and mitigation strategies. Learn from NCCoE's analysis of common mobile device security threats.
Do Attackers Use Algorithms to Evade ML - An In-the-Wild Phishing Case Study
Explore phishing evasion tactics and trends, including 11 current techniques and potential use of automated adversarial attacks. Gain insights from a 5-year study on ML phish evasion competitions and real-world evasive phishing sites.
The Art of Metawar - Hacking & Weaponizing the Metaverse to Redefine Reality
Explore the metaverse as the 6th domain of warfare, examining how tech giants can manipulate reality, control thoughts, and influence behavior. Uncover mind-boggling privacy and security threats in immersive simulations.
Credential Sharing as a Service - The Dark Side of No Code
Explore attack techniques exploiting low-code apps in enterprises, revealing vulnerabilities throughout the cyber kill chain and highlighting the security risks of non-IT app development.
It's All Geek to Me - Communicating the Business Value of Zero Trust
Explore strategies for effectively communicating the business value of Zero Trust security to non-technical stakeholders, emphasizing its impact, priority, and benefits for organizations.