Painful Learnings of Applying AI in Security - Don't Make This Mistake
Explore AI's limitations in AppSec, examining real-world examples and a live demo. Learn about the RAG Framework for more reliable AI integration in security applications.
Understanding Exploitability with VEX, EPSS, and Other Standard Frameworks
Explore key frameworks for assessing software vulnerabilities, including VEX, EPSS, CVSS, and SBOMs. Learn to enhance security through automated policy and GitOps practices.
Mastering Web Security - Myths, Strategies and Challenges
Debunking security myths and exploring effective strategies for web application protection. Practical insights on vulnerabilities, defense mechanisms, and organizational approaches to enhance cybersecurity.
DevSecOps Tutorial - Building a Pipeline with GitHub Actions and Docker Scout
Learn to implement DevSecOps practices using GitHub Actions and Docker Scout. Covers SAST scanning, container image scanning, and integrating security into the development pipeline.
From Security Practitioner to CEO: Building a $1B Security Company
Explore the journey from security practitioner to CEO, uncovering insights on building a billion-dollar security company with Erkang Zheng.
Applying Generative AI to Container CVE Remediation in CI Pipelines
Discover how to leverage generative AI for automating container vulnerability remediation in CI pipelines, with practical demonstrations and implementable solutions for efficient security management.
Beyond Manual: Enhancing and Scaling Security with Automation
Discover how to scale security operations through automation, focusing on practical strategies and tools to enhance your organization's security posture efficiently.
Fortifying AIOps with CSAF and VEX Integration for Enhanced Security Management
Discover how to enhance AIOps security through CSAF and VEX integration, enabling real-time vulnerability management and improved threat response for server and storage infrastructure.
PentestGPT: Evaluating and Harnessing Large Language Models for Automated Penetration Testing
Explore how PentestGPT leverages LLMs to automate penetration testing, addressing challenges in context maintenance and demonstrating significant improvements in task completion for security testing.
Blue Team Tips for Using Scorecard in Security Automation
Discover how to leverage OpenSSF Scorecard and Allstar for automated security scanning of repositories, focusing on blue team strategies for securing first-party repos and implementing proactive security measures.
Application Security Posture Management (ASPM) - Navigating Beyond the Hype Cycle
Discover practical insights into Application Security Posture Management (ASPM), learning to separate hype from reality and implement effective strategies that work for your organization's needs.
Teaching Cyber Safety as a Life Skill | Nidhi Srivastava | TEDxDCAC
In this powerful talk, Nidhi Srivastava, cybersecurity professional and founder of DigiArmorx LLC, explores a growing reality: today’s children are growing up in two worlds at once—the physical world and the digital world. While we teach children how to cross the road safely or avoid strangers in r
Black Hat USA 2025
Black Hat USA 2025