Security and DevOps Are Really Best Friends
Explore the synergy between security and DevOps, focusing on asset management, automation, and best practices for enhanced cybersecurity in modern IT environments.
Abusing Password Reuse at Scale - Bcrypt and Beyond
Explore advanced techniques for exploiting password reuse vulnerabilities, focusing on bcrypt and other hashing methods to enhance cybersecurity knowledge and ethical hacking skills.
Securing Robots at Scale
Explore robot security challenges, attack surfaces, and protection strategies for hardware, software, and user privacy in the era of widespread robotic adoption.
How I Met Your Password
Explore advanced password cracking techniques, from leveraging leaks to using Markov chains and attacking phrases in multiple languages. Learn cutting-edge methods for WPA2 and heavy-duty algorithms.
Tuning The Warp Drive with Laforge - New Tool for Building Security Competitions
Explore a new tool for creating resilient security competition infrastructures, addressing challenges in competition networks and offering innovative solutions for organizers.
Building Ambassadors to Reduce Friction, Drive Change, and Get Sh*t Done
Discover strategies for building effective ambassadors to drive change, reduce friction, and improve organizational efficiency in cybersecurity and beyond.
Security Awareness Training Refresh
Refresh your security awareness with practical tips on password management, phishing prevention, and role-based training. Learn to engage users effectively and create impactful, tailored security programs.
Cyber Safety Disclosure
Explore cyber safety disclosure with experts, covering medical device security, vulnerability equities, and government initiatives. Gain insights into critical cybersecurity challenges and solutions.
Vulnerability Management 101 - Practical Experience and Recommendations
Practical insights on vulnerability management, covering discovery, scoring, and risk acceptance plans, with recommendations for effective implementation in various organizational contexts.
Lessons Learned by the WordPress Security Team
Insights from WordPress Security Team's journey: challenges, strategies, and lessons in safeguarding open-source software and educating users on cybersecurity best practices.
Red Teaming a Manufacturing Network - Without Crashing It
Explore techniques for safely red teaming manufacturing networks, including reconnaissance, passive methods, and potential attack vectors, while learning mitigation strategies and best practices.
Active Directory Password Blacklisting
Explore Active Directory password blacklisting techniques, implementation challenges, and testing frameworks for enhanced security in Windows environments.
You're Good and You Should Feel Good
Gain insights on interviewing, career growth, and leadership in cybersecurity. Learn to navigate company culture, contribute effectively, and seize opportunities for professional development.
The Chrome Crusader
Explore Chrome extension vulnerabilities, security considerations, and potential exploits. Learn about architecture, headers, and isolation techniques for safer browsing experiences.
ATT&CKing the Status Quo - Improving Threat Intel and Cyber Defense with MITRE ATT&CK
Explore MITRE ATT&CK framework to enhance threat intelligence and cyber defense strategies. Learn implementation tips, detection techniques, and industry examples for improved security posture.
Hire Ground Kickoff
Practical advice for aspiring cybersecurity professionals on resumes, interviews, and overcoming imposter syndrome. Insights on navigating the competitive entry-level job market.
Writing Malware Without Writing Code
Explore techniques for creating malware without coding, covering keyloggers, ransomware, and persistence methods. Learn about ethical hacking and cybersecurity vulnerabilities.
CheckPlease - Payload-Agnostic Sandbox Detection
Explore payload-agnostic sandbox detection techniques, including sleep evasion, encryption, and user activity analysis. Learn to build profiles and implement various detection methods across languages.
Pwning Software-Defined Networking - SDN
Explore software-defined networking vulnerabilities, focusing on OpenFlow, controllers, and REST APIs. Learn to manipulate traffic flow and exploit SDN weaknesses.
YARA-as-a-Service - Real-Time Serverless Malware Detection
Explore real-time serverless malware detection using YARA and Binary Alert. Learn about scalable security tools, features, and implementation for enhanced threat protection.
Zero Trust Networks - In Theory and in Practice
Comprehensive exploration of Zero Trust Networks, covering theory, implementation strategies, key systems, and practical considerations for enhanced network security.