Employee Hijacking - Building a Hacktober Awareness Program
Engaging Hacktober program teaches employees security awareness through interactive hacking exercises, prizes, and fun activities, improving human defense against cyber threats.
Developing a Rugged DevOps Approach to Cloud Security
Strategies for integrating continuous security into DevOps processes, emphasizing automation, monitoring, and agile security practices for cloud environments.
Digital Intel Gathering - OSINT for Blue - Red Teams
Explore OSINT techniques for cybersecurity, leveraging social media and public records to enhance threat intelligence and defensive strategies.
The Art of the Jedi Mind Trick
Explore effective communication techniques for security professionals to convey messages to management, overcome obstacles, and drive real change in organizations.
Using Behavior to Protect Cloud Servers
Explore behavior-based analytics for cloud server security, focusing on dynamic privilege management to identify and prevent insider threats and privilege escalation attacks in real-time.
What Should and Shouldn't Scare You - Kubernetes and Containers
Explore Kubernetes and container security: debunking myths, identifying real threats, and discovering opportunities for improved security practices in modern app deployment.
Creating Data-Driven Threat Intelligence Signals in a Zero Trust Environment
Explore dynamic, data-driven threat intelligence signals for "Zero Trust" environments, reshaping security approaches for modern network architectures.
The Red Square - Mapping the Connections Inside Russia’s APT Ecosystem
Explore Russian APT ecosystem analysis, learn about open-source tools for investigating cyber attacks, and gain insights into the connections within this complex landscape.
Secure by Design - Usable Security Tooling
Explore strategies for creating effective security products by prioritizing usability, leading to better and more secure experiences for users.
So You’re the First Security Hire - Creating a Security Program and Integrating Security into Your Company’s Culture
Guidance for pioneering security professionals on establishing a robust security program, integrating it into company culture, and balancing protection with business needs.
Operation PZCHAO - Dissecting a Cyber-Attack
Explore a sophisticated cyber-attack targeting Asian institutions, dissecting its modules, capabilities, and impact on victims' data in this in-depth analysis of Operation PZCHAO.
Owning the Smart Home with Logitech Harmony Hub
Explore reverse engineering of Logitech's Harmony smart home hub, uncovering vulnerabilities and discussing their implications for device security and potential exploitation.
Fighting Email Phishing with a Custom Cloud IDS
Learn to build a custom cloud-based email IDS to combat phishing, enhancing security while improving operational efficiency. Explore real-time threat adaptation and AWS implementation.
DNS Attacks - Past, Present, and Future
Explore DNS vulnerabilities, their historical impact, and potential future threats in this comprehensive overview of attack techniques and pentesting applications.
Early Detection through Deception
Explore early threat detection through deception techniques, including examples of network intrusion, system compromise, and phishing prevention strategies.
Hack for Show, Report for Dough - Brian King
Learn effective techniques for crafting compelling penetration testing reports that resonate with both technical and non-technical audiences, enhancing communication and impact.
Blue Teamin on a Budget of Zero - Kyle Bubp
Learn essential blue team security practices and tools for organizations with limited budgets, covering frameworks, documentation, network mapping, vulnerability scanning, and intrusion detection.
Windows Event Logs - Zero to Hero
Comprehensive guide to leveraging Windows Event Logs for security monitoring, from basic concepts to advanced techniques for threat detection and incident response.
Weaponizing Splunk - Using Blue Team Tools for Evil
Explore how Splunk, a popular security tool, can be exploited for malicious purposes. Learn about vulnerabilities, attack surfaces, and practical demonstrations of potential threats.
Windows Operating System Archaeology - Casey Smith and Matt Nelson
Explore Windows OS archaeology, focusing on Component Object Model, persistence techniques, and evasion methods for enhanced system understanding and security awareness.
OSINT for the Win - Tools and Techniques to Maximize Effectiveness of Your Social Engineering
Explore OSINT techniques to enhance social engineering effectiveness, covering principles of persuasion, intel gathering methods, and mitigation strategies for improved cybersecurity.