Planning and Executing a Red Team Engagement
Planning and executing a red team engagement: strategies, tools, and techniques for simulating real-world cyber attacks to assess and improve an organization's security posture and incident response capabilities.
Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure
Explore Azure Log Analytics exploitation as a covert channel, uncovering potential security threats in cloud logging infrastructure and learning mitigation strategies.
Got Popcorn? What's on the Vuln Channel Tonight?
Explore a platform for automated code scanning and vulnerability data streaming, designed to provide developers with fast, timely information on potential security issues.
So You Think You Can Secure Your Cloud - Red Team Engagements in GCP
Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.
Don't Turn Your Back on Ransomware
Explore ransomware's evolution, attack methods, and defense strategies. Learn to sharpen your cybersecurity skills against this persistent threat through real-world examples and practical mitigation techniques.
Achieving HITRUST on a Budget
Learn how Ginger achieved HITRUST certification efficiently, saving time and money. Discover strategies for streamlined compliance, including self-assessment, program integration, and leveraging existing controls.
Avoiding Insidious Points of Compromise in Infrastructure Access Systems
Explore war stories and learn to build secure infrastructure access systems. Analyze classic incidents and discover why the industry's "zero-trust" definition may be flawed.
XSS Mitigation - The State of the Art
Comprehensive overview of XSS attacks and modern defense strategies, covering browser-based, server-side, and framework-specific mitigations for web developers and security professionals.
Threat Hunting - Using MITRE ATT&CK Against Carbanak Malware
Explore threat hunting using MITRE ATT&CK framework against Carbanak malware, covering tactics, techniques, and procedures for effective cybersecurity defense and mitigation strategies.
Mistakes Made Integrating Security Scanning into CI/CD
Explore common pitfalls and solutions for integrating security scanning into CI/CD pipelines, learning from real-world experiences and best practices.
Fantastic AWS Attacks and Where to Find Them
Explore AWS attack techniques and build effective cloud defenses using the ATT&CK framework. Learn to create and operationalize detections for enhanced AWS infrastructure security.
Graph Based Detection and Response with Grapl
Explore graph-based security analytics with Grapl, leveraging Python for powerful attack detection, behavior analysis, and streamlined investigations in complex environments.
Self Care for Security Professionals
Strategies for managing mental health in cybersecurity careers, addressing burnout, stress, and work-life balance through self-care techniques and personal experiences.
Guarding Against Protocol Subversion at Coinbase
Explore blockchain security strategies at Coinbase, focusing on safeguarding assets against protocol subversion, 51% attacks, and smart contract vulnerabilities in Proof of Work and Ethereum networks.
Surfing the Motivation Wave to Create Security Behavior Change
Explore strategies for motivating employees to adopt secure behaviors, leveraging behavioral science and timely events to drive lasting change in organizational security culture.
You Might Still Need Patches for Denim
Explore container patch management strategies, including image registry maintenance, continuous deployment, and Google's approach to critical vulnerability patching without downtime.
Concrete Steps to Create a Security Culture
Practical strategies for fostering a strong security culture in organizations, with actionable examples and insights on measuring success in cultural change initiatives.
Building Identity for an Open Perimeter
Explore Netflix's cloud-first security approach, focusing on identity as the new perimeter through SSO, MFA, and adaptive authentication for a location-independent strategy.
Navigating Passwordless Authentication with FIDO2 & WebAuthn
Explore FIDO2 and WebAuthn standards for passwordless authentication, learn implementation strategies, and discover how to enhance security while improving user experience.
The IoT Hacker's Toolkit
Explore essential hardware and software tools for IoT security assessment, covering interfaces, analysis techniques, and skill-building for embedded device evaluation.
No More XSS - Deploying CSP with Nonces and Strict-Dynamic
Learn to implement Content Security Policy with nonces and strict-dynamic to prevent XSS attacks. Discover practical deployment strategies for Pinterest and Instapaper, and understand potential vulnerabilities.