Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
Learn to combat vulnerability fatigue using data analytics principles from the US Tsunami Warning Center for real-time, high-impact security alerts.
Purple is the New Black - Modern Approaches to Application Security
Explore modern application security approaches combining defense, offense, automation, and continuous learning for various app types, including zero trust, supply chain, and microservices.
Everything Is Awful - And You're Not Helping
Humorous exploration of security failures and cynicism in the tech industry, highlighting common pitfalls and the challenges of creating truly secure systems.
Securing the Distributed Workforce
Explore innovative security solutions for distributed workforces, addressing challenges in user protection, monitoring, and maintaining a secure environment in cloud-based and remote work settings.
Reverse Engineering a DOS PC FMV Game from 1994
Explore the intricacies of reverse engineering a 1994 DOS PC FMV game, uncovering techniques and challenges in dissecting vintage software architecture.
Please Inject Me - A x64 Code Injection
Explore advanced x64 code injection techniques, focusing on practical implementation and security implications in modern Windows systems.
Securing Fast and Furious DevOps Pipelines
Learn strategies to secure DevOps pipelines without compromising speed, focusing on integrating security measures seamlessly into fast-paced development workflows.
My First Program - A Pentesting Tool
Learn to create a pentesting tool using Python and the Shodan API. Explore the journey of a security professional's first coding project, from basic functions to advanced features.
Aletheia - GPU Accelerated File Carving
Explore GPU-accelerated file carving techniques to enhance digital forensics efficiency, with insights on improving open-source tools and introducing novel methods for faster data recovery.
Forensicating Windows Artifacts - Investigation Without Event Logs
Discover essential Windows artifacts for forensic investigations without event logs. Learn to leverage prefetch files, registry keys, and browser data for effective incident response.
Usernames, The Missing Piece - The OSINT Jigsaw Puzzle
Explore the risks of shared usernames across services and their significance in OSINT investigations, challenging assumptions about username disclosure and recycling.
The Definition of Madness
Explore the recurring issues in InfoSec and learn strategies to make cybersecurity more accessible and inclusive, challenging traditional approaches.
Watching the Watchers - The Stalkerware Surveillance Ecosystem
Explore the hidden world of consumer-grade surveillance tools and their impact on privacy, based on months of research into the stalkerware industry's technical and non-technical aspects.
Exploring Emotet, An Elaborate Everyday Enigma
Dive into the intricacies of Emotet, the notorious and evolving malware family. Learn about its sophisticated operation, components, and the investigative techniques used to reverse engineer this digital threat.
A Newbie's Talk On Mobile Dangers Through The Looking Glass
Explore vulnerabilities in rooted Android devices and potential attacks using Raspberry Pi and USB-OTG accessories. Discusses programmatic rooting, charging port risks, and past iOS vulnerabilities.
SOC It Up! - Common Frustrations and Solutions in SOC Teams Today
Explore common SOC team challenges, current solutions, and future strategies for enhancing security operations effectiveness and team cohesion.
Fixing the Internet's Auto-Immune Problem - Bilateral Safe Harbor for Good-Faith Hackers
Exploring legal protections for ethical hackers, advocating for standardized Safe Harbor language in vulnerability disclosure programs to encourage cybersecurity collaboration without legal risks.
Breaking the Bodyguards - Tech Enabled Crime
Explore tech-enabled crime and its impact on personal security, with insights on protective measures and emerging threats in the digital age.
One Year in Security - What Was That Thing Called Again?
Explore a security professional's first-year journey, covering challenges like imposter syndrome, burnout, and continuous learning in the fast-paced cybersecurity field.
Diggin Deep into Newly Created Domains
Explore techniques for investigating newly registered domains, uncovering potential threats, and enhancing cybersecurity through proactive domain analysis.
Why InfoSec Needs Rookies Like Us
Discover the importance of newcomers in InfoSec, addressing skills shortages, diversity, and stakeholder management while exploring strategies to attract and retain talent.