Making of the BSides SF Astronaut Badge
Explore the creation of BSidesSF's Astronaut Badge, from technical aspects to logistics, and learn about innovative PCB printing with colorful artwork.
When is a Vulnerability Not a Vulnerability? Overcoming the Inundation of Noisy Supply Chain Security Alerts
Explore a counterintuitive approach to strengthening security by ignoring over 90% of vulnerability alerts, enabling improved workflows and behavior in supply chain security management.
What I Learned About Security Working Minimum Wage at Hollywood Video
Insights on security management drawn from teenage work experience at Hollywood Video, relating retail theft prevention to modern cybersecurity practices and principles.
Space and Cyberspace at the White House
Explore the White House's approach to space systems cybersecurity and national strategy, led by the Office of the National Cyber Director, aligning with Biden-Harris Administration's initiatives.
Windows 11 At Your Service
Explore Windows 11's automation feature and its potential security implications. Learn how users can create custom processes that are distributed and executed across machines.
Hacking the Hiring Process - Insider Tips for Your InfoSec Job Search
Insider tips from a security recruiter to enhance your InfoSec job search, covering resume optimization, networking strategies, LinkedIn profile improvements, and effective interview techniques.
Scalable Security - How to Win Friends and Not Burn Out Everyone
Insights on scaling security processes at Google, balancing effectiveness with minimal disruption, and maintaining team morale while achieving security goals.
Container Vuln Management with - Hopefully Minimal Burnout
Explore a graph-based approach for efficient vulnerability management in microservices, focusing on identifying and fixing inherited vulnerabilities across large-scale architectures.
Scraping After HiQ Labs v. LinkedIn
Explore recent legal developments affecting web scraping's legality, focusing on the HiQ Labs v. LinkedIn case and its implications for data collection practices.
Go Far Together - Building Your Squad
Discover practical strategies for assembling a supportive peer network to enhance collective success in the cybersecurity field.
Cameras, CACs & Clocks - A Story of Millions of Interrogated and Hacked xIoT Devices
Demonstración en vivo de ciberataques a dispositivos IoT, con hallazgos de investigación de seguridad y técnicas de mitigación de amenazas para proteger contra actores maliciosos.
Designing Consumer Account Recovery in a 2FA World
Explore strategies for secure account recovery with 2FA, balancing user convenience and protection against account takeovers while minimizing support overhead.
How to CTF Infra - Beyond the Challenges and Flags
Explore the infrastructure behind Capture The Flag competitions, including user registration, flag submission, and scoreboard management for event organizers.
Building Production-Grade End to End Encrypted Applications
Insights on building end-to-end encrypted applications, addressing challenges in security, compliance, abuse prevention, availability, and observability for privacy-focused collaborative products.
Hackers Don't Care About Scope
Explore the limitations of narrow bug bounty scopes and learn why expanding them can enhance security, as hackers and cybercriminals don't adhere to predefined boundaries.
The State of Blockchain Security - 2023 Edition
In-depth analysis of major blockchain security incidents, trends, and opportunities in DeFi, exchanges, and blockchain ecosystems for 2023, offering insights into this evolving field.
Placeholder for Dayzzz
Explore vulnerabilities in support systems and live chat services by exploiting placeholders to extract sensitive user data, as demonstrated by Rojan Rijal's research findings.
Using Machine Learning to Detect Sensitive Documents on SharePoint
Explore machine learning techniques for identifying sensitive documents on SharePoint, addressing insider threats and data exfiltration risks while discussing unique challenges in security-focused ML model development.
New Apps, Good Snacks - Effective Threat Modeling for New Territory
Explore effective threat modeling techniques for new features and devices, focusing on team education, security communication, and creating understandable models for diverse audiences.
Sure, Let Business Users Build Their Own. What Could Go Wrong?
Explore the risks and challenges of empowering business users with Low-Code/No-Code platforms, examining potential security implications and enterprise-wide impacts.
The Big "P" Problem in Cybersecurity
Explore the growing trend of cybersecurity professionals leaving the field, understand the underlying causes, and discover potential solutions to address this critical industry challenge.