FAIR STRIDE - Building Business Relevant Threat Models
Explore FAIR STRIDE, a method for creating application threat models to determine ROI on security controls and prioritize risk reduction efforts for scalable product security.
Overwatch - A Serverless Approach to Orchestrating Your Security Automation
Discover Overwatch: a serverless security orchestration solution in Go, simplifying CI management and infrastructure maintenance for lean security teams shifting left.
MTV Reboot - My Super Sweet 16-Bit Malware - MS-DOS Edition - TSR Remix
Deep-dive analysis of MS-DOS malware, exploring infection techniques, stealth mechanisms, and persistence methods. Highlights technical complexity and graphical displays in 16-bit DOS malware through reverse-engineering.
Sleeping With One AI Open - An Introduction to Attacks Against Artificial Intelligence and Machine Learning
Explore vulnerabilities in AI systems and learn about various attacks on machine learning algorithms, their potential impacts, and the importance of AI security awareness.
Growing Your Skillset with Capture the Flag
Strategies for maximizing learning in Capture the Flag competitions, including tips for beginners and insights from an organizer's perspective on tackling new topics effectively.
HALT AND CATCH FIRE - Social Engineering CTFs for Fun to a Job as a Professional Red Team Social Engineer
Explore the transition from social engineering competitions to professional red team engagements, examining the differences in tactics, strategies, and real-world applications.
Security Compliance as Code
Explore how to transform security compliance frameworks into code, streamlining processes and reducing burden on engineering teams while maintaining industry standards and customer trust.
Career Village - Tales from a Hiring Manager
Gain valuable insights on interviewing dos and don'ts from an experienced hiring manager's perspective, enhancing your chances of success in the job market.
HSMs in Plain Envelopes - A Code Signing Story
Explore the challenges of code signing for open source developers, addressing outdated mechanisms and high costs while examining the complexities and frustrations involved in the process.
Security Hiring Trends
Explore current security hiring trends, including top-paying industries, in-demand skills, and strategies for landing interviews and securing job offers in the evolving tech landscape.
Hunting Supply Chain Threats Using Anomaly Detection
Explore a case study on detecting supply chain threats through anomaly detection in Cloud API logs, offering insights into advanced cybersecurity techniques.
How Do You Trust Your Open Source Software?
Explore OpenSSF Scorecard, an automated tool assessing software security heuristics. Learn how it evaluates dependencies and identifies areas for improving security posture in open source projects.
Level Up Your Career - A Panel on Staff+ Engineering
Expert panel discusses transitioning from Senior to Staff+ engineering in security, offering insights on career advancement and answering audience questions about high-level roles in cybersecurity.
Backup Plans for Your Backup Plans for Your Backup Plans
Explore the complexities of Business Continuity Planning, focusing on cascading risks and their impacts. Learn from space-related examples to enhance your organization's resilience and preparedness.
Certificate Transparency Logs - Roadmaps to Riches or Ruin?
Explore the dual nature of Certificate Transparency Logs in Web PKI: their role in ensuring certificate authenticity and potential misuse by malicious actors for reconnaissance.
How Segment Proactively Protects Customer's API Keys
Discover Segment's innovative approach to safeguarding API keys, addressing the critical issue of secret leaks on GitHub and enhancing overall security for user data and actions.
Building an Endpoint Security Program from Scratch
Learn to develop a comprehensive endpoint security program to protect your organization's internal resources and data from potential threats and compromised devices.
Lessons Learned While Building a Privacy Operations Center at Headspace Health
Insights on creating a Privacy Operations Center in digital healthcare, addressing global regulations and overcoming challenges in data protection and compliance.
Secret Hunting
Discover techniques for finding, rotating, and safely managing secrets in applications. Learn best practices for secure secret storage and handling compromised credentials.
To Normalized Logs, and Beyond - Building a Threat Detection Platform from Scratch
Deep dive into building a scalable, lean threat detection pipeline. Learn automation techniques for data ingestion, detections-as-code, and filtering to create a serverless platform for effective threat detection.
The Expanding Universe of Cyber Threats
Explore cyber threat intelligence as a solution for managing the rapidly expanding threat landscape, prioritizing threats, and providing actionable insights to decision-makers in enterprise security.