Sandboxes All the Way Down - A Hitchhiker's Guide to Platform Containment
Explore modern sandboxes and isolation primitives for enhanced security. Learn when and how to use containment tools, with practical insights for immediate implementation.
The Best Defense is a Great Offense - Leveraging Automated OffSec to Build Proactive C2 Detections
Learn to develop proactive Command & Control (C2) threat detections using automated offensive security techniques. Explore push-button infrastructure for simulating complex attacker behaviors and generating high-fidelity signals.
Defining a Data Masking Framework at Scale
Explore tokenization and obfuscation as data security techniques, addressing challenges in implementing large-scale frameworks alongside conventional encryption methods.
First Security Hire - Building a Security Roadmap and Team from Scratch
Expert insights on building a security program and fostering cybersecurity culture in early-stage companies, covering roadmap creation and team development from scratch.
Advanced Attack Vectors in Azure Environments
Explore privilege escalation techniques in Azure's integrated ecosystem. Learn core concepts and advanced attack vectors for enhanced cloud security awareness.
Lost in Space - How to Navigate Corporate Security as an Engineer
Insights from a backend engineer turned security professional on navigating corporate security, effective communication, and maximizing your new role beyond day-to-day engineering tasks.
Securing the Pipeline - Protecting Self-Hosted GitHub Runners
Learn to secure self-hosted GitHub runners, mitigate risks of compromised access tokens, and implement key configuration adjustments to protect CI/CD pipelines from potential network breaches.
New Face, Who Dis? - Recent Adversarial Approaches to Facial Recognition
Explore recent adversarial techniques to protect facial biometrics, including an open-source mobile app demonstration for real-world privacy preservation against facial recognition.
No Adversaries - Getting Users on Your Side for Tough Transformations
Strategies for effectively communicating complex technical information to diverse audiences, focusing on user motivation and tailored approaches for successful implementation of transformative solutions.
WebAuthn, Yubikeys, and You - What We Wish We Knew Before Rolling Out WebAuthn for Internal Use
Insights from Discord's implementation of WebAuthn and Yubikeys for enhanced internal security. Learn about challenges, best practices, and lessons learned in deploying FIDO2/WebAuthn as a superior MFA solution.
Take The Helm - Guidance For Prospective Future CISOs
Expert panel shares insights on becoming a first-time CISO or Head of Security, covering preparation, pursuit, and success strategies for aspiring security leaders.
Catching the Phisherman
Uncover the largest credential harvesting campaign: its discovery, impact, and ongoing response. Gain insights into cybersecurity threats and investigative techniques.
You Don't Have to Patch
Explore sandboxing and isolation as effective alternatives to rapid patching in cybersecurity. Learn strategies to enhance defense without solely relying on immediate updates.
The History of Ransomware - From Floppies to Droppers, and Beyond
Explore ransomware's evolution from floppy disks to modern cyber threats, uncovering its strange history and valuable lessons for today's cybersecurity landscape.
Protecting Pinner Passwords
Explore innovative techniques for enhancing password security and user experience on Pinterest, addressing common password-related challenges in social media platforms.
Launch Control - Automating a Security Baseline in the Cloud at Scale
Learn to deploy cloud-native security controls at scale, using declarative configuration for an automated, self-healing security baseline across multiple cloud environments.
Life of a Bug - An Insight on the GitHub Bounty Program
Explore GitHub's bug bounty program, from initial submission to resolution. Learn about the roles of Bug Bounty and PSIRT teams, and gain insights into the incident response process.
NLP for Security Log Analysis - Learning to Crawl Before You Run
Explore the application of NLP in security analysis, focusing on embeddings for insider threat detection and the impact of large language models on the field.
Disrupting Malicious Traffic with Egress Proxies
Learn to detect and disrupt malicious network traffic using egress proxies. Discover techniques to ensure trusted outbound connections and protect against external threats and data exfiltration.
Hacking Policy and Policy Hacking - A Hacker Guide to the Universe of Cyber Policy
Explore the evolving landscape of cybersecurity policy, its impact on the industry, and opportunities for hackers to influence regulations. Learn about global trends, case studies, and tools for effective policy engagement.
Stop Committing Your Secrets - Git Hooks To The Rescue
Learn to prevent accidental secret commits using Git hooks, enhancing code security and safeguarding sensitive information before it reaches remote repositories.