Sex, Lies and Instant Messenger
Explore the intersection of privacy, security, and communication in instant messaging platforms, examining potential risks and ethical considerations.
All Your Logs Are Belong To You!
Discover effective log management techniques and their crucial role in cybersecurity. Learn to harness the power of logs for enhanced threat detection and incident response.
The Funny Thing About Information Security
Humorous exploration of information security concepts, challenges, and best practices, offering unique insights and practical advice for professionals in the field.
Jedi Mind Tricks
Explore psychological techniques for effective communication and influence in cybersecurity, drawing insights from Jedi mind tricks to enhance professional interactions.
Layer 8 Security
Explore Layer 8 Security with Brian Honan, delving into human-centric cybersecurity strategies and their critical role in protecting organizations from evolving threats.
DNS Tunnelling - It's All in the Name!
Explore DNS tunneling techniques for data exfiltration and command-and-control, including detection methods and practical demonstrations of this stealthy network attack vector.
Finux's Historical Tour of IDS Evasion, Insertions and Other Oddities
Explore the history and limitations of network intrusion detection systems, examining evasion techniques and inherent problems while critically evaluating vendor claims and industry acceptance.
Continuous Security Testing in a DevOps World
Explore continuous security testing in DevOps using BDD-Security framework. Learn to specify requirements, create executable tests, and integrate with CI/CD for on-demand security assessments.
Easy Ways to Bypass Anti Virus Systems
Discover simple techniques to evade antivirus systems, including signature detection, emulation, sandboxing, and firewalls. Learn how attackers can bypass popular security measures with minimal effort and resources.
CSRFT - A Toolkit for CSRF Vulnerabilities
Explore a Python-based toolkit for exploiting CSRF vulnerabilities, including demos of complex exploitation techniques and a custom HTTP proxy for injecting malicious iframes.
Layers on Layers - Bypassing Security for Fun and Profit V2
Explore kernel vulnerabilities in Windows and their impact on security solutions. Learn how to bypass multiple layers of protection and discuss more robust defensive strategies.
MITRE D3FEND
Explore MITRE D3FEND, a knowledge graph of cybersecurity countermeasures. Learn about its structure, use cases, and how it complements the ATT&CK framework for enhanced defensive strategies.
DFIR - Don't Forget Your Roots
Explore essential DFIR skills, from understanding applications and APIs to analyzing C2 beacons, with insights from an experienced practitioner's career journey.
Think Zero Days Are Your Biggest Risk - Think Again
Explore cyber hygiene beyond zero-day threats, understanding vulnerabilities and advisories to enhance overall security posture and risk management.
JWTs and Why They Suck
Explore the pitfalls of JWTs, their unnecessary complexity, and better alternatives for secure authentication in web applications.
Big Data Lake, Big Data Leak
Explore the security risks associated with big data lakes and learn strategies to prevent data leaks in large-scale data storage systems.
Making Big Datasets Searchable
Explore techniques for efficiently searching and analyzing large datasets, enhancing data accessibility and insights for security professionals.
MITRE D3FEND
Explore MITRE D3FEND, a framework for cybersecurity defense techniques. Learn about its structure, applications, and how it complements ATT&CK to enhance organizational security posture.
Introduction to Red Team Tooling and Opsec
Explore modern red team techniques, tools, and operational security practices for effective penetration testing and cybersecurity assessments.
Chaos Engineering - Break It On Purpose
Explore chaos engineering principles, benefits, and implementation strategies to enhance system resilience and reliability through controlled failure experiments.
The Challenges of Remediation During a Cyber Incident
Explore strategic, technical, and industry-wide challenges in cybersecurity incident remediation, featuring a real-world case study and expert insights.