Something Died Inside Your Git Repo - Recognizing the Smell of Insecure Code
Learn to identify and address insecure code within Git repositories, enhancing your ability to maintain secure and robust software projects.
Hacking Blockchains
Explore blockchain vulnerabilities and attack vectors, focusing on smart contract security and practical hacking techniques for distributed ledger systems.
Cryptology - It's a Scalpel, Not a Hammer
Explore cryptology's role in cybersecurity, from classic ciphers to modern encryption techniques, and learn how to effectively apply cryptographic principles to protect against various adversarial threats.
Hacking VDI 101
Explore techniques for exploiting vulnerabilities in Virtual Desktop Infrastructure (VDI) environments, focusing on common attack vectors and security considerations.
Containers - Exploits, Surprises, and Security
Explore container security, exploits, and surprises with insights on protecting containerized applications and infrastructure from potential vulnerabilities and attacks.
Gullivers Travels - Security Exploits and Vulnerabilities Around the Globe
Explore global security exploits and vulnerabilities, gaining insights into diverse cyber threats and defense strategies across different regions and cultures.
How Online Dating Made Me Better at Threat Modeling
Explore how online dating principles apply to threat modeling in cybersecurity, enhancing risk assessment and data protection strategies.
Mixing and Baking a New AppSec Person - Some Missing Audio
Learn strategies for developing application security professionals, including key skills, training approaches, and industry best practices.
Behavioral Security and Offensive Psychology at Scale
Explore behavioral security and offensive psychology techniques for large-scale applications, enhancing cybersecurity strategies through psychological insights and human behavior analysis.
Shadow IT in the Cloud
Explore shadow IT challenges in cloud environments and learn strategies for managing unauthorized software and services to enhance organizational security.
Optimal Security Proofs for Full Domain Hash, Revisited
Explore optimal security proofs for RSA Full Domain Hash signatures, addressing flaws in previous work and presenting new results on lossiness and extensions to PSS.
Algebraic Decomposition for Probing Security
Explore algebraic decomposition techniques for enhancing probing security in cryptographic systems, focusing on advanced mathematical approaches to protect against side-channel attacks.
Crypto at Scale
Explore cryptography challenges at scale, including Heartbleed and Poodle vulnerabilities, with insights on security architecture and practical solutions for large-scale systems.
Unknown-Input Attacks in the Parallel Setting - Improving the Security of the
Explore advanced cryptographic techniques for enhancing security against unknown-input attacks in parallel settings, with insights from leading researchers in the field.
Insecure Web Applications
Explore case studies on web application security fixes, focusing on implementation challenges and lessons learned to avoid common pitfalls in vulnerability mitigation.
The Anatomy of an Exploit
Explore exploit development through C and x86_64 assembly, gaining insights into security vulnerabilities and the attacker's perspective for more secure coding practices.
API Vulnerabilities and What to Do About Them
Explore top API security vulnerabilities and practical mitigations. Learn about OWASP's API Security Top 10, current threat landscape, and essential strategies to protect your APIs from common attacks.
Making C Less Dangerous in the Linux Kernel
Exploring strategies to enhance C safety in the Linux kernel, including removing Variable Length Arrays, enforcing stack variable initialization, and implementing Control Flow Integrity measures.
Unsafe Defaults - Deploying Kubernetes Safer
Explore common security pitfalls in self-hosted Kubernetes deployments and learn practical tips for enhancing cluster safety, from SSL configurations to pod security policies.
C-C++ vs Security
Explore security vulnerabilities, pitfalls, and unexpected behaviors in C/C++ programming from a researcher's perspective. Learn about classical and lesser-known bugs in software development.
Oh No! My Regex Is Causing a Denial of Service! What Can I Do About It?
Explore regex performance issues, including ReDoS, with practical examples. Learn to detect problematic expressions, improve performance, and defend against malicious inputs using static analysis techniques.