Platform Engineering with Backstage and Cloudify
Discover how to streamline platform engineering workflows by integrating Backstage and Cloudify for enhanced developer productivity and automated infrastructure management.
The 7 Stages of Refactoring - Understanding and Managing the Process
Discover the 7 stages of processing during system refactoring, from initial confidence through challenges to final implementation, with practical insights from a real-world Lambda system transformation.
Prompt Engineering - Steps Towards AI Native Tooling
Explore the evolving landscape of AI-native tooling through prompt engineering, from code generation to creative applications, while understanding its impact on the future of technology and development.
Network Protocols and Their Impact on Application Performance
Explore how network protocol choices in microservices architecture impact system performance, reliability, and troubleshooting across application, transport, and system layers, with practical insights for optimization.
Designing a CDK Construct Library for AWS Development Teams
Discover how to create AWS CDK construct libraries that empower dev teams with reusable, compliant building blocks while maintaining security and governance standards for streamlined cloud development.
Securing AI-Generated Code: Challenges and Solutions for the Future
Explore the critical challenges and solutions for securing AI-generated code, featuring practical tools and research for building AI security engineering capabilities.
Hackers in Jurassic Park: When Attackers Find a Way
Explore real-world cybersecurity breaches through engaging hacking stories, drawing parallels with Jurassic Park to understand how attackers penetrate seemingly secure digital systems.
Fuzzing - Finding Your Own Bugs and Zero-Days
Master the art of fuzzer creation and vulnerability discovery, exploring buffer overflow exploitation techniques with hands-on demonstrations and practical exploit development strategies.
Security Tooling Space - Latest Developments and Innovations
Explore the latest developments and innovations in blockchain security tooling, focusing on emerging threats, defensive strategies, and cutting-edge solutions for smart contract protection.
New Isn't Always Novel - Finding Basic Vulnerabilities in Enterprise Software
Discover how basic vulnerabilities in enterprise software led to a successful Pwn2Own contest entry, featuring a command injection exploit in Lexmark printers and practical security insights.
Hacking War Stories: From Prison Systems to Tech Companies - A Series of Unfortunate Events
Dive into real-world hacking adventures, from prison systems to major tech companies, exploring identification, exploitation techniques, and potential impact across different organizational contexts.
An Audacious Plan to Halt the Internet's Enshittification
Explore how internet platforms evolve from user-friendly to exploitative, and discover practical solutions including antitrust measures, privacy laws, and user empowerment tools to combat digital degradation.
Smashing the State Machine: Advanced Web Race Condition Attacks
Discover advanced web race-condition attack techniques, from limit-overrun exploits to state machine manipulation, with practical methodologies and tools for identifying and exploiting vulnerabilities.
Game Changing Advances in Windows Shellcode Analysis Using SHAREM Framework
Discover groundbreaking advances in Windows shellcode analysis through SHAREM framework, offering enhanced emulation, complete code coverage, and superior disassembly capabilities for security professionals.
Malware Design: Abusing Legacy Microsoft Transports and Session Architecture
Explore advanced malware design techniques and covert communication frameworks, focusing on Windows architecture exploitation and maintaining persistent access while evading detection systems.
Software Liability and Cybersecurity Policy - Shifting Development Practices
Explore software liability policies and their impact on cybersecurity through interactive legal exercises, focusing on Biden-Harris Strategy's Pillar 3 and future regulatory implications.
Automotive USB Fuzzing: Efficient Methods and Real-World Vulnerabilities
Dive into automotive USB fuzzing techniques and discover efficient methods for testing vehicle vulnerabilities through direct USB connections, featuring real-world case studies and practical demonstrations.
Taking Down Applications with Logic - DEF CON 31
Dive into advanced application security techniques and learn how logical vulnerabilities can be exploited to compromise web applications, demonstrated through real-world examples.
Grand Theft Actions - Abusing Self-Hosted GitHub Runners for Supply Chain Attacks
Dive into critical security vulnerabilities in GitHub Actions, exploring real-world attacks on self-hosted runners and learning how to prevent supply chain compromises in major open-source projects.
Secret Life of Rogue Devices: Lost IT Assets on the Public Marketplace
Uncover the alarming journey of lost corporate devices in public markets through data scraping, OCR clusters, reverse engineering, and conversations with underground collectors.
The XZ Backdoor Story: How a Supply Chain Attack Nearly Compromised SSH Servers
Uncover the gripping investigation of the XZ backdoor incident, exploring the mysterious maintainer Jia Tan, technical analysis of the compromise, and crucial lessons for open-source security.