Harnessing AI in Security Operations
Explore AI's role in SOCs, addressing threat abstraction and correlation challenges. Enhance AI solution evaluation skills, separate hype from reality, and design AI-ready security operations.
The Art of Compromising Command and Control Servers - A Web Application Vulnerabilities Perspective
Dive into techniques for exploiting command and control server vulnerabilities, uncovering infrastructure weaknesses, and exposing threat actors through common web application security flaws.
Leverage Recorded Future Playbooks to Automatically Integrate Threat Intelligence with Microsoft Azure
Automate threat intelligence integration in Microsoft Azure using Recorded Future Playbooks for enhanced detection, enrichment, and prevention in Sentinel and Defender ATP.
Web Application Honeypot Threat Intelligence - Techniques and Implementation
Explore web application honeypots for threat intelligence, using ModSecurity and OWASP Core Rule Set to capture attacker activity and protect software against emerging threats.
Reduce Security Alert Fatigue - Focus on What Matters
Learn strategies to prioritize and manage security alerts effectively, minimizing fatigue and focusing on critical issues in cloud-native environments.
Operation Triangulation: Uncovering a Sophisticated Zero-Click Attack on iPhones
Unveiling a sophisticated zero-click iOS attack chain: discovery, analysis, and implications of Operation Triangulation, a highly advanced spyware targeting researchers' iPhones.
The Ever-Shifting Habits of Cloud-Focused Malware Campaigns
Explore evolving cloud-focused malware campaigns, their diverse objectives beyond cryptojacking, and cloud-specific TTPs. Gain insights into recent trends and the use of cloud services in supporting malware attacks.
The Anatomy of Cloud Attacks
Uncover cloud attackers' tactics and mindsets through honeypot analysis. Learn key defense strategies against threats like Headcrab Kinsing and Teamtnt in this insightful session on cloud security.
Linux Security Challenges and Solutions - Panel Discussion
Experts discuss current Linux security challenges and potential solutions, offering insights on improving system protection and addressing vulnerabilities in open-source environments.
The Renaissance of Cyber Physical Offensive Capabilities
Explore the resurgence of cyber-physical offensive capabilities and their implications for modern security landscapes in this insightful presentation by Daniel Kapellmann Zafra.
Decoding Fraud: The Evolution and Impact of Netflix's Fraud Metrics
Explore Netflix's approach to fraud metrics, their impact on strategic decisions, and insights for creating effective security measures against evolving threats.
Keep Hackers Out of Your Cluster with These 5 Simple Tricks
Discover data-driven strategies to enhance Kubernetes cluster security, focusing on real-world attacks and high-impact vulnerabilities. Learn effective mechanisms to protect against malicious workloads and container escapes.
Brewing the Kubernetes Storm Center - Open Source Threat Intelligence for Cloud Native Ecosystems
Explore open-source threat intelligence for cloud-native ecosystems. Learn to validate threat models, quantify risks, and make informed defensive decisions using Kubernetes-based environments and real-world data.
Practical Osint
Explore practical Open Source Intelligence techniques for gathering and analyzing publicly available information, enhancing your cybersecurity and investigative skills.
Attack Flow - From Data Points to Data Paths
Explore the evolution from isolated data points to interconnected data paths in cybersecurity, enhancing threat analysis and defense strategies.
Bad Neighborhoods – Data-Driven Detection of Malicious Internet Infrastructure
Explore data-driven techniques for identifying malicious internet infrastructure and detecting "bad neighborhoods" in cyberspace using advanced analytics and threat intelligence.
The Sednit Group, Cyber Espionage in Eastern Europe
Explore the Sednit group's cyber espionage tools, recent campaigns, and exploitation techniques targeting Eastern Europe, with a focus on Ukraine-related topics and custom exploit-kits.
Blurred Lines - The Mixing of APTs with Crimeware Groups
Exploring the blurred lines between state-sponsored actors, APT groups, and crimeware gangs, challenging traditional classifications and discussing the emergence of second-tier APT categories.
AMITT - Adversarial Misinformation Playbooks
Exploring AMITT framework for detecting and countering disinformation, using InfoSec tools to develop operational playbooks and strategies for addressing influence operations at scale.
DNS On Fire
Explore DNS-based threats and advanced security techniques with Talos researchers Warren Mercer and Paul Rascagnères. Learn about cutting-edge malware detection and threat intelligence in network security.
Passive Recon & Intelligence Collection Using Cyber-Squatted Domains
Explore passive intelligence gathering through domain squatting, including low-cost techniques, data analysis, and defensive strategies against this cyber threat.