4 Essentials for Evaluating Crowdsourced Security Platforms - Rapyd's Journey
Explore crowdsourced security platforms with Rapyd and Bugcrowd experts. Learn evaluation strategies and insights from Rapyd's experience to enhance your organization's security approach.
Supply Chain Security: Building a Knowledge Graph for Artifact Relationships
Explore a supply chain knowledge graph tool that enhances understanding of artifact relationships, enabling better assessment of vulnerabilities and dependencies in software development.
Know Your Dependencies - A Guide to Automating Dependency Assurance
Explore automated dependency assurance mechanisms for enhanced visibility into software components, addressing vulnerabilities and license obligations while maintaining development velocity.
How to Reduce CVE Noise with VEX - Vulnerability-Exploitability eXchange
Explore VEX, a tool to enhance vulnerability management by providing context to CVEs, improving risk assessment, and streamlining communication between vendors and consumers.
Hungry, Hungry Hackers - A Hacker's Eye-view of the Food Supply
Explore vulnerabilities in food supply equipment beyond tractors, uncovering risks to our food ecosystem. Learn about hacker research and how to get involved in securing the agricultural technology landscape.
Conti Leaks and CARVER Analysis for Threat Intelligence Analysts
Applying CARVER vulnerability assessment to Conti ransomware leaks for rapid enterprise risk evaluation. Methodology and steps for maximizing intelligence value from this rare event.
The Birds, the Bees, and the CVEs - Understanding Novel Vulnerabilities in Critical Infrastructure
Explore strategies for assessing novel vulnerabilities in critical infrastructure, focusing on control systems and medical devices. Learn techniques to understand and mitigate risks in complex ecosystems.
The Attacker's Guide to Exploiting Secrets in the Universe
Explore methods to discover and exploit secrets in git repositories, containers, and compiled apps. Learn about vulnerabilities in API keys and credentials across various environments.
Scarlet OT: Adversary Emulation for Industrial Control Systems - HITB 2023
Explore Scarlet OT, an open-source tool for ICS security testing. Learn about OT adversary emulation, protocol support, and real-world applications in industrial environments.
Inside the Mind of a Hacker 2023 - Bugcrowd Webinar
Explore hacker insights, AI's impact on cybersecurity, and industry trends with experts. Gain valuable perspectives on ethical hacking, motivations, and the evolving landscape of security research.
How NTLM Relay Ruins Your Exchange Servers
Uncovers a critical NTLM relay attack surface in Exchange Server, affecting mailbox security and potentially leading to RCE. Explores vulnerabilities, exploits, patches, and protection strategies for Exchange environments.
Extracting Information from Automotive Internet Units
Techniques for extracting and analyzing firmware from automotive internet modules, focusing on Qualcomm MDM-based units. Covers extraction methods, image analysis, and file system exploration.
A Practical Method of Finding Vulnerabilities in IoT Devices
Practical methodology for identifying IoT vulnerabilities and intrusion artifacts, focusing on data collection procedures to improve acquisition methods for general IoT devices.
Security Patch Identification on Open-Source Software
Explore techniques for identifying security patches in open-source software with Dr. Kun Sun, enhancing your ability to assess and mitigate vulnerabilities effectively.
Demystifying and Exploiting IoT Timeout Behaviors in Smart Homes
Explore IoT timeout behaviors in smart homes, uncovering vulnerabilities and exploitation techniques to enhance cybersecurity awareness and protection strategies.
Critical Evaluation and Historical Context of the Vulkan Leaks - Lecture 10
Analyze the Vulkan Leaks' impact on cybersecurity, exploring historical context and critical implications for threat intelligence and network defense strategies.
Insider Threats and New Economy Industries
Explore insider threats in emerging industries, examining vulnerabilities and strategies to mitigate risks in the evolving economic landscape.
How to Use Your Vulnerabilities to Train Developers on Security
Learn to leverage your vulnerabilities for targeted developer security training. Discover common coding mistakes, effective fix strategies, and how to create adaptive training plans using real-world examples.
Cybersecurity Trends and Challenges - 2022 Global AppSec Keynote
Explore cutting-edge application security insights and trends with Simon Bennetts' keynote address at the 2022 Global AppSec conference in San Francisco.
Don't Let Bug Bounty Kill Your AppSec Posture
Explore strategies to maintain a robust application security posture while leveraging bug bounty programs effectively in this insightful conference talk.
Troll 1 CTF Walkthrough - Boot-To-Root
Comprehensive walkthrough of Troll 1 CTF challenge, demonstrating boot-to-root techniques for penetration testing and ethical hacking practice on a vulnerable virtual machine.