Attacking DevOps Systems and What it Costs You
Explore real-world DevOps security vulnerabilities through bug bounty examples, including Facebook Github runners and organization compromises, while learning practical defense strategies and attack mitigation techniques.
Top Ways to Hack Your Company and How to Defend Against Them - 2024
Discover prevalent cybersecurity vulnerabilities and defense strategies through real penetration testing insights, focusing on authentication flaws, network poisoning, and emerging threats in modern security landscapes.
CVSS Fundamentals - Understanding and Using Vulnerability Scoring Systems
Gain insights into CVSS scoring systems and CVE categorization, learning fundamental approaches to assess and communicate vulnerability severity across organizations.
Shining a Light Into the Security Blackhole of IoT and OT Networks
Explore effective strategies for securing and managing IoT and OT networks, addressing challenges in asset inventory, vulnerability assessment, and security control implementation.
What We've Learned From Exposing Atlassian on the Internet
Discover key insights and lessons learned from exposing Atlassian's infrastructure to the internet, exploring security implications and best practices for protecting enterprise systems.
Easy EASM - The Zero-Dollar Attack Surface Management Tool
Discover how to implement Easy EASM, a zero-cost tool for automated external asset discovery and monitoring, featuring daily Slack/Discord alerts and comprehensive asset tracking capabilities.
Engineers and Exploits: The Quest for Security
Dive into the intersection of engineering and security exploits, exploring critical vulnerabilities and defensive strategies with security experts Spyros Gasteratos and Andra.
Exposing Security Vulnerabilities in Large Off-Grid Solar Systems
Uncover critical security vulnerabilities in solar management systems and their potential impact on national infrastructure through real-world exploitation examples and risk analysis.
Unlocking the Gates: Hacking Industrial Remote Access Solutions
Dive into the vulnerabilities of industrial VPN gateways, exploring security flaws in remote access solutions and learning techniques to identify and understand potential system compromises.
Exploiting Security Vulnerabilities in Microhard Radio Equipment
Uncover critical security vulnerabilities in Microhard's radio equipment, including command injections and buffer overflows, while exploring implications for SCADA and utility systems.
Time-Based SQL Injection Techniques and Defense Strategies
Dive into time-based SQL injection techniques through Operation GhostShell, featuring live demos and defense strategies for protecting against sophisticated database vulnerabilities.
The Art of Hacking Transportation Systems - Exploring Security Vulnerabilities
Dive into the fascinating world of transportation security vulnerabilities and hacking methodologies with expert insights on protecting critical infrastructure and mobility systems.
Relative Path File Injection: The Next Evolution in RPO
Discover how Relative Path File Injection attacks can turn trusted websites into malware delivery platforms, exploring detection methods and real-world implementations through practical demonstrations.
Generating Software Bill of Materials Through Hardware Hacking - A Case Study of Bob the Minion Router
Dive into hardware hacking techniques for extracting firmware and generating Software Bill of Materials (SBOM) from a WiFi router, exploring vulnerability discovery through practical disassembly methods.
V2GEvil: Cybersecurity Vulnerabilities in Electric Vehicle Charging Systems
Explore critical vulnerabilities in electric vehicle charging systems and learn specialized security testing techniques for EVCC and ISO 15118 protocols in charging infrastructure.
Vulnerability Assessment of Substation Using Bayesian Attack Graph
Explore advanced techniques for assessing substation vulnerabilities through Bayesian attack graphs, focusing on network security and risk analysis methodologies in power infrastructure.
Boosting Cybersecurity Awareness with Transformer Models for Threat-Informed Defense
Discover how transformer models and semantic search enhance cybersecurity by linking vulnerabilities to adversarial tactics, enabling better threat detection and proactive defense measures.
Improving Cybersecurity Posture with an AI Security Assistant
Discover how AI security assistants leverage MITRE ATT&CK knowledge base and LangChain framework to enhance cybersecurity through advanced threat detection, mapping, and rapid response capabilities.
DevSecOps - Real Life Security Incidents and Lessons in Software Development
Explore real-world cybersecurity incidents and discover crucial lessons about integrating security measures throughout the software development lifecycle to prevent vulnerabilities and attacks.
Prioritisation of SCA Findings in Software Dependencies Using Static Reachability Analysis
Explore static and reachability analyses for effective prioritization of software dependency vulnerabilities, enhancing security and productivity in development workflows.
CIS Hardening for MicroK8s 1.28
Explore CIS-hardening techniques for MicroK8s 1.28, gaining expert insights on best practices and advanced strategies for enhanced security.