Based on recent threat reports, a growing number of bad actors are bringing vulnerable drivers to victim environments to exploit and guarantee a more successful attack path. These kernel drivers are legitimate, trusted and... vulnerable! Amazingly, some have CVEs dating back to 2015 or earlier. ...
When it comes to security, the goal is to make an attacker’s job as difficult as possible. The more hurdles they must jump through, the easier it should be to detect and stop them. Unfortunately, common practices around how and where privileged accounts are used ...
Get ready for a wild ride as Jennifer Shannon, a Senior Security Consultant at Secure Ideas, presents "API-ocalypse Now." In this thrilling and entertaining webcast, Jennifer will showcase the vulnerabilities lurking within APIs and the havoc they can wreak if left unaddressed. Through live pentesting ...
In this one-hour webinar, we will explore an overview of the threats targeting Kubernetes, a crucial technology for managing containerized applications. “Infiltrating Kubernetes: An Overview of Attacker Motives and Methods,” aims to equip IT professionals, DevOps engineers, and cybersecurity enthusiasts with insights into why and ...
Everything old is new again, including intelligence analytic techniques. In today's webcast, Jake will introduce you to Kent's Analytic Doctrine, a formal intelligence analysis doctrine developed and refined in WWII. You don't need to be a CTI analyst to benefit from this webcast. Practically every ...
First Showing:Delve into the realm of compiler tactics to navigate AV and EDR safeguards. Discover the potential of Cobalt Strike payloads to sidestep these security measures. Explore compilers like Clang++, LLVM, and G++, showcasing their role in reshaping security strategies.By showcasing submissions aimed at diverse ...
This frightful webcast introduces ghoulish training exercises, creepy incident response playbooks, and spine-chilling after-action reports to help you prepare for a hair-raising cyberattack.Get ready for a thrilling webcast that will help you confront your deepest cybersecurity fears! Let's start planning a terrifyingly effective cyber exercise ...
In our last incident response webcast, we may have been responsible for bringing down GitHub. I have been told that it is just not possible. You can see the recording of that webcast here: https://youtube.com/live/n8aE5bwPLog Judge for yourself.... In this next webcast, we will have ...
It's always scary to Google yourself and see what you find.In this session, we dive into the eerie reality of personal information exposure on the internet. We'll look at some of the resources stalkers use to get information on their victims. The combination of home ...
Based on a compromised employee workstation scenario, we'll discuss how to conduct an effective DFIR investigation within enterprise environments, following the incident response lifecycle. We'll discuss triage and containment considerations, as well as elaborate on best practices for performing effective data collections and forensic analysis. ...
This Anti-Cast jumps right into writing a linux 32Bit shellcode, for adding a new uid 0 user to the system passwd file.With 20 years of experience in the field, Marco has developed a strong interest in computer security, hacking, and penetration testing.Throughout his career, he ...
The Swiss cheese model, developed in 1990 by James Reason, is based on the idea that errors can never be eliminated entirely due to complex systems but are instead “layered” like slices of swiss cheese. This model has become a well-known concept in the field ...
