BSidesLV Courses

Let's Go Shopping - Third-Party Vendors and Cyber Risk

Discover how to evaluate and manage cybersecurity risks from third-party vendors in cloud and AI environments with practical frameworks for secure vendor onboarding.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Hardening Containers with Seccomp - Hands-On Profiles, Pitfalls, and Real Exploits

Master syscall filtering with seccomp to harden containers, generate security profiles, and contain real exploits through hands-on demonstrations and Apache Druid case study.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

The Rise of Synthetic Passwords in Botnet and Attack Operations

Discover how attackers use algorithmically generated, high-entropy synthetic passwords in botnets to evade detection and overwhelm security defenses in credential stuffing attacks.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

The HMAC Trap - Security or Illusion?

Uncover HMAC authentication vulnerabilities through code demos and real-world examples, learning to identify and prevent security flaws in mature systems.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Malicious Packages - They're Gonna Get Ya! Supply Chain Security Risks and Protection Strategies

Uncover supply chain security risks from malicious packages, typosquatting dangers, and multi-layered protection strategies to defend against compromised software dependencies.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

RAG Against the Machine - Using Retrieval-Augmented Generation and MCP to Fortify Cybersecurity Defense

Discover how CADDIE, a RAG engine using Model Context Protocol, injects real-time threat intel and policy data into LLMs for automated cybersecurity defense, gap analysis, and compliance.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Taking Down the Power Grid - Red Team Physical Access Attack

Discover how a red team gained physical access to an EMP-secure server room and achieved control of power grid servers through a detailed step-by-step attack methodology.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Hacking Secure Coding Into Education

Discover how to integrate secure coding practices into educational curricula through practical teaching experiences and free resources from GitHub and YouTube.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Emergency and Urgent Care Remains in Critical Condition - Cybersecurity Threats to Healthcare Systems

Explore cyber threats targeting hospitals, from ransomware to legacy device vulnerabilities, and discover operational mitigations like zero-trust and incident response planning.

• YouTube
• 2 hours 3 minutes
• Self-Paced
• Free Video

The Not So Boring Threat Model of CSP-Managed NHIs

Explore cloud security risks through CSP-managed non-human identities, uncovering provider-specific exploits and building effective threat models with mitigation strategies.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Hackers Kinda Like to Eat - Cyber Threats to the U.S. Food Industry

Explore cyber threats targeting the U.S. food industry, from supply chain vulnerabilities to ransomware attacks affecting logistics and refrigeration systems.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Securing AI Infrastructure - Lessons from National Cybersecurity Strategies and Attacks Against Other Critical Sectors

Explore cybersecurity strategies for AI infrastructure through analysis of 200+ incidents and national policies from US, Australia, Singapore, and UK.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

So You Want to Give A Talk - How to Write a CFP

Master the art of writing compelling conference proposals and understand how review boards evaluate CFPs using real examples from major security conferences.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Laser Beams and Light Streams - Building Affordable Light-Based Hardware Security Tooling

Discover affordable laser fault injection techniques and light-based hardware security tools to detect malware and analyze chip replacements using hacker-built alternatives.

• YouTube
• 1 hour 11 minutes
• Self-Paced
• Free Video

XSS is Dead - Browser Security Features that Eliminate Bug Classes

Discover how modern browser security features like CSP v3, Trusted Types, and Sec-Fetch-Metadata eliminate XSS, CSRF, and clickjacking attacks through real-world case studies and practical implementation guidance.

• YouTube
• 22 minutes
• Self-Paced
• Free Video