LASCON Courses

Knowing What Risks Matter and Don't in Your Open Source

Explore key findings on open-source software risks, including usage trends, vulnerability rates, and best practices. Learn to prioritize and address critical issues in application security.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

The DevSecOps Playbook: A Step-by-Step Guide to Implementing DevSecOps

Comprehensive guide to implementing DevSecOps across 5 key domains. Offers practical tasks, prioritization strategies, and concrete examples for integrating security into development and operations workflows.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

DSOMM from Theory to Enforcement - Applying Security in Cloud Native Environments

Explore DevSecOps Maturity Model implementation using open-source tools. Live demos showcase practical application of security controls across DSOMM stages for cloud-native environments.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Hacking JavaScript Desktop Apps with XSS and RCE

Explore techniques for auditing Electron apps, understanding XSS in desktop environments, and exploiting vulnerabilities to achieve remote code execution in JavaScript-based applications.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Automating App Security Tests in Development with Docker

Learn to automate application security testing using Docker. Explore tools like ZAProxy, nikto, and SQLmap for continuous attack simulation in the software development lifecycle, with live demonstrations.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Hacking and Defending APIs - Red and Blue Make Purple

Comprehensive guide to API security: attack techniques, defense strategies, and best practices for both testers and defenders. Covers BOLA, authentication, data exposure, and more.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Tips and Tactics for Creating Your Own CTF Event

Learn step-by-step how to create engaging Capture-the-Flag events, from choosing categories to building challenges, with insights on crafting educational and entertaining cybersecurity competitions.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

FAIR STRIDE - Building Business Relevant AppSec Threat Models

Integrating FAIR and STRIDE methodologies to create business-relevant application security threat models, translating technical risks into financial impacts for strategic decision-making.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Design-Level Supply Chain Attacks in the Real World

Explore design-level supply chain attacks, including environmental constraints, compatibility issues, and malicious influence. Learn to identify and mitigate these often-overlooked vulnerabilities in cybersecurity.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Securing Managed Kubernetes Clusters

Explore Kubernetes security for managed cloud clusters, understanding threat models and gaining actionable recommendations for secure workload deployment in this comprehensive overview.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Close Encounters of the Vulnerable Kind - A DevSecOps Odyssey

Explore common DevOps security risks, best practices, and the importance of fostering a DevSecOps culture. Learn to address vulnerabilities, implement proper controls, and enable developers in securing workflows effectively.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Spies, Saboteurs and Scoundrels - How Russia, China and Nefarious Actors Are Hacking IoT

Explore how IoT and OT devices are exploited by hackers, understand vulnerabilities, and learn strategies to secure these targets against nation-state actors and cybercriminals.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Free Video

Irrational but Effective - Applying Parenthood Lessons to Cybersecurity

Explore how parenthood lessons can enhance cybersecurity leadership, using humor and concrete examples to draw parallels and improve security practices.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Detecting and Controlling Rogue Third-Party Scripts in Web Applications

Explore web supply chain attacks, their impact on sensitive data, and strategies to detect and prevent rogue third-party scripts from compromising web application security.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

API Security Through External Attack Surface Management

Integrating APIs into External Attack Surface Management to improve security posture of external-facing APIs. Discusses challenges in asset visibility and strategies for effective protection.

• YouTube
• 35 minutes
• Self-Paced
• Free Video