Security BSides San Francisco Courses

The Secret Life of Secrets - Designing Secure API Keys

Explore API key design strategies, security measures, and best practices for creating robust and secure API authentication systems.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Hook, Line, and Tinker: A Dive into Phishing Campaign Sites

Explore phishing cases, learn active reconnaissance techniques, and discover how to disrupt attackers and identify security gaps with an AppSec engineer's insights and triage process.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Snow Nor Rain Nor Dependency Confusion - How to Deliver the Right Package

Practical insights on identifying, exploiting, and fixing dependency confusion vulnerabilities in real-world package environments, based on firsthand experience.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Transforming Company Culture to Embrace Risk - Six Years in Review

Explore a 6-year journey of cultural transformation in security, focusing on shared responsibility, adapting to regulations, and overcoming challenges in vulnerability management.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Beyond Code and Clicks: UX Insights to Security Software

Explore UX-centric insights for enhancing security software effectiveness, drawing from real-world experiences in building and maintaining security tools and processes.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Advanced Persistent Teenagers - Understanding the Lapsus$ Playbook

Explore how teenage hackers breached major tech companies, analyze their techniques, and learn effective defense strategies against similar attacks.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Insane in the Supply Chain - Threat Modeling for Attacks on AI Systems

Explore AI supply chain risks and threat modeling strategies to protect against attacks that could impact company reputation and executive liability.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

One-Click Code Fix - Securing Code Using AI

Automate vulnerable code remediation in production using AI. Learn practical strategies and see demos for efficient, robust code repair techniques.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Next-Gen Detection: Harnessing LLMs for Sigma Rule Automation

Explore innovative approaches to automate Sigma rule generation using LLMs, comparing techniques like RAG, fine-tuning, and prompt-chaining for enhanced threat detection efficiency.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Crafting and Executing Successful Vishing Attacks

Explore practical OSINT techniques for vishing attacks, from target identification to pretext crafting and call execution with spoofed numbers, highlighting the growing threat of malicious phone calls.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Unlocking the Future: AI is the Key to CISOs Top Challenges

Explore AI's transformative potential in addressing critical cybersecurity challenges, offering insights into the future of intelligent threat management for CISOs.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

TL;DR: Applying AI to Security - Condensed Overview of AI Applications in Cybersecurity

Explore AI's impact on security: AppSec, red/blue team tactics, threat modeling. Condenses extensive research into practical applications for rapid understanding of AI in cybersecurity.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Decoding Fraud: The Evolution and Impact of Netflix's Fraud Metrics

Explore Netflix's approach to fraud metrics, their impact on strategic decisions, and insights for creating effective security measures against evolving threats.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Startups: SOC 2 Now or Later - Evaluating Compliance Timing

Explore the strategic timing of SOC 2 compliance for startups, weighing immediate costs against long-term benefits in building trust and market credibility.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Faux Data, Real Defense - ML Advancements in Data Synthesis

Explore ML-based synthetic data generation for cybersecurity, its potential benefits for detection methods, and a practical use case in this cutting-edge presentation.

• YouTube
• 25 minutes
• Self-Paced
• Free Video