Security BSides San Francisco Courses

First Security Hire - Building a Security Roadmap and Team from Scratch

Expert insights on building a security program and fostering cybersecurity culture in early-stage companies, covering roadmap creation and team development from scratch.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Advanced Attack Vectors in Azure Environments

Explore privilege escalation techniques in Azure's integrated ecosystem. Learn core concepts and advanced attack vectors for enhanced cloud security awareness.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Lost in Space - How to Navigate Corporate Security as an Engineer

Insights from a backend engineer turned security professional on navigating corporate security, effective communication, and maximizing your new role beyond day-to-day engineering tasks.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Securing the Pipeline - Protecting Self-Hosted GitHub Runners

Learn to secure self-hosted GitHub runners, mitigate risks of compromised access tokens, and implement key configuration adjustments to protect CI/CD pipelines from potential network breaches.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

New Face, Who Dis? - Recent Adversarial Approaches to Facial Recognition

Explore recent adversarial techniques to protect facial biometrics, including an open-source mobile app demonstration for real-world privacy preservation against facial recognition.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

No Adversaries - Getting Users on Your Side for Tough Transformations

Strategies for effectively communicating complex technical information to diverse audiences, focusing on user motivation and tailored approaches for successful implementation of transformative solutions.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

WebAuthn, Yubikeys, and You - What We Wish We Knew Before Rolling Out WebAuthn for Internal Use

Insights from Discord's implementation of WebAuthn and Yubikeys for enhanced internal security. Learn about challenges, best practices, and lessons learned in deploying FIDO2/WebAuthn as a superior MFA solution.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Take The Helm - Guidance For Prospective Future CISOs

Expert panel shares insights on becoming a first-time CISO or Head of Security, covering preparation, pursuit, and success strategies for aspiring security leaders.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Catching the Phisherman

Uncover the largest credential harvesting campaign: its discovery, impact, and ongoing response. Gain insights into cybersecurity threats and investigative techniques.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

You Don't Have to Patch

Explore sandboxing and isolation as effective alternatives to rapid patching in cybersecurity. Learn strategies to enhance defense without solely relying on immediate updates.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

The History of Ransomware - From Floppies to Droppers, and Beyond

Explore ransomware's evolution from floppy disks to modern cyber threats, uncovering its strange history and valuable lessons for today's cybersecurity landscape.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Protecting Pinner Passwords

Explore innovative techniques for enhancing password security and user experience on Pinterest, addressing common password-related challenges in social media platforms.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Launch Control - Automating a Security Baseline in the Cloud at Scale

Learn to deploy cloud-native security controls at scale, using declarative configuration for an automated, self-healing security baseline across multiple cloud environments.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Life of a Bug - An Insight on the GitHub Bounty Program

Explore GitHub's bug bounty program, from initial submission to resolution. Learn about the roles of Bug Bounty and PSIRT teams, and gain insights into the incident response process.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

NLP for Security Log Analysis - Learning to Crawl Before You Run

Explore the application of NLP in security analysis, focusing on embeddings for insider threat detection and the impact of large language models on the field.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk