Security BSides San Francisco Courses

Disrupting Malicious Traffic with Egress Proxies

Learn to detect and disrupt malicious network traffic using egress proxies. Discover techniques to ensure trusted outbound connections and protect against external threats and data exfiltration.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Hacking Policy and Policy Hacking - A Hacker Guide to the Universe of Cyber Policy

Explore the evolving landscape of cybersecurity policy, its impact on the industry, and opportunities for hackers to influence regulations. Learn about global trends, case studies, and tools for effective policy engagement.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Stop Committing Your Secrets - Git Hooks To The Rescue

Learn to prevent accidental secret commits using Git hooks, enhancing code security and safeguarding sensitive information before it reaches remote repositories.

• YouTube
• 14 minutes
• Self-Paced
• Conference Talk

Hiring and Interviewing as Security Engineers

Insights on reducing bias in security hiring and maximizing interviews for various roles, drawing from a decade of global experience across major tech companies and startups.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Gamify Security Best Practices to Scalably Improve Engineering Culture

Discover how gamification of security best practices can enhance engineering culture and improve security observability, based on Chime's successful implementation strategy.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Using an mTLS Identity Provider to Achieve Password-less Auth, Device Health Attestation, and Low Earth Orbit

Explore Pinterest's innovative approach to secure authentication using mTLS, device health attestation, and a custom identity provider for password-less access and enhanced security.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Community Cyber Defense - How to be a Local Cyber Hero

Discover how to protect local organizations from cyber threats through volunteer efforts and become a community cyber hero.

• YouTube
• 12 minutes
• Self-Paced
• Conference Talk

Red Team Tales - 7 Years of Physical Penetration Testing

Discover untold stories, innovative bypasses, and social engineering techniques from 7 years of physical penetration testing. Gain insights into defeating security measures through real-world examples.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Log in Your Own Eye - Exploiting a Stealthy C2 Channel in Azure Logging Infrastructure

Explore Azure Log Analytics exploitation as a covert channel, uncovering potential security threats in cloud logging infrastructure and learning mitigation strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Got Popcorn? What's on the Vuln Channel Tonight?

Explore a platform for automated code scanning and vulnerability data streaming, designed to provide developers with fast, timely information on potential security issues.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Don't Turn Your Back on Ransomware

Explore ransomware's evolution, attack methods, and defense strategies. Learn to sharpen your cybersecurity skills against this persistent threat through real-world examples and practical mitigation techniques.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Achieving HITRUST on a Budget

Learn how Ginger achieved HITRUST certification efficiently, saving time and money. Discover strategies for streamlined compliance, including self-assessment, program integration, and leveraging existing controls.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Avoiding Insidious Points of Compromise in Infrastructure Access Systems

Explore war stories and learn to build secure infrastructure access systems. Analyze classic incidents and discover why the industry's "zero-trust" definition may be flawed.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

XSS Mitigation - The State of the Art

Comprehensive overview of XSS attacks and modern defense strategies, covering browser-based, server-side, and framework-specific mitigations for web developers and security professionals.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk