Security BSides San Francisco Courses

Resilience in the Uncharted AI Landscape

Discover how to build resilient AI chat/search products through disaster recovery, security foundations, and compliance while navigating regulatory challenges.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Care and Feeding of HSMs - Key Management in Hard Mode

Explore the challenging world of Hardware Security Modules and discover why key management with HSMs creates operational nightmares despite promising enhanced cryptographic security.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Lessons from Running a Product Security-Focused Cybersecurity Clinic

Discover insights from Stanford's innovative product security clinic helping community organizations secure their software services over two years of operation.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Mapping the SaaS Attack Surface

Discover novel techniques for SaaS attack surface mapping and analysis, including an open-source tool release for cybersecurity professionals.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

A Deep Dive into the Triad Nexus Pig Butchering and Money Laundering Network

Uncover the technical analysis of Triad Nexus pig butchering scams, FUNNULL CDN money laundering networks, and luxury brand phishing campaigns in this cybersecurity research presentation.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

0.0.0.0 Day - Exploiting Localhost APIs From The Browser

Discover how browsers can exploit localhost services through the 0.0.0.0 vulnerability, exposing local network interfaces to remote attacks and compromising system security.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Mind the Gap - Career Growth and Management for Security Engineers

Discover career growth strategies and management insights for security engineers through expert panel discussions on opportunities, challenges, and long-term success.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Tracking the World's Dumbest Cyber Mercenaries

Uncover 6 years of tracking Dark Caracal cyber mercenaries, revealing their hilarious mistakes and surprising effectiveness despite operational blunders.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Something's Phishy - See the Hook Before the Bait

Discover proactive threat detection techniques to identify phishing infrastructure before it becomes weaponized, mapping adversary intent through DNS artifacts analysis.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Preparing for Dragons - Don't Sharpen Swords, Set Traps, Gather Intelligence

Discover practical cybersecurity defense strategies focused on survival over heroics when facing advanced threats, emphasizing detection and preparation over direct confrontation.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Don't Trust, Verify! - How I Found a CSRF Bug Hiding in Plain Sight

Discover how a hidden CSRF vulnerability was found in the popular gorilla/csrf Go library and learn to conduct vulnerability research on your own commonly used tools.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Fire, Brimstone, and Bad Security Decisions - Recovery from Wrong Cybersecurity Choices

Explore cybersecurity resilience by learning to recover from wrong strategic decisions in policy, design, and architecture while maintaining curiosity when facing mistakes.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

The Hidden Access Paths to Smaug's Cavern

Uncover hidden access patterns to critical systems, explore common backdoors left by engineers, and learn practical tips for identifying and remediating unauthorized access paths.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Mind vs Machine - The Role of Human Psychology and AI in Security Culture

Explore how human psychology and AI "psychological traits" shape security culture and require tailored approaches for protecting systems against both human and AI-specific threats.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Adventures and Findings in ISP Hacking

Discover how simple vulnerabilities and configuration mistakes compromise ISP networks through real security audit findings and proven methodologies.

• YouTube
• 25 minutes
• Self-Paced
• Free Video