Security BSides San Francisco Courses

Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center

Learn to combat vulnerability fatigue using data analytics principles from the US Tsunami Warning Center for real-time, high-impact security alerts.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

Purple is the New Black - Modern Approaches to Application Security

Explore modern application security approaches combining defense, offense, automation, and continuous learning for various app types, including zero trust, supply chain, and microservices.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Security, Politics, Neutrality, and Protecting Users

Explore the intersection of security, politics, and tech neutrality, examining how these factors impact user protection and the evolving role of technology companies in society.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Break Crypto like a Pro

Explore common cryptographic vulnerabilities and learn practical exploitation techniques in this engaging talk on breaking crypto systems effectively.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Non-Political Security Learnings from the Mueller Report

Explore forensic evidence from the Mueller Report to understand network compromises, access methods, and defensive strategies for organizations.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

RIS-ky Business - Exploiting Medical Information Systems

Explore medical device security, protocols, and system architecture. Learn how attackers can exploit vulnerabilities to access patient information in healthcare settings.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Serverless Osquery Backend and Big Data Exploration

Explore serverless osquery backend deployment, scalability challenges, and large-scale data processing for enhanced intrusion detection and endpoint management.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Rise of the Vermilion - Cross-Platform Cobalt Strike Beacon Targeting Linux and Windows

Explore the first cross-platform Cobalt Strike re-implementation, Vermilion Strike, targeting both Linux and Windows in real-world attacks. Learn about this significant malware discovery.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

JavaScript Obfuscation - It’s All About the P-a-c-k-e-r-s

Explore JavaScript obfuscation techniques and learn a method for detecting packers to identify obfuscated files, crucial for understanding modern security threats.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Red Teaming macOS Environments with Hermes the Swift Messenger

Explore the development of Hermes, a Swift implant for macOS red teaming, integrated with Mythic C2 framework. Learn about its capabilities and detection methods using Apple's ESF.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

WireGuard from the Ground Up

Comprehensive overview of WireGuard: its implementation, protocol, cryptography, and comparison with other VPN solutions. Learn when and how to use this efficient end-to-end encryption tool.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Keynote - We Need More Mediocre Security Engineers

Challenging elitism in cybersecurity, this talk advocates for inclusivity and rethinking entry barriers to address growing demand and burnout in the field.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

Hacker TikTok - Community, Creativity, and Controversy

Panel discussion exploring security-focused TikTok creators' experiences in bringing hacking awareness, humor, and community to a new audience, highlighting successes and challenges in this emerging frontier.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

CISO Panel Discussion

Insightful discussion on building and scaling top security teams, exploring strategies for talent attraction, retention, and overcoming challenges in the cybersecurity industry.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

Hook, Line and Sinker - Pillaging API Webhooks

Explore "Webhook Boomerang flaws" and learn how to exploit SSRF vulnerabilities in API webhooks, potentially compromising cloud credentials despite security measures.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk