BSidesLV Courses

XSS is Dead - Browser Security Features that Eliminate Bug Classes

Discover how modern browser security features like CSP v3, Trusted Types, and Sec-Fetch-Metadata eliminate XSS, CSRF, and clickjacking attacks through real-world case studies and practical implementation guidance.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

When the Breach Hits the Fan - Understanding Cyber Insurance

Discover what cyber insurance covers, how to obtain it, cost factors, and building insurer relationships to protect your business from cyber threats.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Boost Your Career - Get Practical InfoSec Experience in Your Community

Discover strategies to gain hands-on InfoSec experience through community engagement, from mentoring K-12 students to empowering local families with cybersecurity knowledge.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

We Fight for the User's Session - Cookie Theft Defense and Browser Security

Explore the ongoing battle between browser security and attackers, covering cookie theft history, current defenses, and Google's Device Bound Session Credentials proposal.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Time is Running Out - Tying it All Together - What Will You Do in the Near Term?

Discover practical short-term strategies to enhance community resilience across water, energy, emergency care, and public safety through incremental protective measures.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Neighborhood and Household Resilience - A Month Without External Assistance

Discover essential strategies for building household and community resilience to survive disasters, cyberattacks, and emergencies without external help for 30 days.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Extending Password Insecurity to the Browser - How Malicious Browser Extensions Are Used to Steal User Passwords

Discover how malicious browser extensions steal passwords through permissions exploitation, with live examples and defense strategies.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Ransomware as Canary for Societal Disruption

Explore how ransomware serves as an early warning system for broader societal vulnerabilities and learn defensive strategies to protect critical infrastructure.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

eXes and OAuths They Haunt Me - In-Depth Analysis of OAuth/OIDC Misconfigurations and Token Replay Attacks

Explore OAuth/OIDC vulnerabilities through live demos of token replay attacks, misconfigurations, and learn actionable mitigation strategies using open-source tools.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

Predicting the Lifespans of Internet Services - Falling Down the ML Rabbit Hole and What We Learned

Explore ML pitfalls in cybersecurity through a case study on predicting internet service lifespans, learning from failed approaches and discovering practical solutions.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

SIGMA - One Rule to Find Them All - Cross-Platform Threat Detection

Master SIGMA rules for unified threat detection across platforms, covering creation processes, practical challenges, and integration into security hunting workflows.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Password Expiry is Dead - Real-World Metrics on What Rotation Actually Achieves

Uncover why password expiry policies fail with real-world data showing predictable mutations, decreased entropy, and poor user behaviors, plus explore better alternatives.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Setting the Table - WarGames 2027 and Maslow's Hierarchy of Needs as Hybrid Warfare Nears

Explore hybrid warfare risks through interactive WarGames scenarios targeting critical infrastructure like water, power, and emergency services using Maslow's hierarchy framework.

• YouTube
• 1 hour 32 minutes
• Self-Paced
• Free Video

Beyond the Command Line - Transitioning from Individual Contributor to Leader

Discover essential leadership skills for cybersecurity professionals transitioning from technical roles, covering communication, delegation, and overcoming imposter syndrome.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Inside the Open-Source Kill Chain - How LLMs Helped Catch Lazarus and Stop a Crypto Backdoor

Discover how LLMs revolutionize threat detection in open-source supply chains, uncovering 900+ vulnerabilities and stopping the Lazarus Group's crypto backdoor attack.

• YouTube
• 47 minutes
• Self-Paced
• Free Video