BSidesLV Courses

Vulnerability Intelligence for All - Say Goodbye to Data Gatekeeping

Discover how the Exploit Prediction Scoring System (EPSS) consolidates threat intelligence to accelerate vulnerability management maturity and improve decision-making for teams.

• YouTube
• 23 minutes
• On-Demand
• Free Video

OH-SINT: Merging OSINT Into Reverse Engineering Workflows to Simplify Analysis

Leveraging OSINT in reverse engineering to overcome anti-analysis techniques, track down information from developers, and speed up malware analysis workflows for quicker insights.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Double Entry Accounting for Cybersecurity - Revolutionizing Security Programs

Explore how double entry accounting principles can revolutionize cybersecurity programs, offering innovative ways to enhance and streamline security practices.

• YouTube
• 24 minutes
• On-Demand
• Free Video

The Birds, the Bees, and the CVEs - Understanding Novel Vulnerabilities in Critical Infrastructure

Explore strategies for assessing novel vulnerabilities in critical infrastructure, focusing on control systems and medical devices. Learn techniques to understand and mitigate risks in complex ecosystems.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Generative AI: The Three Concerns Problem and Opportunities - Breaking Ground

Explore GenAI and LLMs' three key concerns and opportunities, with frameworks for implementing necessary guardrails, presented by security expert Sounil Yu.

• YouTube
• 51 minutes
• On-Demand
• Free Video

Security Technical Program Manager: Understanding the Role and Its Importance

Explore the Security Technical Program Manager role: responsibilities, success factors, career paths, hiring strategies, and its significance in the security field.

• YouTube
• 43 minutes
• On-Demand
• Free Video

The History of Malware - From Floppies to Droppers

Explore the evolution of malware from its inception to modern-day threats, examining key developments, consistent elements, and lessons for cybersecurity's future.

• YouTube
• 55 minutes
• On-Demand
• Free Video

The Attacker's Guide to Exploiting Secrets in the Universe

Explore methods to discover and exploit secrets in git repositories, containers, and compiled apps. Learn about vulnerabilities in API keys and credentials across various environments.

• YouTube
• 51 minutes
• On-Demand
• Free Video

Breaking Business as Usual: Attacking Android Enterprise Solutions

Explore Android Work Profiles' security, threats, and vulnerabilities in enterprise settings. Learn about stakeholder perspectives, potential exploits, and actionable steps for enhancing mobile security configurations.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Big SIEM Energy at Micro-SIEM Cost - Building Custom Security Monitoring in AWS

Learn to build a cost-effective micro-SIEM for AWS using EventBridge, CloudTrail, SNS, and ChatBot. Discover how to tailor security monitoring to your specific needs and budget constraints.

• YouTube
• 39 minutes
• On-Demand
• Free Video

A Hacker's Guide for Changing the World - IATC Capstone

Empowering hackers with strategies for positive global impact, including empathy, storytelling, and cyber-civics, to create meaningful change in the world.

• YouTube
• 1 hour 53 minutes
• On-Demand
• Free Video

Building a Resilient International Cyber Ecosystem - Fireside Chat with CISA Director

Fireside chat exploring international cyber resilience and hacker involvement in solutions, featuring CISA Director Jen Easterly and cybersecurity expert Keren Elazari.

• YouTube
• 30 minutes
• On-Demand
• Free Video

The Art of Letting Go: Secure Delegation of Permissions in AWS Environments

Explore secure delegation of AWS permissions using SCPs, IAM boundaries, and policies. Learn to empower engineering teams while maintaining security through automated compliance and remediation.

• YouTube
• 34 minutes
• On-Demand
• Free Video

The Dark Playground of CI/CD - Attack Delivery by GitHub Actions

Explore potential attack vectors in GitHub Actions, including novel techniques like Malicious Custom Action and GitHub Actions C2. Learn about CI/CD security threats and their implications.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Building Your Organization's Security Brand: Strategies for Community Engagement

Strategies for building your security team's public presence through community engagement, content creation, and fostering a culture of knowledge sharing and professional development.

• YouTube
• 46 minutes
• On-Demand
• Free Video