BSidesLV Courses

Hazard Analysis of Military AI Systems Using STPA-Sec - A Systems-Theoretic Approach to Secure and Assured Autonomy

Discover how STPA-Sec methodology identifies hidden hazards in military AI systems, revealing systemic risks like misaligned recommendations and interface ambiguity to prevent dangerous failures.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Increasing Complexity and Frequency of Cyber Events - Trends, Costs, and Risk Mitigation Strategies

Explore rising cyber threats, third-party risks, privacy regulations, and cost-effective mitigation strategies for today's complex digital landscape.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Russian Nesting Dolls - Turla's Infiltration of ISI Targeting Indian Embassy and Detection Methods

Uncover how Turla infiltrated Pakistani ISI systems targeting Indian, Syrian, and Afghan governments through advanced espionage techniques and infrastructure exploitation.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Shorts Begone - Modding YouTube on iOS Without Jailbreaking

Discover iOS reverse engineering techniques to modify apps without jailbreaking, using YouTube as a case study to remove unwanted short-form content through method swizzling and debugging.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

From Interview Questions to Cluster Damage - Adventures in Kubernetes Cluster Shenanigans

Discover Kubernetes security vulnerabilities through real interview scenarios and learn practical defense strategies against cluster attacks and disruptions.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Community Defense in Depth - Teaching Digital Security and Privacy Practices for the Public Good

Discover how to teach digital security and privacy to marginalized communities using storytelling frameworks and threat modeling for activists and vulnerable groups.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

A Winning Competition - Designing and Creating Cybersecurity Competitions

Discover strategies for designing cybersecurity competitions like WRCCDC and CIRCUS, including organization challenges, growth tactics, and bridging the cybersecurity skills gap.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Harnessing AI and Post-Quantum Cryptography for Cybersecurity in the Quantum Era

Discover quantum computing threats to encryption and explore AI-driven anomaly detection with quantum-resistant cryptography methods for future cybersecurity challenges.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Broke but Breached - Secret Scanning at Scale on a Student Budget

Discover how to scan for secrets at scale using Kubernetes and cloud credits on a student budget, targeting VS Code extensions and public sources effectively.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Thwarting Key Extraction and Supply Chain Attacks by Detonating GPUs

Explore physical GPU destruction as a cybersecurity defense against key extraction and supply chain attacks using industrial detonators and modified heatsinks.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Infiltrating Like a Ninja - Unveiling Detection Gaps in Physical Security Across Japan and the U.S.

Uncover physical security vulnerabilities through ninja-style infiltration techniques, comparing Japanese and U.S. practices with real case studies and actionable defense strategies.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Phish-Back - How to Turn the Problem into a Solution

Discover innovative "Phish-Back" defensive strategy to recover stolen credentials, tackle fingerprinting challenges, and learn from surprising implementation results.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Rusty Pearls - Postgres RCE on Cloud Databases

Discover how CVE-2024-10979 enables arbitrary code execution on cloud-hosted Postgres databases, plus learn defense strategies and testing methods from Varonis Threat Labs.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Reversing F5 Service Password Encryption

Discover how to extract master keys from F5 devices and decrypt stored configuration passwords using reverse engineering techniques and weaponized exploits.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Casting Light on Shadow Cloud Deployments

Uncover risks from shadow IT and forgotten cloud environments using Luminaut, an open-source tool for scanning exposed services and conducting security investigations.

• YouTube
• 20 minutes
• Self-Paced
• Free Video