LASCON Courses

Five Pillars of Security Automation - API Security Past and Future

Explore the evolution of API security automation over the past decade and gain insights into future trends, focusing on key pillars for robust protection.

• YouTube
• 52 minutes
• On-Demand
• Free Video

3CX Supply Chain Attack: Lessons Learned

Análisis del ataque de cadena de suministro a 3CX: lecciones aprendidas para prevenir futuros incidentes y fortalecer la seguridad en sistemas VoIP y software empresarial.

• YouTube
• 46 minutes
• On-Demand
• Free Video

A New Recipe for Security Risk Evaluation

Explore an enhanced risk calculation formula for security assessment, combining ISO 27005, OWASP, and CVSS methodologies to improve product lifecycle management and task prioritization.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Top Gun's Unsung Hero - A Surprising Lesson for CI/CD Security

Discover how Top Gun's unsung hero inspired innovative CI/CD pipeline security strategies, offering creative solutions to protect software supply chains against emerging threats.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Securing Generative AI - Back to the Future Edition

Explore a trust framework for generative AI, addressing concerns like data handling, PII leakage, and LLM manipulation through access control, authenticity, auditing, and data protection measures.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Unveiling the Vulnerabilities: Hacking Cloud Native Apps and Discovering the Silver Lining

Explore cloud-native app vulnerabilities, including OAuth, storage services, and API-based microservices. Learn to identify, exploit, and mitigate risks through penetration testing and automated tools.

• YouTube
• 50 minutes
• On-Demand
• Free Video

Navigating Security Pitfalls During M&A: Playbooks and Strategies for Doing Acquisitions Right

Practical insights on secure M&A processes, covering pre-acquisition evaluation and post-close integration. Learn strategies to minimize risks and streamline security workflows during mergers and acquisitions.

• YouTube
• 43 minutes
• On-Demand
• Free Video

From Zero to ISO 27k Compliance - Building Business Practices into ISO 27001 Framework

Discover open-source tools and techniques to integrate existing business practices into the ISO 27001 framework, enhancing sales, customer relationships, and platform security.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Infrastructure as Remote Code Execution: How to Abuse Terraform to Elevate Access

Explore security risks in Terraform, including privilege escalation and data exfiltration. Live demos showcase attack scenarios and provide recommendations for securing implementations.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Easy-Bake IR - Automated Incident Response Using the Power of APIs

Explore automated incident response techniques using APIs to streamline post-incident forensics, evidence handling, and attack chain reconstruction for efficient security operations.

• YouTube
• 38 minutes
• On-Demand
• Free Video

PASTA Threat Modeling: Leveraging Incident Response and Threat Intelligence for Tactical Penetration Testing

Explore how threat data and intelligence shape robust threat libraries in PASTA methodology, enhancing threat modeling and tactical penetration testing for improved application security.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Small Language Models for Application Security - Beyond ChatGPT

Explore how small, open-source language models like LLaMa and Alpaca can revolutionize application security workflows, enabling earlier and more efficient security integration in software development.

• YouTube
• 1 hour 1 minute
• On-Demand
• Free Video

Cybersecurity Insights and Industry Trends - Marc Spears

Engaging discussion with Marc Spears, exploring insights and experiences in sports journalism, NBA coverage, and the evolving media landscape.

• YouTube
• 53 minutes
• On-Demand
• Free Video

A Visual Journey to Reverse-Engineering the Enigma Machine - Preventing MITM Attacks

Explore the Enigma Machine's history, mechanics, and modern relevance through visual simulation and hands-on reconstruction, delving into ancient ciphers and early encryption techniques.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Wolfi - A Secure-by-Default Distro for Curing Container CVE Chaos

Explore Wolfi, a Linux distribution for building secure, minimal containers. Learn packaging techniques with apko and melange to create vulnerability-free containers and improve your Docker image security.

• YouTube
• 58 minutes
• On-Demand
• Free Video