LASCON Courses

The Cybersecurity-Minded Future - And How Security Champions Get Us There

Discover how Security Champions bridge the gap between security and engineering teams, transforming application security into shared responsibility through behavioral science and culture change.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Solving Secrets Sprawl Takes More Than Security - Why Machine Identity Is Everyone's Problem

Uncover why secrets sprawl requires cross-team collaboration beyond security, exploring machine identity challenges and mapping routes to a secrets-free future.

• YouTube
• 49 minutes
• Self-Paced
• Free Video

When AI Goes Offensive - Exploiting the Unexploitable

Explore how AI agents simulate attacker mindsets, autonomously navigate kill chains, and discover vulnerabilities through reasoning rather than brute force in modern red teaming.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

Model Context Protocol (MCP) - 20 Minutes into the Future

Discover Model Context Protocol (MCP) fundamentals for API developers in this fast-paced overview covering architecture, Agentic AI integration, and hands-on server/client building.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

DevSecOps as a Launchpad - Transforming Security from Bottleneck to Enabler

Discover how to transform security from a bottleneck into an enabler through modern DevSecOps practices, AI-assisted development, and the Model Context Protocol for 2025.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

The Model Context Protocol - Convenience Meets Vulnerability

Discover security vulnerabilities in the Model Context Protocol (MCP) and learn how AI integrations can be exploited through unauthorized access and malicious attacks.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

When the Tool is the Weapon - Abusing and Defending Native M365 Applications

Discover how threat actors exploit Teams, SharePoint, E-Discovery, and OneNote during business email compromise attacks and learn detection and defense strategies for M365 environments.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Fixing My Fixing Talk - What We Got Wrong and Right About AI Auto-Remediation

Discover how to safely implement AI-powered vulnerability fixes through test-driven prompt engineering, validated remediation rules, and hybrid AI-deterministic approaches.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Under the Radar - How We Found 0-Days in the Build Pipeline of OSS Packages

Uncover critical vulnerabilities in open source build pipelines through data analysis infrastructure, attack trees for GitHub Actions, and 'Living Off the Pipeline' techniques for security teams.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

LLMs in AppSec - Why They Still Need a Chaperone

Explore why LLMs in application security still require human oversight despite promises of automated vulnerability detection and secure code generation.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Bridging the Chasm - Filling the Security Knowledge Gap between Academia and Industry

Discover how to bridge the critical cybersecurity skills gap between academic education and industry demands, addressing workforce deficiencies in the cyber security sector.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Builders and Breakers - A Collaborative Look at Securing LLM-Integrated Apps

Explore LLM security from both offensive and defensive perspectives through live demos, learning prompt injection prevention, input validation, and AI red teaming techniques.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Technology and Leadership in Complex Times - Empowering Women in Cybersecurity

Explore strategies for empowering women in cybersecurity leadership, addressing gender barriers, and fostering inclusive environments to enhance security innovation and organizational resilience.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

The Dark Side of AI - Developing Unsecure Applications in Minutes

Uncover how AI-generated code introduces security vulnerabilities like SQL injection and XSS, while learning to implement secure coding practices and guardrails for safe development.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Why LLMs Fall Short in Vulnerability Management

Discover why LLMs fail at vulnerability management through research on false positives, dependency updates, supply chain attacks, and practical solutions for security operations.

• YouTube
• 39 minutes
• Self-Paced
• Free Video