IT Compliance Courses and Certifications

Black Hat

Breaking Encrypted Databases - Generic Attacks on Range Queries

Explore generic attacks on encrypted databases supporting range queries, focusing on common building blocks and latest solutions in commercial and academic settings.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

Betraying the BIOS - Where the Guardians of the BIOS are Failing

Explore UEFI firmware vulnerabilities, recent security breaches, and the growing threat landscape. Gain insights into potential widespread security lapses in BIOS protection.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Black Hat

How is Machine Learning and Data Science Transforming Cyber Security

Explore how AI and data analytics are revolutionizing cybersecurity, with insights on future trends, human-machine collaboration, and emerging challenges in the field.

• YouTube
• 11 minutes
• Self-Paced
• Conference Talk

Black Hat

Patching Loopholes - Finding Backdoors in Applications

Explore techniques for identifying hidden vulnerabilities and backdoors in applications, enhancing your ability to secure digital transactions and sensitive data storage.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Black Hat

Samsung Pay - Tokenized Numbers Flaws and Issues

Análisis de vulnerabilidades en la generación de tokens de Samsung Pay, explorando posibles fallos de seguridad y riesgos para los usuarios.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Black Hat

Incident Response at Scale - Building a Next Generation SOC

Explore strategies for automating incident response processes in large-scale environments to improve efficiency, visibility, and organizational protection.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Black Hat

Android Kernel and OS Security Assessment with Iron Crow

Discover Iron Crow: a powerful tool for Android BSP developers and OEMs to detect platform-level vulnerabilities, enhancing security and protecting end users from potential exploits in customized Android environments.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

LASCON

How to Hack an API in 15 Minutes

Discover how hackers exploit Shadow APIs to extract large volumes of data quickly. Learn about this basic yet non-obvious security vulnerability and creative methods used by attackers.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

LASCON

Practical DevSecOps - Creating a Simple Free Pipeline - 2018

Create a free DevSecOps pipeline using IAST and RASP for real-time vulnerability detection, attack prevention, and seamless integration into existing development workflows, enhancing security across the software lifecycle.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

LASCON

How to Assess the Maturity of Your Security Program - 2018

Explore methods to assess and quantify security program maturity, combining NIST's Cybersecurity Framework with defined maturity expressions for effective communication and prioritization.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

44CON Information Security Conference

Intro to IoT Hacking

Learn essential techniques for IoT hacking, including firmware analysis and finding serial consoles. Gain insights into hardware vulnerabilities and start your journey in this exciting field of information security.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

IFERP Connecting Engineers

Artificial Intelligence in the Impact of Covid-19 - IFERP

Explore AI's role in combating COVID-19, from deep learning applications to automated detection systems. Learn about innovative solutions and cutting-edge technologies shaping pandemic response strategies.

• YouTube
• 2 hours 26 minutes
• Self-Paced
• Free Video

44CON Information Security Conference

Hunting Asynchronous Vulnerabilities

Explore techniques for uncovering hidden vulnerabilities in backend systems using exploit-induced callbacks. Learn to detect and exploit asynchronous issues across various technologies and platforms.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

44CON Information Security Conference

Software Defined Networking - SDN Security

Explore SDN security implications, attack surfaces, and vulnerabilities with live exploit demos. Learn about efforts to enhance SDN controller security and future developments.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

44CON Information Security Conference

Bypassing Port-Security In 2018 - Defeating MacSEC and 802.1x-2010

Explore novel techniques for bypassing 802.1x-2010 and MacSEC, discussing weaknesses in EAP and demonstrating improved methods for network penetration using the open-source tool Silent Bridge.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk