Security Courses

NorthSec

Playing Through the Pain - The Impact of Dark Knowledge and Secrets on Security and Intelligence Professionals

Exploring the psychological toll of classified knowledge on intelligence professionals, addressing cognitive dissonance, trauma, and coping strategies in high-stakes security work.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

NorthSec

Why You Should - But Don't - Care About Mainframe Security

Explore mainframe security breaches, their surprising ease, and media silence. Uncover shocking methods used and understand why mainframe security deserves more attention.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

IEEE

Security Papers - IEEE VR 2022

Explore cutting-edge VR security research, including shoulder surfing, authentication, biometrics, and keylogging inference attacks in virtual and mixed reality environments.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

When Good Enough Isn't Good Enough - Trading Security for Growth

Explore the power of embracing uncertainty and pushing beyond comfort zones to achieve personal growth. Learn strategies for overcoming fear and trading security for new opportunities and experiences.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

nullcon

Security Journey in French Network Access Controller

Exploration des vulnérabilités des contrôleurs d'accès réseau, en particulier Alcasar. Analyse des failles de sécurité et des moyens de contournement, avec focus sur l'authentification et la protection des mots de passe.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

TED-Ed

The Security Mirage

Exploring the disconnect between perceived and actual security, challenging our approach to risk management and resource allocation in the face of threats.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Black Hat

Alarm.DISARM - Remotely Exploiting & Disarming Popular Physical Security System from Public Internet

Explore remote code execution vulnerabilities in physical security systems, learning to exploit and disarm alarms through reverse engineering and network protocol analysis.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Black Hat

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Black Hat

Shield with Hole - New Security Mitigation Helps Us Escape Chrome Sandbox to Exfiltrate User Privacy

Explore how new security measures in Chrome can be exploited to bypass the sandbox and compromise user privacy, revealing potential vulnerabilities in browser protection mechanisms.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Black Hat

Quantum Security and Cryptography - You Are - Probably - Doing it Wrong

Explore quantum cryptography beyond basic qubit exchange, delving into exotic applications and quantum effects for securing information that traditional cryptography cannot achieve.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Black Hat

Stopping Snake Oil with Smaller Healthcare Providers - Addressing Security with Actionable Plans

Practical strategies for small healthcare providers to protect against cyber threats, focusing on actionable plans and cost-effective solutions to safeguard patient data and prevent ransomware attacks.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Black Hat

The Dark Side of the Cloud - How a Lack of EMR Security Controls Helped Amplify the Opioid Crisis

Explores how manipulation of an Electronic Health Records system contributed to the opioid crisis, highlighting the role of inadequate security controls in amplifying prescription drug abuse.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Black Hat

When Lightning Strikes Thrice - Breaking Thunderbolt 3 Security

Explore Thunderspy attacks that compromise Thunderbolt security, revealing vulnerabilities in device authentication and DMA protection across Thunderbolt 1, 2, and 3 interfaces.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Black Hat

Room for Escape - Scribbling Outside the Lines of Template Security

Explore vulnerabilities in Content Management Systems, focusing on template security issues and potential exploits in collaboration platforms. Learn about safe mode attacks and object data validation.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Black Hat

Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds

Systematic study reveals vulnerabilities in IoT cloud platforms' MQTT integration, exposing risks of device control, DoS attacks, data theft, and status manipulation.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk