Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Videos

Black Hat 2022: The CVSS Fallacy - can you trust the world's most popular vulnerability metric?

The NVD defines one of the usages of CVSS as “a factor in prioritization of vulnerability remediation” and it is the current de-facto vulnerability metric, often seen as infallible guidance and a crucial element in many compliance processes. In our session we will go over real-world CVE examples, demonstrating cases and entire categories where CVSSv3.1 falls short of providing an accurate assessment, both due to its design and its various mishandlings. The session will also touch upon specific indicators in the CVE description that can raise the confidence in a CVSS score, and vice versa.

Changing Your Passwords

Long, randomly generated passwords that are created for each of your logins helps to protect your accounts from cybertheft and account takeover. Keeper’s Password Generator can create and securely store a strong, unique password for each of your sites and apps with the click of the dice. Be sure to refer to a website’s password requirements when creating a new password. You can adjust a password's characters to meet a site’s unique requirements by dragging the slide bar left and right and utilizing the character type check boxes.

Untangle the Secrets of your JavaScript Dependencies

In an ecosystem with an increasing number of dependencies, maintainers and supply chain attacks, discover an open source tool designed to analyze in depth the dependencies of a given remote package or local manifest. Not knowing what’s in the node_modules directory is a bad dream from the past. Dive in with me to find out the secrets that your dependencies hide from you.

3 Cases of Hacked IoT Devices -- LogSentinel

internet of Things is a network of interconnected devices, software, sensors, or people that are provided with unique identifiers (UIDs), with the ability to transfer data over a network without the need for human interaction. Many #IoT devices remain unmonitored and improperly managed. These risks can become life-threatening when it involves the #healthcare sector. LogSentinel presents 3 notorious cases of hacked IoT devices and ways to keep your IoT devices safe. Monitoring threads and mitigating the risk for #cybersecurity in your organization is crucial.