Best Talks at BSides NYC 2023 (0x04)

Hand-picked from in-depth reviewer verdicts — the top 8 talks from this conference. Skip the noise, find the signal.

← All talks at BSides NYC 2023 (0x04)

1

Low Code High Risk: Enterprise Domination via Low Code Abuse

Michael Bargury

In an era where digital transformation is paramount, low-code and no-code platforms have emerged as powerful tools, empowering business users—often termed **citizen developers**—to rapidly build applications and automate workflows without extensive programming knowledge. This…

0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway STRONG ACCEPT ★★★★☆
2

The Rise and Fall of the Trickbot and Conti Empires

Alex Holden

In a captivating presentation at BSides NYC, Alex Holden, CEO of Hold Security, unveiled the intricate, often turbulent, history of two of the most notorious cybercriminal organizations of the past decade: **Trickbot** and **Conti**. This talk provided an unprecedented look…

0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway SOLID ★★★☆☆
3

Analyzing volatile memory on a Google Kubernetes Engine node

Marcus Hallberg

In this insightful talk at BSides NYC, Marcus Hallberg, a Detection Engineer at Spotify, unveiled a novel approach to conducting volatile memory analysis on Google Kubernetes Engine (GKE) nodes. The presentation addressed a critical gap in cloud-native forensics: gaining deep…

0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway SOLID ★★★☆☆
4

Save the Environment (Variable): Hijacking Legitimate Applications with a Minimal Footprint

Wietze Beukema

In this insightful talk from BSides NYC, Wietze Beukema of CrowdStrike unveils a novel and stealthy technique for **DLL hijacking** that leverages **environment variables**. The presentation delves into how attackers can trick legitimate, trusted Windows executables into…

0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway SOLID ★★★☆☆
5

Keynote

Lance James

In his compelling keynote at BSides NYC, Lance James, CEO of Unit 221B, delivered a provocative and insightful critique of the conventional cybersecurity landscape, urging the community to "reboot" its approach to emergent threats. James argues that the industry is trapped in…

0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
6

xIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors

Brian Contos

In a compelling presentation at BSides NYC, Brian Contos, Chief Strategy Officer at Sevco Security, illuminated the pervasive and often-overlooked security risks associated with **Extended Internet of Things (xIoT)** devices. Contos, a veteran with 25 years in cyber security…

0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
7

Modern Day Automobile Safety: Rescue Ops using CanBus

Checco, Kat Delorean

In an era where vehicles are increasingly sophisticated computers on wheels, the security implications extend far beyond protecting personal data or preventing theft. This talk, "Modern Day Automobile Safety: Rescue Ops using CanBus," presented by veteran fire instructor Checco…

0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
8

Infrastructure as Remote Code Execution: How to abuse Terraform to elevate access

Mike McCabe

This talk, presented by Mike McCabe, President of Cloud Security Partners, delves into the often-overlooked security implications of Infrastructure as Code (IaC) tools, specifically focusing on Terraform. While IaC is widely lauded for its ability to provision consistent…

0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆