Best Talks at BSides NYC 2024

1. 1

   BSidesNYC 0x04 Keynote: When Do We Get to Play On Easy Mode?

   Wendy Nather

   Wendy Nather, a distinguished voice in the cybersecurity community and a member of the National Academy of Sciences committee on hard problems in cybersecurity, delivered a thought-provoking keynote at BSides NYC. Her talk, "When Do We Get to Play On Easy Mode?", challenged the…

   0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway STRONG ACCEPT ★★★★☆
2. 2

   Breaking free from the chains of fate - Bypassing AWSCompromisedKeyQuarantineV2 Policy

   gl4ssesbo1, Opie

   This talk, "Breaking free from the chains of fate - Bypassing AWSCompromisedKeyQuarantineV2 Policy," delivered by gl4ssesbo1 and Opie (with initial research collaboration from Andrew Kraut) at BSides NYC, delves into the critical shortcomings of AWS's automated response to…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway SOLID ★★★☆☆
3. 3

   From HiatusRAT to Cuttlefish: advances in credential theft through the router

   Danny Adamitis

   In a revealing presentation at BSides NYC, Danny Adamitis, a researcher from Lumen Technologies' Black Lotus Labs, unveiled a detailed case study of persistent and sophisticated Chinese espionage campaigns known as **HiatusRAT** and **Cuttlefish**. This talk illuminated how…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway SOLID ★★★☆☆
4. 4

   Detection and Triage of Domain Persistence

   Joshua Prager, Nico

   This talk, presented by Nico and Joshua Prager from SpectreOps, delves into the critical and often overlooked area of **domain persistence techniques** utilized by advanced adversaries. Drawing from real-world compromise assessments, the speakers highlight how organizations…

   0 Dr. Zero STRONG ACCEPT ★★★★☆ H Heather Calloway SOLID ★★★☆☆
5. 5

   How I hacked a cloud production environment with external Terraform manipulation

   Uri Aronovici

   In his compelling BSides NYC talk, "How I hacked a cloud production environment with external Terraform manipulation," Uri Aronovici, CTO and co-founder of Zest, unveiled critical security risks inherent in the widespread use of Terraform providers and modules. Aronovici…

   0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
6. 6

   XZ Backdoor: Navigating the Complexities of Supply Chain Attacks Detected by Accident

   DevSecYoad

   In an era increasingly reliant on open-source software, the talk "XZ Backdoor: Navigating the Complexities of Supply Chain Attacks Detected by Accident" delivered by DevSecYoad, CEO and co-founder of New York Security, provided a sobering look at the sophisticated and stealthy…

   0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
7. 7

   10 Things to Know Before You Work on Your Next M365 BEC

   Ida Musheyev-Polishchuk, Natasha Vij

   In an insightful talk at BSides NYC, Ida Musheyev-Polishchuk and Natasha Vij, both from Strauss-Friedberg's Digital Forensics and Incident Response (DFIR) team, shed light on the intricacies of investigating Business Email Compromise (BEC) incidents within Microsoft 365 (M365)…

   0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
8. 8

   Building canaries with ELK and ElastAlert2

   Andrew Januszak, Keith Erekson

   In "Building Canaries with ELK and ElastAlert2," Andrew Januszak and Keith Erekson from Lehigh University present a practical, cost-effective approach to enhancing organizational security through the strategic deployment of **canaries** and **honey tokens**. As members of a…

   0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
9. 9

   CloudTail: Making Heads or Tails of Selectively Retaining Multi-Cloud Logs (w/o a SIEM!)

   Ela Dogjani

   In the increasingly complex landscape of cloud computing, effective log management stands as a cornerstone of robust security and operational resilience. However, the proliferation of services and the adoption of multi-cloud strategies have transformed this essential task into…

   0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆
10. 10

    Panel: Ctrl-Alt-Detected: Unraveling Threats with Detection Practitioners

    This panel discussion, "Ctrl-Alt-Detected: Unraveling Threats with Detection Practitioners," brought together leading voices in detection engineering from Snowflake, Salesforce, Twitch/NASA/Stripe alumni, and Datadog. Moderated by Julia Agnes Sparks, a Security Researcher at…

    0 Dr. Zero SOLID ★★★☆☆ H Heather Calloway SOLID ★★★☆☆

View all talks at BSides NYC 2024 →