Common Ground·46 min
Jack Hatwick
Explores how cognitive biases like survivorship and confirmation bias shape security decisions, hiring, and risk perception.
sociallearningrisk+1
Common Ground BSidesLV 2022
Las Vegas, USA · August 2022 · 12 talks
Common Ground talks from BSides Las Vegas 2022.
Filters+
1–12 of 12 talks
Common Ground·54 min
Alyssa Miller
Shows security leaders how to frame metrics, risk and projects so board members grasp and back their programs.
managementrisklessons-learned
Common Ground·50 min
Shea Nangle · Wendy Knox Everette
Walks through how SOC 2 experience carries over to FedRAMP authorization, with prep tips and the main differences.
compliancecloudframework+2
Common Ground·46 min
Chris Kubecka
Recounts how wiper malware and cyberattacks disrupted borders, aid work and civilian services in Ukraine's early war.
statethreatransomware+2
Common Ground·44 min
Explains the common challenges of software bills of materials (SBOMs) and how to address them.
supply-chainriskopen-source+1
Common Ground·1 hr
Carl Hertz
Shows how a small or medium business can fit security into its everyday IT operations.
managementriskdefensive-security+1
Common Ground·46 min
Robert "TProphet" Walker
Describes living in Point Roberts, a US exclave cut off from the mainland by Canada, covering borders, taxes, housing and connectivity.
privacycommunitydiscussion+1
Common Ground·47 min
Josh Michaels · Lea Snyder
Examines how vague labels like "technical" and "engineer" shape hiring and reviews, and offers ways to get more precise.
interviewmanagementteam+2
Common Ground·47 min
Nimrod Stoler · Nethanel Coppenhagen
Shows how researchers pulled encryption keys and stored credentials out of the Blue Prism RPA platform through chained attacks.
vulnerability-researchreverse-engineeringexploitation+2
Common Ground·37 min
Rodrigo Montoro
Shows how AWS AppStream 2.0 can be abused for access and privilege escalation, and which CloudTrail events reveal it.
clouddetectionattack+2
Common Ground·39 min
Wendy Knox Everette
Explains how fitness tracker and health app data could be reached by law enforcement, and which protections apply.
privacyhealthcaremobile+2
Common Ground·46 min
David Levitsky · Matthew J Lorimor
Traces how AWS logging services can encrypt S3 logs with an Amazon-owned key that the customer cannot access.
cloudawstrust+2