Breaking Ground·47 min
Michael Bargury
Shows how Azure AD guest accounts can reach corporate SQL data and shared connections, and how to harden them.
cloudidentityattack+2
August 2023 · Las Vegas, USA
BSides Las Vegas
8 sessions · 88 talks
Sessions at this event
Breaking Ground
18 talks
Breaking Ground talks from BSides Las Vegas 2023.
Common Ground
16 talks
Common Ground talks from BSides Las Vegas 2023.
Ground Floor
11 talks
Ground Floor talks from BSides Las Vegas 2023.
Ground Truth
12 talks
Ground Truth talks from BSides Las Vegas 2023.
Hire Ground
7 talks
Hire Ground talks from BSides Las Vegas 2023.
I Am The Cavalry
9 talks
I Am The Cavalry talks from BSides Las Vegas 2023.
PasswordsCon
9 talks
PasswordsCon talks from BSides Las Vegas 2023.
Proving Ground
6 talks
Proving Ground talks from BSides Las Vegas 2023.
All BSidesLV 2023 talks
Filters+
1–24 of 87 talks / 88
Breaking Ground·30 min
Jen Easterly
A government cyber agency leader covers secure by design, vulnerability disclosure and AI trust with hackers.
interviewvulnerabilitiesai+2
Breaking Ground·58 min
Josh Corman
Recounts how a small volunteer group shifted medical device and healthcare policy, and what remains unresolved.
healthcareiotrisk+2
Breaking Ground·46 min
Chris Merkel
Explains how reverse-proxy phishing kits steal MFA session tokens and how defenders can detect, respond to and hunt for them.
detectionincident-responseidentity+2
Breaking Ground·31 min
Or Aspir
Maps five data exfiltration methods in Google Cloud Storage, BigQuery and Cloud SQL to the audit logs that expose them.
cloudthreat-detectionincident-response+1
Breaking Ground·36 min
Priyank Nigam
Examines how personal apps, rootkits and misconfigured management policies can break the work profile boundary on Android.
androidmobilemanagement+2
Breaking Ground·47 min
Erin Cornelius
Follows a reverse engineer building a bare-metal PowerPC emulator to test and analyze an engine controller's firmware.
embeddedreverse-engineeringframework+2
Breaking Ground·25 min
Covers the path from device firmware to a working exploit.
embeddeddevicereverse-engineering+2
Breaking Ground·51 min
Sounil Yu
Frames generative AI risks through finance and AI-safety analogies, proposing new roles and guardrails for security leaders.
airiskmanagement+2
Breaking Ground·22 min
Ariel Szarf · Doron Karmi
Shows how to read Google Workspace logs and hunt for Google Drive data exfiltration through a real investigation.
incident-responsethreat-detectioncloud+1
Breaking Ground·49 min
Yotam Perkal
Benchmarks commercial and open-source SCA scanners and shows how non-package-manager installs in Docker images hide vulnerabilities.
vulnerabilitiesvulnerability-researchopen-source+2
Breaking Ground·34 min
Covers finding personally identifiable information in exposed RDS snapshots.
awscloudprivacy+1
Breaking Ground·44 min
Jay Smith · Jan Nunez
Shows how intercepting 3270 terminal traffic can bypass field protections in CICS mainframe applications.
mainframeapplicationtool+2
Breaking Ground·24 min
Yusuke Kubo · Kiyohito Yamamoto
Shows how GitHub Actions custom actions and self-hosted runners can be abused for code delivery and command-and-control.
attackbuilddevops+2
Breaking Ground·40 min
Matt Muir
Analyzes cloud-focused malware campaigns that move beyond cryptojacking into credential theft, AWS persistence and botnet deployment.
malware-analysiscloudintelligence+2
Breaking Ground·17 min
Dor Dali
Shows how reading public RDP Gateway protocol specifications exposed remote code execution, an authentication bypass and other CVEs.
vulnerability-researchnetworkopen-source+2
Breaking Ground·39 min
Michael Bargury
Shows how the Power Automate agent built into Windows 11 can be repurposed as a trusted remote execution and C2 channel.
attackwindowscloud+2
Common Ground·25 min
Steve Bichler · Lillian Ash Baker
Explores the practical difficulties of designing cybersecurity into an aircraft program from its earliest development stages.
riskmanagementlessons-learned+2
Common Ground·39 min
Kenneth Kaye
Shows how to build a low-cost AWS monitoring pipeline that alerts on root console logins using native services.
threat-detectioncloudsecurity-operations+2
Common Ground·22 min
Applies the CARVER framework to the Conti leaks to support threat intelligence analysis.
ransomwareintelligencethreat+1
Common Ground·44 min
David Stocks · Julia Wighton
Draws on real Australian incident response cases to show where organizations stay exposed before, during and after a cyber crisis.
incident-responseriskdetection+2
Common Ground·22 min
Ashleigh Lee
Shows security practitioners how to make their advice clearer and more persuasive to non-technical colleagues.
socialmanagementteam+2
Common Ground·47 min
Zachary Newman · Luca Guerra
Explains why software composition analysis and SBOMs miss vulnerabilities in container images and how tooling is improving.
vulnerabilitiesopen-sourcecontainer+2
Common Ground·43 min
Lea Snyder
Explains what a security technical program manager does, how the role differs from related jobs, and how people can move into it.
interviewmanagementteam+1