Common Ground·25 min
Steve Bichler · Lillian Ash Baker
Explores the practical difficulties of designing cybersecurity into an aircraft program from its earliest development stages.
riskmanagementlessons-learned+2
Common Ground BSidesLV 2023
Las Vegas, USA · August 2023 · 16 talks
Common Ground talks from BSides Las Vegas 2023.
1–16 of 16 talks
Common Ground·39 min
Kenneth Kaye
Shows how to build a low-cost AWS monitoring pipeline that alerts on root console logins using native services.
threat-detectioncloudsecurity-operations+2
Common Ground·22 min
Applies the CARVER framework to the Conti leaks to support threat intelligence analysis.
ransomwareintelligencethreat+1
Common Ground·44 min
David Stocks · Julia Wighton
Draws on real Australian incident response cases to show where organizations stay exposed before, during and after a cyber crisis.
incident-responseriskdetection+2
Common Ground·22 min
Ashleigh Lee
Shows security practitioners how to make their advice clearer and more persuasive to non-technical colleagues.
socialmanagementteam+2
Common Ground·47 min
Zachary Newman · Luca Guerra
Explains why software composition analysis and SBOMs miss vulnerabilities in container images and how tooling is improving.
vulnerabilitiesopen-sourcecontainer+2
Common Ground·43 min
Lea Snyder
Explains what a security technical program manager does, how the role differs from related jobs, and how people can move into it.
interviewmanagementteam+1
Common Ground·39 min
Mister Glass
Shows how to scope threats, build secure defaults, and log GraphQL APIs so developers can ship secure features.
appsecwebdevelopment+2
Common Ground·22 min
Michael Bargury
Shows how business-built low-code apps leak data and mishandle identity, and how an OWASP Top 10 frames the risks.
appsecowaspidentity+3
Common Ground·26 min
Gal Meiri · Roman Lvovsky
Shows how Magecart attackers hide skimming code, evade scanners and smuggle card data out of e-commerce checkout pages.
webattackthreat+2
Common Ground·55 min
Eliad Kimhy
Traces malware from 1980s boot sector viruses and floppy-disk ransomware through macro viruses and botnets to modern droppers.
ransomwaremalware-analysisevolution+2
Common Ground·21 min
Yotam Perkal
Explains why CVSS-only prioritization falls short and how CSAF, VEX and exploitability data can automate triage.
vulnerabilitiesrisksupply-chain+2
Common Ground·23 min
Jerry Gamblin
Shows how open vulnerability data sources like CISA KEV, Metasploit and EPSS can help teams prioritize patching.
vulnerabilitiesintelligencerisk+2
Common Ground·22 min
Examines what the Yandex leak reveals about how big tech companies use personal data.
privacyintelligenceopen-source
Common Ground·15 min
Jennifer Traband
Shows how a dedicated coordinator uses Jira to run red team assessments from intake through closeout.
managementteamoperations+2
Common Ground·46 min
Leif Dreizler · Coleen Coolidge
Shows security leaders how to encourage their teams to blog, podcast and speak publicly.
teammanagementbuilding+1