RSAC x BSides Preview

As we head into the weekend wanted to give a briefing on the current state in tech and Security as well as a preview on RSAC and BSides now that conference season is here.

AWS recently launched Bedrock, a generative AI platform that officially enters into the AI Cloud Wars. This could be a big move, considering Microsoft’s partnership with OpenAI. I have a hunch, this won’t the last move made by AWS of this fashion.

Double Supply Chain Compromise

More details were released on the VoIP provider 3CX supply chain attack. Krebs gives a really good breakdown.

These are just a couple of the things that caught my eye in the past week.

---

RSA

RSA is a conference where pretty much all the Cybersecurity companies will get together in an Expo floor and have demos and information about their products. They can get a good amount of deal flow from the conference.

There are also several talks including the following:

1. Creating the Standard for Supply Chain Risk - MITRE's System of Trust

2. DFIR Evidence Collection and Preservation for the Cloud

3. Becoming the Threat: Blue Team Friendly Attack Simulations

4. The Five Most Dangerous New Attack Techniques
   

The MITRE talk should shed light into how to approach breaches such as the 3CX one mentioned above.

Each is linked to their scheduled time.

---

BSides SF

If RSA is the conference for the vendor, BSides is a conference for the practitioner.

It could be refreshing to be in an environment where everyone is learning, and talking Security, no strings attached.

The talks I’m looking forward to are

1. Level Up Your Career: A Panel on Staff+ Engineering

2. NLP for security log analysis: Learning to crawl before you run

3. Detection as Code: The Engineering-Focused Future of Detection and Response

4. Protecting Pinner Passwords

5. Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation

6. Advanced Attack Vectors in Azure Environments

7. First Security Hire: Building a security roadmap and team from scratch

8. WebAuthn, Yubikeys, and You: What we wish we knew before rolling out WebAuthn

Each is linked to their scheduled time. Looking forward to learning about the latest research. You really can learn a lot about the field in conferences like this and is a great way to stay current in Cybersecurity.

Hope this helps in your learning journey!

If you have any feedback or questions, don’t hesitate to leave a comment or reach out.

---