Offensive Operations, Digital Forensics and Incident Response
Explore content featuring this instructor’s insights and expertise.
This month, an OpenAI model, running inside a sealed evaluation with its safety limits turned down, found a previously unknown flaw, broke out on its own, and took control of Hugging Face's live systems over a weekend. No human directed it. For years, industry leaders across the field warned this day would come. The disclosures suggest it has arrived.
In this talk, you'll learn how to apply the same workflow attackers are using to find zero-day vulnerabilities in open-source projects.
According to Anthropic, their new Claude Mythos model discovered thousands of zero-day vulnerabilities across every major operating system and web browser—and the model is so powerful they will not release it publicly. The conversation so far has been heavy on alarm and light on practical guidance.
The Verizon DBIR says stolen credentials cause more breaches than phishing and exploits combined. Now, AI is making these attacks even more effective. Join SANS Fellow Joshua Wright to learn what you can do to protect your environment.
SANS instructors quickly analyzed the axios supply chain attack, uncovering RAT functionality and providing immediate guidance to help organizations identify exposure and respond.
Annual penetration testing is no longer enough to keep pace with modern threats.
Attackers evolve to exploit new opportunities, including attacks against cloud systems. As defenders, we also need to evolve, developing new skills and understanding in how attackers exploit cloud platforms, and how we should respond to these incidents.