About
"Distrust and caution are the parents of security" - Benjamin Franklin
Brussels, Belgium
Lots of countries have their
own security cons… why not Belgium? That was the idea behind the annual BruCon
Security Conference, a networking event for the Belgian IT security community. No surprise, though, that BruCon’s appeal stretches beyond Belgium, with the show drawing top research and academic talent from all over Europe to
discuss issues related to information security, privacy, and policy.
Boston, Massachusetts and Barcelona, SpainSomewhere between
DEFCON and RSA, you find the Source Conferences. A relative newcomer to the
security scene, these multi-track annual shows in Boston and Barcelona blend
industry focused sessions from venture capitalists and executives with presentations on
vulnerabilities and exploits that frequently grab headlines. http://www.sourceconference.com/
Kuala Lumpur, Malaysia
Booked as “Asia’s Premier Deep Knowledge
Security Conference,” HITB is in its 8th year and has since expanded
into other countries in the Middle East and Europe. Modeled on shows like Black Hat, HITB offers both training sessions
and a multi track security conference and draws top security professionals from
around the world.
Vancouver, British Columbia, Canada
San Diego, California, U.S.
Southern California’s premiere hacking event,
ToorCon is in its 12th year, after being launched by San Diego area
2600 user group members David Hulton (aka h1kari) and Ben Greenberg in
1999. No industry event, ToorCon is for serious security practitioners, offering detailed presentations on everything from protocol analysis to tools and attacks, as well
as standard security con fare like the Lock Picking Village.
You could be excused for thinking that the world of security
conferences was limited to industry shin-digs like the RSA show in San Francisco, and mega events
like the Black Hat Briefings and Defcon conferences in Las Vegas.
Stuxnet Redux and The
Wire: United States
Governments, the Internet and security were the theme as Internet wiretapping, trans national cyber laws and the further
proliferation of Stuxnet – a computer virus believed to have state backing – topped this week’s news.
Threatpost editors Dennis Fisher and Paul Roberts talk about the revelation that Stuxnet included four previously unknown flaws, the padding oracle attack on ASP.NET Web apps and the return of unofficial patches for zero
days.
[swf
file=”http://www.threatpost.com/sites/default/files/newswrap_23.mp3]
Web insecurity was in the news this week, with a major flaw in the security of ASP.NET and some sobering statistics on Web site infections. When your bank account gets hacked – is it your fault? And, with a patch out for one of four (!) zero day exploits used by Stuxnet, security experts wonder if its the most sophisticated malware…ever!?
Summer may have reached its unofficial end with the Labor Day holiday, but there was no break from security news this week, as both the Gov 2.0 Conference in Washington D.C. and a raft of warnings and patches from leading vendors kept the heat on high.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
