~/talks

Ofer Maor

what they talk about

where they keep going back

all 6 in the filters

on a stage with

who talks about the same things

titleconferencedate
Hackers vs. Devs - Attacking Dev Tools and InfrastructureRSA Conference 20242024-05-06
Attackers focus on developer infrastructure rather than custom code, with one firm seeing only three custom‑code incidents in 4.5 years while ~50% of breaches…
Talk on
Prevention vs. Response - Cybersec Economics in the Modern EraRSA Conference 20242024-05-06
Only one third of major breaches are discovered internally, the average breach costs about $4.5M globally ($9M in the US) and takes 277 days to detect and…
Talk on
Slack Hackers SlackersRSA Conference 20232023-04-24
Slack breaches recur because attackers harvest chat history, abuse apps and sessions, and exploit culture not bugs: attackers buy a Slack session cookie for…
Talk on
It’s Getting Real & Hitting the Fan 2023 Edition (Real World SaaS Attacks)RSA Conference 20232023-04-24
Yearly overview that focuses on concrete incidents: a DocuSign phishing campaign uses Adversary-in-the-Middle to bypass MFA and creates persistent…
Talk on
It's Getting Real & Hitting the Fan! Real World Cloud AttacksRSAC 20222022-06-06
Presenter: Ofer Maor, CTO, Mitiga Cloud attacks are getting real and hitting the fan! In the past year we’ve led forensics investigations for some very…
Talk on
Opening RemarksOWASP Global AppSec DC 20192019-09-09
OWASP states nearly 20 years of activity with over five million visitors to its site and almost 50,000 participants in chapters and events, runs about 130…
Organiser on
Scratching the Surface of your CD?OWASP AppSec USA 20182018-10-11
Claims that continuous delivery forces inline, fully automated security: fast IDE "spell‑checker" SAST, incremental SAST on build servers, IAST agent on…
Talk on
Putting an 'I' in Code Review Turning Code Reviewing InteractiveAppSecUSA 20162016-10-11
Claim: making manual code review interactive by attaching a debugger to a running Java app gives faster, focused findings than static reading. The demos…
Talk on
Security Automation in the agile SDLC - Real World CasesOWASP AppSec California 20162016-01-25
Three real customers show what gets built and what actually works: an insurance shop that integrates Seeker into Jenkins, records manual tests, and accepts…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.