CVEs, Research & Events
Original offensive security research from the Software Secured Team.
CVE Disclosures
52
Upcoming Events
Previous Webinars/ Workshops
Missed our webinar/workshop? Don't worry, you can watch the recording anytime and review relevant material. We hope to see you next time!
Your AI Assistant Has Access to Everything. What Can It Actually Do?
Your team has assistants wired into Slack, Gmail, your ticketing system, maybe your cloud. They hold credentials, they talk to each other, and they take actions on behalf of people. Nothing in SOC 2, CMMC, or FedRAMP says go inventory them and check what they can reach. So the only thing standing between you and that problem is security testing. Join Secureframe VP of Cybersecurity and Compliance Marc Rubbinaccio on August 20 at 10AM PT / 1PM ET as he sits down with Software Secured CEO Sherif Koussa to ask whether testing is ready for it.
BSides Montreal 2026
In this presentation we will evaluate the security of one of the most popular dash cams on Amazon, with the goal of answering the question, “Could we, as an unauthenticated attacker, disrupt the video communications in a temporary or permanent way?” Julian will take you through his journey of reverse engineering a high-end dash cam, the vulnerabilities he discovered along the way, and the surprising discovery that this research affects an unknown number of other popular dash cams. You will walk away from this presentation with a deeper understanding of hardware hacking, reverse engineering, and the risks posed by insecure consumer-grade devices. https://bsidesmtl.ca/
Let Him Cook! Hacking the Meatmeet BBQ Probe | Elbsides Conference 2026
Just in time for grilling season, security researcher Julian is firing up a different kind of heat at Elbsides 2026. In this talk, Julian takes apart a popular "smart" BBQ meat probe to expose what's really happening beneath the surface of your connected kitchen gadgets.
Behind The Dashboard - Tales of Car Hacking | BSides Vancouver 2026
Automotive security is one of the most exciting frontiers in offensive security — and one of the most misunderstood. In this hands-on workshop at BSides Vancouver 2026, security researcher Kevin Chen (kevin2600) breaks down the barriers to vehicle vulnerability research and shows you that car hacking is far more approachable than it looks.
Women in Tech Panel #2: Empowering the Job Search
This webinar is ideal for those looking to enter the tech industry (or enter into a technical role), we have the inside scoop on job-hunting, as the economic downturn has produced greater demand for fewer roles, making it all the more crucial to acquire this know-how. Whether you’re fresh out of university or looking to changes roles/industries later in your career.
Ensuring Secure Software in Highly Regulated Industries
This is an open conversation between NuBinary's Co-Founder, Alireza Sharifi, and Software Secured's CEO, Sherif Koussa. Ideal for CTOs, CISOs, VPs of Engineering, and Security Directors who manage an application or software in a highly regulated industry.
SAST vs. DAST: The Ultimate AppSec Showdown
This webinar is ideal for leaders and developers of pre-seed and post-seed service companies who are interested in learning the difference between SAST and DAST application security tools in order to grow/prove their company authority.
Software Secured x Volta: How Do Your Security Decisions Impact Your Enterprise Sales Deals?
A discussion on what enterprises look for when vetting possible tech vendors and the best practices to start implementing so that you stand out against your competition. We’ll also introduce you to vendor security questionnaires: the tool that most enterprises use to weed out their most secure tech vendors from the most risky.
SOC2 Compliance: What is it, and how can pre-seed companies prepare for it?
This short workshop is ideal for leaders of pre-seed and post-seed service companies who are interested in earning SOC 2 compliance certification or are looking to grow/prove their company authority.
Women in Tech Panel #1: Breaking Barriers when Entering the Tech Industry
This webinar is ideal for those looking to enter the tech industry (or enter into a technical role), we have the inside scoop on the challenges to expect, how to overcome them, and how to organize your job search! We're here to show you how to break into the tech industry for the first time.
Intro to Secure Architecture Design Principles for Full Stack Development
Ideal for anyone building a full-stack application from scratch such as developers, technical leads, and security analysts that want to ensure their application is built securely.