
Explore advanced AWS IAM techniques using tags for enhanced security and resource management. Learn to leverage AWS tags for powerful access control and policy enforcement.

Explore strategies for enhancing cloud security, addressing data protection challenges, and implementing robust DevSecOps practices to safeguard your organization's digital assets.

Automated approach to implement least privilege security without impacting developer productivity. Combines data gathering and policy adjustment to remove unused permissions across applications.

Exploring Netflix's zero trust network architecture, focusing on identity-based security, adaptive authentication, and device health to create a cloud-first, open perimeter environment.

Explore Uber's collaborative approach to privacy engineering, blending data analysis with robust privacy measures to enhance services while ensuring regulatory compliance and user protection.

Learn key security considerations, features, and best practices for securing Tomcat, a widely-used Java-based web server and servlet container.

Explore effective secret management strategies for CI/CD pipelines, addressing challenges of token security, rotation processes, and permission controls in modern development workflows.

Discover practical strategies for implementing zero trust security principles in containerized environments, from fundamental concepts to real-world DevOps implementation examples.

Discover how to design and implement multi-tenant capabilities in Security Onion SIEM, enabling efficient management of multiple organizations while maintaining secure access control and streamlined alert monitoring.

Discover how HashiCorp's identity-based approach implements zero trust security across multi-cloud environments, enabling secure infrastructure automation and application management.

Discover how Group-Based Policy with VXAN technology enables location-agnostic endpoint control, simplifies network configuration, and strengthens security through consistent policy application.

Discover how Nile's full-stack solution simplifies enterprise network security by integrating zero trust principles directly into access networks, eliminating complex policy configurations and streamlining security implementation.

Discover how to implement zero trust access through Citrix Secure Private Access, from initial setup to policy configuration and troubleshooting for IT administrators.

Discover how Citrix's zero trust architecture enables secure application access across any infrastructure, supporting flexible deployment options for seamless user experience and device compatibility.

Discover how SPDM Authorization Specification enables secure endpoint authorization through standardized frameworks, credential provisioning, and threat modeling for protected actions.

Discover critical security vulnerabilities in Kubernetes deployments and learn practical fixes for common misconfigurations, based on real-world data analysis from 10K+ clusters.

Dive into novel attacks on mTLS authentication systems, exploring implementation vulnerabilities, exploitation techniques, and secure coding practices for certificate-based authentication.

Discover how to bypass MacOS privacy controls through Electron apps, exploring TCC vulnerabilities and gaining insights into red teaming techniques for enhanced security testing and defense strategies.

Dive into real-world social engineering tactics through a first-person narrative of complex red team operations, exploring methodologies for physical access and critical infrastructure penetration testing.
![[French] La fin des mots de passe partagés avec Vault et Boundary](https://img.youtube.com/vi/txG8hU_hFdw/mqdefault.jpg)
Découvrez comment éliminer les mots de passe partagés en équipe grâce à Vault et Boundary, tout en améliorant l'expérience développeur et la sécurité des accès aux ressources privées.

Découvrez comment configurer et implémenter la fédération d'identité OIDC dans OpenStack, en mettant l'accent sur la scalabilité et l'intégration avec différents outils comme Horizon, APIs et Terraform.