Attacking and Defending Infrastructure with Terraform - How We Got Admin Across Cloud Environments
Explore techniques for attacking and defending Terraform infrastructure, including secret exfiltration and deploying malicious applications, with insights on mitigating vulnerabilities in cloud environments.
Cloud Services for Financial Inclusion - Possibilities and Challenges
Panel discussion exploring cloud services' potential and challenges for financial inclusion, featuring insights from cybersecurity experts and industry leaders.
Briar - Deutsche Übersetzung
Vorstellung von Briar: Eine zensurresistente P2P-Messaging-App für sichere Kommunikation ohne Internet. Funktionsweise, Ziele und technische Herausforderungen werden erläutert.
Datacenter - Was Wir Wissen Sollten Und Trotzdem Oft Nicht Erfahren
Einblick in Rechenzentren: Funktionsweise, Bedeutung für die digitale Welt, Herausforderungen bei Strom und Kühlung, sowie Auswirkungen auf Klimawandel und Nachhaltigkeit.
Custom Kernels on Edge Devices in 2020
Explore custom kernels on edge devices using Arch Linux, focusing on real-time performance improvements with TICK stack enhancements and kernel-level preemption for edge computing in 2020.
System Transparency
Explore System Transparency: a framework for verifiable cloud-based software, enhancing trust in SaaS and IaaS scenarios through cryptographic identities, open-source firmware, and transparent boot processes.
Cloud Security and Compliance
Comprehensive review of cloud computing security risks, mitigation strategies, and compliance considerations for organizations adopting cloud-based services.
The Next Disruption - Security Beyond the Perimeter and Endpoint
Explore evolving cybersecurity challenges and innovative solutions beyond traditional perimeters, focusing on cloud, containers, and APIs in the context of recent global events.
AppSec’s Future and the Rise of the Chief Product Security Officer
Explore the evolution of application security and the emerging role of Chief Product Security Officers in addressing modern digital infrastructure challenges.
Secure Sandboxing in a Post-Spectre World
Explore WebAssembly and Lucet for secure edge computing, offering efficient multi-tenant isolation of native code with lower resource and performance costs than competing approaches.
Logging in the Cloud - From Zero to Incident Response Hero
Learn essential cloud logging practices for AWS, Azure, and GCP to enhance incident response capabilities and streamline security operations in multi-cloud environments.
DevSecOps State of the Union
Comprehensive overview of DevSecOps trends, best practices, and tools, distilling insights from industry experts and mature security programs for practical implementation.
Zero-Trust Networking Is Facilitating Cloud Transformation
Zero-trust networking's role in cloud transformation, featuring real-world examples and insights on how cloud security disrupts traditional hardware markets. Explore the shift to cloud-first strategies and their impact on enterprise IT.
Strangeways, Here We Come
Explore cloud migration for startups: benefits, risks, and security best practices. Learn about AWS, cloud architecture, and strategies for a successful transition from on-premises to cloud-based solutions.
Logging, Monitoring, and Alerting in AWS - The TL;DR
Comprehensive guide to AWS security services for effective monitoring, alerting, and incident response. Learn critical configurations to immediately enhance your infrastructure's protection.
Managing Secrets in Your Cloud Environment - AWS, GCP, and Containers (and Beyond)
Comprehensive guide to managing sensitive data in cloud environments, covering storage options, common mistakes, identity considerations, evaluation criteria, and solutions for AWS, GCP, and Azure containers.
Trust in the Cloud in Tumultuous Times
Explore cloud computing's impact on work, security, and privacy amid geopolitical challenges. Brad Smith discusses balancing societal defense with individual freedoms in the digital age.
Metabadger - Automating IMDS Protection at Scale in AWS
Discover Metabadger, an open-source tool for upgrading EC2 instances to IMDSv2, preventing SSRF-based credential theft. Learn how Salesforce automated IMDS protection at scale in AWS.
Hook, Line and Sinker - Pillaging API Webhooks
Explore "Webhook Boomerang flaws" and learn how to exploit SSRF vulnerabilities in API webhooks, potentially compromising cloud credentials despite security measures.
Go With The -Work-flow
Unveiling security risks in cloud workflow platforms: misconfigurations, credential exposure, data leakage, insecure coding, and containerized malware. Eye-opening research for IT professionals.
Building Identity for an Open Perimeter
Explore Netflix's cloud-first approach to identity and security, focusing on SSO, MFA, adaptive authentication, and user-centric solutions for a modern, open perimeter.