How HMRC Digital Secures Services at Scale
Discover HMRC Digital's strategies for securing large-scale services, exploring innovative approaches to DevSecOps implementation and risk management in digital tax systems.
Implementing Email Attachment Security
Explore email attachment security implementation using pyminigip and AWS integration. Learn risks, solutions, and benefits for enhanced protection in business scenarios.
Metasploit for Detecting Null Sessions and Exploiting Samba Server (SMB)
Explore SMB protocol, enumerate vulnerable Linux machines, and exploit Samba servers using Metasploit Framework's samba_symlink_traversal module. Gain insights into SMB security risks.
Subdomain Hijacking - Why DevOps is Making Us More Vulnerable
Explore subdomain hijacking vulnerabilities in DevOps practices and learn mitigation strategies to enhance your organization's security posture.
Replacing Privileged Users with Just-in-Time Access Requests
Learn how to implement just-in-time access requests to enhance security and reduce privileged user risks in your organization's infrastructure.
A Better Way to SSH: Introducing SSH Certificates
Discover a superior SSH approach using certificates, enhancing security and simplifying access management for cloud-native environments.
A Centralized Solution for Access Management in DevOps
Explore centralized access management in Kubernetes, focusing on declarative configuration, ClusterProfiles, and policy-driven lifecycle management using Sveltos.
Ten Ways to Doom Your DevSecOps
Discover common pitfalls in DevSecOps implementation and learn how to avoid them for successful integration of security into your development processes.
Intel TD Partitioning and vTPM on COCONUT-SVSM
Explore Intel TD Partitioning and vTPM implementation on COCONUT-SVSM, gaining insights into advanced virtualization security techniques.
Under the Radar: How We Found 0-Days in the Build Pipeline of OSS Packages
Explore critical vulnerabilities in OSS build pipelines, including 0-day discoveries in major projects. Learn about attack trees, mitigations, and 'Living Off the Pipeline' components for enhanced security.
A Beginner's View of Public Instances
Explore OpenSSF's public instances: hosting, scale, security, and usage guidelines. Gain insights into tools for safer software development and protection against attackers.
API Security: Code-to-Cloud Context for Complete Protection
Comprehensive approach to API security, covering code-level inventorying and runtime protection. Learn to mitigate issues faster and improve organizational API security posture efficiently.
Using Large Language Models to Improve Data Loss Prevention in Organizations
Explore how large language models enhance data loss prevention by enabling full-text analysis and document categorization, improving sensitive information detection beyond pattern-based matching.
Leveraging the Linux Kernel for Building a Zero-Trust Environment Without a Service Mesh
Explore an innovative approach to zero-trust security using a Linux kernel module for mTLS and access control, avoiding service mesh complexities while maintaining strong workload identities and traffic encryption.
CVE Context Matters - Prioritizing Vulnerabilities in Cloud-Native Projects
Explore vulnerability scanning in cloud-native projects, learn to prioritize vulnerabilities, and implement effective scanners. Gain insights on assessing relevance and improving daily workflows.
Future Open Source LLM Kill Chains - Security Risks and Mitigation Strategies
Explore potential security risks in open-source AI ecosystems, focusing on LLM vulnerabilities and kill chains. Learn mitigation strategies to protect against sophisticated adversaries in the evolving AI landscape.
Championing Security - Scaling Security at Every Level
Explore the concept of Security Champions to address enterprise security challenges. Learn best practices for implementing a program that empowers team members to promote and integrate security across the organization.
Invisible Infiltration of AI Supply Chains: Protective Measures from Adversarial Actors
Explore protective measures against adversarial actors infiltrating AI supply chains. Learn to secure data, models, and pipelines, implement security controls, and mitigate risks in AI systems.
Bypassing Entra ID Conditional Access - A Deep Dive Into Device Authentication Mechanisms
Explore device authentication in Entra ID, uncovering vulnerabilities in Conditional Access. Learn about attack methods, defense strategies, and gain insights into Microsoft's cloud security infrastructure.
CrowdStrike Outage - Lessons for Web Development Resilience
Explore the CrowdStrike incident's global impact, understand its causes, and learn key strategies to enhance your company's resilience against similar large-scale tech disruptions.
Rolling out the C2 - Modern Red Team Infrastructure in 2024
Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.