From Illuminating to Eliminating Crypto Jacking Techniques in Cloud Native
Explore cryptojacking evolution in cloud environments, from basic attacks to sophisticated techniques targeting containers and Kubernetes. Learn proactive protection strategies using open-source tools for enhanced security.
Sharing Security Secrets: How to Encourage Security Advocates
Discover strategies for fostering a company-wide security culture, educating non-security teams, and implementing a successful security advocates program to enhance organizational data protection and service availability.
How to Secure Your Supply Chain at Scale
Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.
Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Fun with Continuous Compliance
Explore continuous compliance strategies, including OSCAL for automated assessments and OSS tools like Falco and Voucher for scalable implementation, to streamline and modernize your DevSecOps compliance approach.
CTF Overview and Experience - Preparing for SecurityCon
Prepare for SecurityCon's CTF event with a warm-up session covering container breakouts and Kubernetes misconfigurations. Suitable for all experience levels, learn CTF engagement techniques.
Securing Shopify's Software Supply Chain - Mitigating Supply Chain Attacks
Explore techniques for securing software supply chains, including cloud-based defenses, trust establishment, and malicious behavior detection, drawing from Shopify's experiences.
Certs Magic - Exploring Cloud Native Security Certifications
Explore the world of cloud native certifications with expert Walid Shaari, gaining insights into career advancement and industry-recognized credentials.
Breaking ML Services: Finding Zero-Days in Azure Machine Learning
Uncover critical vulnerabilities in Azure Machine Learning, including credential leaks, information disclosure, and persistence techniques. Learn assessment methods for cloud-based MLaaS platforms and shared responsibility models.
Big SIEM Energy at Micro-SIEM Cost - Building Custom Security Monitoring in AWS
Learn to build a cost-effective micro-SIEM for AWS using EventBridge, CloudTrail, SNS, and ChatBot. Discover how to tailor security monitoring to your specific needs and budget constraints.
Threat Model Report: Security Considerations for Hardening Declarative GitOps on Kubernetes with Argo CD
Explore security considerations for hardening Argo CD deployments in Kubernetes, focusing on mitigating misconfigurations and implementing best practices to enhance GitOps workflows.
Threat Model Report: Security Considerations for Hardening Declarative GitOps on Kubernetes with Argo CD
Explore security considerations for hardening Argo CD deployments in Kubernetes, focusing on mitigating misconfigurations and implementing best practices to enhance GitOps workflows.
Building an Inherently Secure App - Challenges and Best Practices
Explore API-driven app security with Pangea's "Security Platform as a Service," integrating Auth0 by Okta for authorization. Learn to build inherently secure cloud apps across multiple platforms.
Protecting User Privacy in Private Set Intersection - A Journey Toward Mitigating User Tracking
Explore DPCA-PSI, a novel protocol enhancing privacy in Private Set Intersection. Learn how it securely computes intersection statistics while preserving differential privacy, mitigating user tracking risks in ad measurement and data sharing.
SRE for Cybersecurity - Lessons from Google's Infrastructure Security
Lessons learned from leading Google's SRE teams for infrastructure security, Cloud Security products, and global resilience, with insights for enterprise CISOs and Boards of Directors.
The Growing Security Risk
Explore the escalating security landscape with industry experts, examining current threats, innovative solutions, and strategies to safeguard digital assets in an interconnected world.
Opportunistic Encryption Using IPsec - Implementation and Configuration
Explore opportunistic encryption with IPsec, leveraging XFRM code for automatic traffic encryption. Learn configuration techniques for cloud deployments and internet-wide implementation using X.509 certificates and LetsEncrypt.
Digital Forensics with Container Checkpointing
Explore container checkpointing for digital forensics in cloud environments. Learn to capture and analyze forensic snapshots of running containers, enhancing security in ephemeral Kubernetes setups.
Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall
Explore Zero Trust principles and next-gen Web Application Firewall technology for securing modern cloud applications against sophisticated cyber attacks, featuring Coraza and OWASP CoreRuleSet.
Security Design Anti-Patterns: Creating Awareness to Limit Security Debt
Explore security design anti-patterns, their impact on SDLC, and strategies to identify and mitigate them early. Learn to create awareness and limit security debt in software development.
Why Security Fails and How to Solve It - Lessons from Real-World Assessments
Explore real-world security failures and innovative solutions with insights from Praetorian's field experiences. Learn actionable steps to enhance cybersecurity through smarter practices and cutting-edge tools.