Credential Sharing as a Service: The Dark Side of No-Code
Explore the security risks of no-code platforms and credential sharing services, uncovering potential vulnerabilities and mitigation strategies for modern application development.
AWS and Okta: New Best Practices for Identity Management and Security - One Year Later
Explore the latest AWS-Okta integration strategies, focusing on improved identity management, security practices, and operational efficiency for your AWS environments.
What's New in Teleport 8 - Features and Improvements
Explore Teleport 8's new features with Steve Martin, including WebAuth, AWS Console Access, and expanded cloud support. Learn about use cases, metrics, and Teleport Agent.
Build More Secure Apps with OWASP SKF and ASVS on Kubernetes
Enhance app security using OWASP SKF & ASVS on Kubernetes. Learn integration, manage ASVS requirements, and explore SKF Labs. Includes demo and GitHub repo for easy deployment on EC2 or AWS.
Attacking and Defending Supply Chains - How We Got Admin in Your Cloud
Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.
Network ACLs Made Easy: Establishing Zero Trust Network Policies
Learn to automate Zero Trust network policies using AWS VPC Flow Logs and Terraform. Discover techniques for analyzing traffic data, optimizing security groups, and implementing efficient access controls without third-party solutions.
Learn to Navigate the Perils and Pitfalls of Multi-Tenant Identity Infrastructure
Explore challenges and solutions in multi-tenant identity management for B2B, B2C, and M2M environments, focusing on security, user experience, and balancing isolation with resource sharing.
Adopting Open Source Securely - From Bare Metal to Cloud
Explore secure open-source adoption strategies from bare metal to cloud, covering threat prevention, breach recovery, and Canonical's comprehensive security solutions for enterprise environments.
Securing Digital Frontiers: Leveraging Keycloak for Comprehensive Application Security
Explore Red Hat's Keycloak for robust identity and access management in diverse deployment environments, ensuring application security and mitigating financial risks.
Zero Trust Security with Boundary and Vault
Explore zero trust security implementation using HashiCorp Boundary and Vault for secure, scalable access to cloud resources without VPNs or static credentials.
The SaaS-y Side of Incident Response - Key Log Sources for Okta, GitHub, and Salesforce
Explore key log sources for Okta, GitHub, and Salesforce in cloud-based incident response. Learn to interpret SaaS logs, avoid common pitfalls, and improve detection strategies for effective security management.
Securing Cloud Services with TLS X.509 Client Certificates
Learn to secure cloud services using X.509 client certificates, from generating and deploying certificates to automating processes with OpenXPKI. Includes practical examples for MQTT and home automation.
Rough Seas and Ships in Storms - A 2023 Retrospective from an MSSP Perspective
Cybersecurity expert reviews 2023 challenges for Managed Security Service Providers, offering insights on navigating threats and protecting organizations in an evolving digital landscape.
How Visibility and Segmentation Can Improve Your Sleep - Cybersecurity for IT and OT Environments
Explore strategies for better cybersecurity through risk assessment, environment separation, and simplified policies, leading to improved peace of mind in IT and OT landscapes.
Surprising Ways to Escalate Privileges in Entra ID
Explore common pitfalls and privilege escalation techniques in Entra ID. Learn to identify, prevent, and monitor security risks through practical demonstrations and expert insights.
Hacking a Docker Container Registry
Explore techniques for compromising Docker container registries, uncovering vulnerabilities and potential security risks in containerized environments.
Top Network Security Interview Questions - Scenario-Based Prep Series
Master scenario-based network security interviews with realistic questions on DDoS mitigation, unauthorized access prevention, VPN security, cloud protection, and more. Enhance problem-solving skills for job success.
The Future of DevSecOps - Trends and Predictions for 2024
Explore DevSecOps trends for 2024: emerging technologies, security practices, and industry predictions. Gain insights to stay ahead in software development and operations.
First Principles: Robust Data Breach Protection with OCI Zero Trust Packet Routing
Explore OCI Zero Trust Packet Routing, a revolutionary solution that embeds security policies into the network layer, preventing data breaches caused by misconfigurations and ensuring robust protection against evolving threats.
How HMRC Digital Secures Services at Scale
Discover HMRC Digital's strategies for securing large-scale services, exploring innovative approaches to DevSecOps implementation and risk management in digital tax systems.
Implementing Email Attachment Security
Explore email attachment security implementation using pyminigip and AWS integration. Learn risks, solutions, and benefits for enhanced protection in business scenarios.