Security Best Practices in Azure Cloud
Hands-on overview of implementing security in Azure deployments, covering best practices for various services and secure .NET application deployment.
Security in the Land of Microservices - Challenges and Solutions
Explore security challenges in microservices architecture, including authentication, secret sharing, and API gateway patterns. Learn best practices for securing decoupled services in large-scale applications.
Dynamic Security Group Recommendations with Grouper and Dredge
Explore Netflix's innovative approach to AWS security group management using Grouper and Dredge, enhancing developer insights and ensuring least privilege network access.
iGoat: A Self-Learning Tool for iOS App Security Testing
Learn iOS app security through hands-on exercises with iGoat, an open-source tool for developers and pentesters. Explore vulnerabilities, exploit techniques, and implement fixes in a safe environment.
AWS Survival Guide - Application Security Essentials
Discover essential strategies for securing applications in AWS environments, covering key concepts and best practices for cloud security from an experienced CTO and application security expert.
Attacking AWS: The Full Cyber Kill Chain
Comprehensive exploration of AWS vulnerabilities and attack strategies, covering the entire cyber kill chain for enhanced cloud security awareness.
Building a Valid Threat Library for Cloud-Based Applications
Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.
Defending Cloud Infrastructures with Cloud Security Suite
Comprehensive tool for auditing AWS/GCP/Azure security, combining open-source capabilities with custom checks to enhance cloud infrastructure protection and address human error risks.
Turning Engineers into Extended Blue Team Members - Security Strategies
Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.
Authorization in Microservices World - Kubernetes, ISTIO and Open Policy Agent
Explore fine-grained authorization in microservices using Open Policy Agent, integrated with Kubernetes and ISTIO. Learn challenges and solutions for enforcing programmatic authorization in cloud-native environments.
How I Could Have Stolen Your Photos From Google
Uncover a critical security vulnerability in Google Photos and learn how it could have compromised user privacy. Gain insights into responsible disclosure and ethical hacking practices.
Automating IMDS Protection at Scale in AWS - Metabadger Tool Overview
Automate AWS IMDS protection with Metabadger: Learn to upgrade EC2 instances to IMDSv2, prevent SSRF attacks, and secure AWS credentials across multiple accounts without downtime.
Costly Mistakes in Serverless Computing
Explore common pitfalls in serverless computing and learn how to strengthen your cybersecurity posture when building cloud-based applications.
AWS Misconfiguration from an Attacker's Perspective
Explore AWS misconfigurations from an attacker's perspective with security analyst Kavisha Sheth. Learn to identify and mitigate vulnerabilities in cloud environments for enhanced cybersecurity.
Why Checking Infrastructure-as-Code for Misconfigurations Is Not Enough - Comprehensive Cloud-Native Application Security
Explore comprehensive cloud-native app security beyond misconfigurations. Learn dynamic assessment techniques for robust architecture design and compliance in modern software development.
Identifying Assets in the Cloud - Security Techniques
Explore techniques for identifying and securing cloud-based assets, enhancing your organization's cybersecurity posture in the modern digital landscape.
Attacking Microservice Systems: Methods and Practical Tips
Discover methods and practical tips for attacking microservice systems, exploring new security architecture patterns and vulnerabilities specific to this increasingly popular design approach.
Tips and Tricks - Protecting Cloud Infrastructure
Explore best practices for safeguarding cloud infrastructure, focusing on data protection, compliance, and risk management in Linux-based environments.
Cloud Security - The Beauty of Open-Source
Explore the advantages of open-source solutions for cloud security with Project Cyber. Learn how transparency and community collaboration enhance protection in cloud environments.
A Look Under the Hood of CNCF Security Audits
Insights into CNCF security audits: process, expectations, outcomes, and common vulnerabilities. Explores experiences from auditing six major projects and the value of audit reports for contributors and researchers.
Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines
Learn to enhance cloud security using OIDC tokens in CI/CD pipelines. Explore benefits, configuration, and integration with major platforms through practical demonstrations.