Introduction to Open Policy Agent - Rego Language and Kubernetes Policies
Explore Open Policy Agent (OPA) with co-creator Torin Sandall. Learn Rego language basics, write policies for Kubernetes, and run OPA locally using CLI and VSCode.
Why Public Cloud Is on the Way Out
Explore the shift from public to private cloud, discussing cost reduction, on-premise deployment, security benefits, and technical options for cloud-native agility. Includes demos of Mirantis solutions.
Build an IPv6-only Network on Amazon Web Services - Virtual Private Cloud
Learn to build an IPv6-only network on AWS, including VPC setup, subnet configuration, routing, security groups, and launching EC2 instances with IPv6 support.
Policy as Code with Open Policy Agent
Explore decoupling policy from applications and platforms using Open Policy Agent (OPA) to enforce rules consistently across distributed tech stacks, enhancing security and control.
AMD SEV-SNP Attestation - Establishing Trust in Guests
Explore AMD SEV-SNP attestation for confidential computing, including report generation, verification, and integration into Linux guest boot flow for enhanced security and trust.
Confidential Computing and Privacy-Enhancing Technologies - The Landscape
Explore confidential computing and privacy-enhancing technologies for secure cloud adoption. Compare approaches, discuss open source's role, and see a demo using the Enarx project.
SEV-SNP Development Status Update - Current Progress and Future Plans
Explore AMD SEV-SNP's enhanced guest protection, upstream development progress, challenges, and future plans for features like live-migration and interrupt security.
SOAR with Postee - Automated Incident Response for Cloud Native Risks
Automate incident response for cloud-native risks using Postee, enhancing security operations and streamlining threat management in modern infrastructures.
A Methodical Approach to Privilege Escalation in AWS
Explore methodical AWS privilege escalation techniques with Senior Penetration Tester Eduard Agavriloae. Learn advanced cybersecurity strategies for identifying and exploiting vulnerabilities in cloud environments.
Maximizing Security with Threat Modeling in the Cloud
Explore cloud security threat modeling techniques and lessons learned from analyzing security issues in multiple projects, focusing on proactive mitigation strategies for infrastructure flaws.
Empower Your Defenses - New Cloud Tools for Securing Vital Applications
Explore cutting-edge cloud security solutions including isolated environments, air gap gateways, and AI-powered tools to protect vital applications against advanced cyber threats.
Cloud Console Cartographer: Tapping Into Mapping - Slogging Through Logging
Explore an open-source framework for deciphering cloud console logs, enhancing threat detection and incident response in cloud environments. Learn to differentiate user actions from system-generated events.
Breaking Managed Identity Barriers in Azure Services
Explore novel approaches to bypass Managed Identities security in Azure Functions and Machine Learning, uncovering vulnerabilities that allow stealthy persistence and token extraction.
Pipeline Pandemonium - Hijacking Cloud Security Through CI/CD Vulnerabilities
Explore CI/CD pipeline vulnerabilities in cloud environments, examining real-world examples of security risks and exploitation techniques in GitHub, CircleCI, and Jenkins.
Multi-Cloud Architectures - When and Why
Explore multi-cloud architectures with VP Jenn Bergstrom: definitions, use cases, and considerations for implementing across multiple cloud platforms.
Practical Perimeter-less Authentication Solutions for Startups Using AWS Native Tools
Explore Zero Trust implementation for startups using AWS, focusing on ephemeral access management and cost-effective tools like SSM and Verified Access for robust cloud-native security.
Cloud Attack: Dissecting Attack Paths with Graph-Mode Visualization
Dissect cloud attack paths using graph-mode visualization. Learn to map and mitigate threats across AWS, Azure, and GCP with open-source tools, enhancing your defense strategy against evolving risks.
Cloud Threats Through the Eyes of an Adversary - Evolving Tactics in Cloud Security
Explore how cybercriminals adapt tactics for cloud environments, leveraging unique vulnerabilities. Gain insights into advanced attack strategies and learn to develop proactive cloud-native security defenses.
My Terrible Roommates - Discovering the FlowFixation Vulnerability and the Risks of Sharing a Cloud Domain
Unveiling FlowFixation: High-severity cloud vulnerability affecting shared domains. Explore risks, prevention methods, and the importance of the public suffix list in cloud security.
From Keyless to Careless - Abusing Misconfigured OIDC Authentication in Cloud Environments
Explore vulnerabilities in keyless authentication for cloud environments, focusing on misconfigured OIDC. Learn to identify and prevent security risks in AWS IAM roles to protect against unauthorized access.
Terraform Templates for Secure Databricks Deployments from Day Zero
Explore Databricks' Security Reference Architecture: Terraform templates for AWS, Azure, and GCP. Learn best practices for secure deployments, from network firewalls to Unity Catalog external locations.