An Introduction to Container Hacking
Explora técnicas de hacking en contenedores, abordando vulnerabilidades y mejores prácticas de seguridad en entornos DevSecOps y tecnologías cloud con el experto Rory McCune.
Introducción a SPIFFE y SPIRE - Autenticando servicios nativos de la nube
Descubre SPIFFE y SPIRE para autenticar servicios nativos de la nube en entornos DevSecOps. Aprende mejores prácticas de seguridad defensiva y ofensiva para aplicaciones en la nube con expertos del sector.
Kubernetes Native Policy Management with Kyverno
Explora la gestión nativa de políticas en Kubernetes con Kyverno, abordando prácticas de DevSecOps para mejorar la seguridad en el ciclo de vida de aplicaciones en entornos cloud.
Threats Are Clear in Any Language - Beating Up Firewall Risks
Exploración de prácticas DevSecOps para mejorar la seguridad defensiva y ofensiva en el ciclo de vida de aplicaciones, incluyendo tecnologías Cloud y mitigación de riesgos de firewall.
Attacking and Defending Infrastructure with Terraform - How We Got Admin Across Cloud Environments
Explore techniques for attacking and defending Terraform infrastructure, including secret exfiltration and deploying malicious applications, with insights on mitigating vulnerabilities in cloud environments.
Cloud Security and Compliance
Comprehensive review of cloud computing security risks, mitigation strategies, and compliance considerations for organizations adopting cloud-based services.
The Next Disruption - Security Beyond the Perimeter and Endpoint
Explore evolving cybersecurity challenges and innovative solutions beyond traditional perimeters, focusing on cloud, containers, and APIs in the context of recent global events.
DevSecOps State of the Union
Comprehensive overview of DevSecOps trends, best practices, and tools, distilling insights from industry experts and mature security programs for practical implementation.
Strangeways, Here We Come
Explore cloud migration for startups: benefits, risks, and security best practices. Learn about AWS, cloud architecture, and strategies for a successful transition from on-premises to cloud-based solutions.
Logging, Monitoring, and Alerting in AWS - The TL;DR
Comprehensive guide to AWS security services for effective monitoring, alerting, and incident response. Learn critical configurations to immediately enhance your infrastructure's protection.
Trust in the Cloud in Tumultuous Times
Explore cloud computing's impact on work, security, and privacy amid geopolitical challenges. Brad Smith discusses balancing societal defense with individual freedoms in the digital age.
Metabadger - Automating IMDS Protection at Scale in AWS
Discover Metabadger, an open-source tool for upgrading EC2 instances to IMDSv2, preventing SSRF-based credential theft. Learn how Salesforce automated IMDS protection at scale in AWS.
Hook, Line and Sinker - Pillaging API Webhooks
Explore "Webhook Boomerang flaws" and learn how to exploit SSRF vulnerabilities in API webhooks, potentially compromising cloud credentials despite security measures.
Go With The -Work-flow
Unveiling security risks in cloud workflow platforms: misconfigurations, credential exposure, data leakage, insecure coding, and containerized malware. Eye-opening research for IT professionals.
Building Identity for an Open Perimeter
Explore Netflix's cloud-first approach to identity and security, focusing on SSO, MFA, adaptive authentication, and user-centric solutions for a modern, open perimeter.
The 5 Most Dangerous New Attack Techniques, and What's to Come
Experts from SANS Institute discuss the most dangerous new attack techniques, including hardware attacks, big data weaponization, crypto mining, ICS safety threats, and cloud breaches, offering insights on defeating these evolving threats.
Secrets at Scale - Automated Bootstrapping of Secrets & Identity in the Cloud
Explore Netflix's innovative approach to securely managing secrets and identities for thousands of microservices in a cloud environment, addressing scalability and self-healing challenges.
What's New in Security for Red Hat OpenStack Platform
Explore recent security advancements in Red Hat OpenStack Platform, including key management, encryption, compliance, and future developments for enhanced cloud infrastructure protection.
What Lurks in the Shadow
Explore the hidden risks of shadow IT, IoT, and mobile workforce in cybersecurity. Learn strategies for regaining control and mitigating threats in the modern digital landscape.
CloudSec Rules Everything Around Me - C.R.E.A.M.
Explore cloud security essentials, from shared responsibility to logging, compliance, and incident response. Learn best practices for AWS, Azure, and Office 365 environments.
Supply Chain Unchained - How To Be A Bad SaaS
Explore software supply chain vulnerabilities, focusing on SaaS security. Learn about access control, API restrictions, maturity evaluation, logging, cloud security, and code integrity.