Dynamic Authorization and Policy Control for Docker Container Environments
Explore fine-grained policy enforcement in Docker container environments using Open Policy Agent. Learn to balance security requirements with rapid application deployment and developer productivity.
Cloud Computing
Explore cloud computing risks, certifications, and security considerations with insights on virtualization and the Cloud Security Alliance.
Securing Cloud Delivery Pipelines - Findings From A Blue-Red Team Security Simulation
Explore findings from a blue/red team security simulation focused on securing cloud delivery pipelines, with insights on tooling, advanced attackers, and best practices.
Developing a Rugged DevOps Approach to Cloud Security
Strategies for integrating continuous security into DevOps processes, emphasizing automation, monitoring, and agile security practices for cloud environments.
Using Behavior to Protect Cloud Servers
Explore behavior-based analytics for cloud server security, focusing on dynamic privilege management to identify and prevent insider threats and privilege escalation attacks in real-time.
Alexa, Hack My Serverless Please
Explore serverless security risks, focusing on event injection attacks across various platforms. Learn to identify and mitigate vulnerabilities in cloud-based applications.
Reverse Engineering and Exploiting Builds in the Cloud
Explore security vulnerabilities in cloud-based CI/CD and container build environments. Learn about potential attack scenarios, remediation strategies, and best practices for securing the software supply chain.
A Dive into Hyper-V Architecture and Vulnerabilities
Explore Hyper-V architecture, vulnerabilities, and security implications in virtualization technology. Gain insights into guest-to-host exploits and platform security challenges.
Lateral Movement and Privilege Escalation in GCP - Compromise Organizations without Dropping an Implant
Explore techniques for identity compromise, privilege escalation, and lateral movement in Google Cloud. Learn about GCP's unique security model and default permissions, with demonstrations and tool releases.
My Cloud is APT's Cloud - Investigating and Defending Office 365
Investigate and defend Office 365 against sophisticated attacks. Learn authentication types, attack lifecycle, and effective countermeasures for cloud-based enterprise security.
The Enemy Within - Modern Supply Chain Attacks
Practical guidance on defending against and responding to supply chain attacks, covering prevention strategies, risk assessment, and best practices for both SecOps and App Development professionals.
Intercepting iCloud Keychain
Discover critical cryptographic flaws in iCloud Keychain's end-to-end encryption, potentially allowing attackers to access plaintext secrets through man-in-the-middle attacks on iCloud communications.
Managing Access Entitlements and Their Lifecycle in a Multi-Cloud Environment
Explore strategies for managing access entitlements across multi-cloud environments, addressing security risks and improving governance practices for effective IAM controls.
Remember When We Used to Call It "Information Security"? Let's Go Back to That
Experts discuss shifting focus back to information security, exploring advancements in identity management and encryption to better protect data in an interconnected world.
Post-Exploitation of Cloud Service Providers
Explore AWS post-exploitation techniques, including cloud-wide credential theft and backdooring compromised accounts, to enhance penetration testing skills for cloud environments.
Cloud Threat Modeling - From Architecture Design to Application Development
Learn cloud threat modeling techniques to identify and mitigate security risks in architecture design and application development, focusing on determining attack surfaces and eliminating common flaws.
From Reactive to Proactive - Operationalizing Your Threat Intel
Cybersecurity experts discuss operationalizing threat intelligence, moving from reactive to proactive approaches, and addressing challenges in cloud adoption and workforce training for enhanced security.
How to Be Successful in Azure Bug Bounty
Learn Azure bug bounty strategies from a Microsoft expert, covering attack surfaces, past payouts, and how to start hunting for vulnerabilities in cloud infrastructure.
Using k8s to Deploy Security Services in a Hostile World
Explore deploying security tools in challenging environments using Kubernetes for scalability and minimal customization. Learn a three-step plan and cloud setup process for inherited projects.
Infrastructure Based Security
Explore infrastructure-based security, covering cloud, IoT, hiring experts, historical perspectives, and modern challenges. Learn strategies to implement robust security measures in today's complex digital landscape.
You Moved to Office 365 - Now What
Explore Office 365 security, auditing, and protection strategies. Learn about cloud attack prevention, Azure Sentinel, and identity protection to enhance your organization's cloud security posture.