Securing Apache Spark Big Data Operations: Threats, Best Practices, and Pragmatic Steps
Explore Apache Spark security best practices, threat modeling, and practical steps to safeguard big data operations in various environments.
Exploring Ubuntu Confidential VMs with Intel TDX on Google Cloud
Discover how Ubuntu Confidential VMs with Intel TDX enhance security on Google Cloud, protecting against threats and implementing zero trust strategies for sensitive applications.
The Infrastructure Cloud - Security Lifecycle Management
Mitigate cloud risk with HashiCorp's Security Lifecycle Management. Learn to protect, inspect, and connect sensitive elements across environments using Vault and Boundary for identity-based security and automated access.
Ensuring Kubernetes Security Through DISA STIG Process - Corsec Security and Mirantis
Explore DISA STIG certification for Kubernetes security, focusing on implementation, challenges, and best practices. Gain insights on compliance, documentation, and automation for robust K8s deployments in regulated industries.
CCSP Certification - Exam Tips, Strategies, and Career Benefits
Comprehensive guide to CCSP certification: exam structure, preparation strategies, and career benefits. Equips IT professionals with knowledge to excel in cloud security and pass the exam confidently.
What's New in CCSK V5 Exam - Latest Features and Updates Revealed
Explore key updates in CCSK V5 exam, including new features and effective preparation strategies. Learn from experts to enhance your cloud security knowledge and ace the certification.
AI, Speed, Flexibility, and Security with Oracle Cloud Infrastructure - CloudWorld Keynote
Explore Oracle's advancements in cloud and AI technology, focusing on speed, flexibility, and security. Learn how OCI delivers customized solutions for sovereignty and scalability.
DoubleDrive - Double Agents Hide Behind The Clouds
Explore cloud-based double agent techniques in IT security. Learn about innovative attack methods and defense strategies for protecting cloud environments.
Attacking and Defending Kubernetes Clusters with KubeHound Attack Graph Model
Explore Kubernetes cluster security using KubeHound attack graph model. Learn offensive and defensive strategies to enhance your IT infrastructure protection.
Kubernetes Bootstrap Tokens and AKS - Security Implications
Explore Kubernetes bootstrap tokens and AKS security in this TROOPERS24 talk. Gain insights into node authentication and potential vulnerabilities in container orchestration.
Argo CD and GitOps Security: Exploiting Redis Vulnerability in Kubernetes Clusters
Unveiling a critical vulnerability in Argo CD, exposing Kubernetes clusters to privilege escalation attacks. Learn about the exploit, its impact, and essential mitigation strategies for GitOps security.
Long Live Short-Lived Credentials - Auto-rotating Secrets at Scale
Explore automated credential rotation for enhanced security. Learn best practices and tools to implement short-lived secrets, reducing risk and improving DevOps efficiency.
A Needle in a Haystack: Finding Threats in Billions of Cloud Logs
Discover techniques for efficiently analyzing massive cloud audit logs to identify security threats using basic cloud tools and advanced platforms like OpenSearch and Kubernetes.
Implementing Transaction Tokens with Keycloak for API Request Authentication
Explore implementing Transaction Tokens with Keycloak for secure API authentication in cloud-native architectures, addressing token redirect attacks and enabling call chain identification for internal workloads.
Level Up Your Security Career with the TAG Security Community
Discover how to advance your security career through CNCF's TAG Security community. Learn about project security, whitepapers, threat modeling, and industry trends while collaborating with experts.
Decoding 8 Real-World Cloud Identity Breaches
Dissection of 8 real cloud breaches exploiting insecure identities, revealing insights and mitigation strategies for common IAM vulnerabilities in cloud environments.
Automating Configuration and Management of GitHub Repositories with Minder
Learn to automate GitHub repository management using Minder, an open-source platform. Write custom Rego rules to enforce security policies across multiple repositories, enhancing supply chain security.
Metrics That Matter - Choosing Cloud Security KPIs for Your Business
Learn to select and implement effective cloud security metrics tailored to your organization's needs, risk appetite, and business goals. Explore real-world examples and innovative concepts for enhancing security operations.
Accelerating AI Securely with GVisor
Explore container sandboxing for AI security, focusing on gVisor's implementation, hardware accelerator support, and performance optimization for mitigating AI/ML risks.
Below the Radar: Identifying Hidden Threats Within the Development Ecosystem
Explore critical threats in cloud-native environments, focusing on hidden exposed secrets in code. Learn about vulnerabilities in source code management, Kubernetes secrets, and Shadow IT, with mitigation strategies and tools.
Temporary Access to the Cloud - A Case Study
Explore Chime's innovative temporary access solution for Okta, balancing product development with cultural shifts in security practices. Learn from this real-world case study.