Demystifying and Enabling Workload Identity Across the Cloud Native Ecosystem
Explore workload identity management fundamentals, components, and implementation using SPIFFE and SPIRE. Learn to secure applications across environments with zero trust principles and elevated security controls.
Three Years of Lessons from Running Potentially Malicious Code Inside Containers
Insights on securing Docker and Kubernetes environments, monitoring for malicious activity, and preparing for potential attacks based on real-world experiences with Katacoda.
Living off the Cloud Attacks - You Should Know About Them
Explore cloud-based attacks, their detection challenges, and mitigation strategies. Gain insights into malware communication via API through a live demo and learn effective prevention techniques.
From Security Practitioner to CEO: Building a $1B Security Company
Explore the journey from security practitioner to CEO, uncovering insights on building a billion-dollar security company with Erkang Zheng.
Visibility and Protection in Infrastructure as Code and Web Applications - DevOps Security with FortiGate CNF, FortiWeb and FortiDevSec
Master application security practices through FortiGate CNF, FortiWeb, and FortiDevSec integration with DevOps, covering IaC protection, source code security, and attack surface minimization in the development lifecycle.
Confidential Computing on Azure - Secure Container Deployment and Management with Contrast
Master secure container deployment in Azure through confidential computing, covering data protection, end-to-end encryption, cluster setup, and container management with Contrast integration.
From Code to Cloud: Quality Kubernetes Deployments with Monokle
Master Kubernetes deployments using open-source tools. Learn to install apps, configure resources, implement OPA validation, use Kustomize overlays, and compare deployments for efficient cloud-native development.
Sailing the Security Seas with Tetragon Tutorial
Explore Tetragon for runtime security: learn to filter and examine events, strengthen defenses against intrusions, and gain hands-on experience using the tetra CLI in this interactive tutorial.
AuthZEN: The OpenID Connect for Authorization - A New Standard for Cloud-Native Authorization
Discover how AuthZEN is revolutionizing cloud-native authorization standards through unified APIs, exploring both policy-as-code and policy-as-data approaches while ensuring vendor independence and interoperability.
Yahoo's Kubernetes Journey from On-Prem to Multi-Cloud at Scale
Discover Yahoo's evolution in managing Kubernetes infrastructure, from operating 37 on-prem clusters to successfully implementing a multi-cloud strategy across AWS and GCP, addressing key challenges in networking, security, and scalability.
Mish-Mesh: Abusing the Service Mesh to Compromise Kubernetes Environments
Discover critical security vulnerabilities in Kubernetes service mesh deployments and learn defensive strategies against unauthorized access, system compromises, and secret exposure.
Building a Private Cloud Platform with Kubernetes - From Air-Gapped Design to Implementation
Discover how Google engineered a private cloud platform using Kubernetes, exploring their innovative approach to cloud tenancy, isolation, networking, and integration of CNCF technologies for scalable infrastructure.
Why Perfect Compliance Is the Enemy of Good Kubernetes Security
Discover practical approaches to Kubernetes security that balance compliance requirements with operational efficiency, focusing on risk reduction and platform functionality rather than perfect security scores.
Powering Automatic Authorization in Envoy Through Live Traffic Inspection
Discover how to leverage live traffic inspection for automatic authorization in Envoy, using CNCF Pixie to generate OPA policies and implement effective service-to-service access controls.
Running Quantum-Safe Applications on Kubernetes
Discover how to protect cloud applications from quantum computing threats by implementing quantum-safe cryptography in Kubernetes environments, with practical steps for securing data against future quantum attacks.
Auditing Kubernetes Users: Tracking Security Holes
Discover how to implement effective Kubernetes auditing mechanisms, track user activities, and detect security vulnerabilities through RBAC analysis and audit API implementation.
Defending AI on Kubernetes - A Red Team Security Playbook
Explore offensive security strategies and defense mechanisms for AI systems on Kubernetes, focusing on vulnerability assessment and protective measures from an attacker's viewpoint.
Scanning Infrastructure as Code for Security Vulnerabilities with Terraform
Master infrastructure security scanning with Checkov OSS, focusing on Terraform vulnerabilities and exploring policy-as-code solutions like Bridgecrew and Hashicorp Sentinel for enhanced cloud security.
Workload Identity Federation - Stop Using Long-Lived Credentials in Kubernetes Security
Discover how to implement workload identity federation in Kubernetes, enhancing security through credential management while improving developer experience and reducing system outages.
Microsoft Azure Fundamentals - Complete Course
Comprehensive Azure fundamentals course covering cloud concepts, core services, security, pricing, and support. Includes hands-on projects and practical examples for AZ-900 exam preparation.
Azure OpenAI Service for Startups and Digital-First Companies - OD839
Discover how to leverage Azure OpenAI's language models to build innovative and cost-effective generative AI applications with enterprise-grade security and reliability on the Azure platform.