Vanquishing Vulnerabilities - Preparing for Critical CVEs
Prepare for critical vulnerabilities with tools and practices for container image scanning, policy enforcement, network control, runtime configurations, and behavior monitoring.
First Steps to Full Lifecycle Security with Open Source Tools
Hands-on workshop demonstrating installation, configuration, and customization of open-source security tools for DevOps, focusing on Trivy for container and infrastructure security and Starboard for continuous security assurance.
Cloud Native - Protecting Software Supply Chains Using Kyverno
Explore Kyverno's role in safeguarding software supply chains, enhancing security practices, and ensuring compliance in cloud-native environments.
Putting the Supply Chain Pieces Together: A Deep Dive into the Secure Software Factory
Explore a deep dive into supply chain security, focusing on implementing CNCF's Secure Software Factory architecture using cloud-native tools to enhance software provenance and artifact trustworthiness.
Securing the Supply Chain with Witness - A Framework for Supply Chain Security
Explore Witness, an open-source framework for supply chain security, its trust model, and implementation in CI pipelines. Learn about attestation collections, policy enforcement, and integration with cloud-native tools.
Towards the Cloud Native Telco: Learning from the Trenches
Insights on cloud-native transformation in telecom, focusing on Kubernetes deployment for 5G Core platforms and addressing key improvement areas for reliable service delivery.
Dissecting the 0-Day Supply Chain Vulnerability in Argo CD
Explore the discovery and implications of a critical 0-day vulnerability in Argo CD, including attack methods, remediation steps, and its impact on the ecosystem.
Making Your Apps and Infrastructure Services Failure-Resilient with Dapr
Explore Dapr's role in enhancing microservices resilience, applying global policies for failure recovery across apps and infrastructure, regardless of deployment location or programming language.
Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton
Practical guide to securing container native supply chains using SLSA principles, in-toto attestations, and step-by-step demos for achieving SLSA Level 2 in Tekton and Github Actions.
Distributing Supply Chain Artifacts with OCI and ORAS Artifacts
Explore secure distribution of supply chain artifacts using OCI & ORAS Artifacts. Learn about managing artifact relationships, lifecycle management, and evolving registry capabilities for cloud-native environments.
Securing Web Services with Let's Encrypt and Cert Manager
Automate SSL/TLS certificate management for web services using Let's Encrypt and Cert Manager, enhancing security and simplifying deployment in cloud-native environments.
Securing Shopify's Software Supply Chain - Mitigating Supply Chain Attacks
Explore techniques for securing software supply chains, including cloud-based defenses, trust establishment, and malicious behavior detection, drawing from Shopify's experiences.
Certs Magic - Exploring Cloud Native Security Certifications
Explore the world of cloud native certifications with expert Walid Shaari, gaining insights into career advancement and industry-recognized credentials.
Perception and Decision-Making Systems for Human-Robot Teaming in Safety-Critical Environments
Perception and decision-making systems for human-robot teaming in safety-critical environments, focusing on group detection, social navigation, and healthcare applications to improve patient outcomes and reduce clinician workload.
KeyBleed: Attacking the OneKey Mini Cryptocurrency Wallet - Hack In The Box 2023
Revealing vulnerabilities in cryptocurrency hardware wallets, focusing on the OneKey Mini's security flaws. Demonstrates live exploit to extract and crack the seed, recovering stored funds in under one second.
Google Workspace Forensics - Insights from Real-World Hunts and Incident Response
Insights on threat hunting and incident response in Google Workspace, focusing on data exfiltration from Google Drive. Learn forensic investigation techniques for GWS logs from real-world cases.
Emulation, PowerPC, and Personal Transition in Reverse Engineering - Breaking Ground
Explore baremetal emulation for PowerPC, its applications in reverse engineering, and the personal journey of creating a new framework while embracing self-discovery and transformation.
Cognitive Security and Social Engineering: A Systems-Based Approach
Explore cognitive security's unique approach to protecting systems, considering interconnectedness and multiple scales. Learn about the Cognitive Security Attack Cycle and strategies for disrupting attacks.
Passwords: Policies, Securing, Cracking, and More
Explore password security essentials, from creating strong policies to understanding cracking techniques. Learn to secure passwords in AD and AAD, and discover why they remain crucial despite MFA adoption.
Authentik - Open Source Self-Hosted Authentication System with OIDC and SAML
Explore Authentik, an open-source authentication system. Learn installation, configuration, reverse proxy setup, forward authentication, and OIDC implementation for enhanced security.
Security Data Science Teams: A Guide to Prestige Classes
Explore data-driven security roles, their overlapping skills, and career paths in this talk on the evolving landscape of security data science teams and job titles.