Attacking and Defending Supply Chains - How We Got Admin in Your Cloud
Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.
Please Don't Discard - Security Data: Leveraging Structured Security Review Data
Discover how to leverage security review and threat modeling data for future challenges. Learn from Snowflake's approach to structuring and persisting valuable security information.
The Secret Life of Secrets - Designing Secure API Keys
Explore API key design strategies, security measures, and best practices for creating robust and secure API authentication systems.
Insane in the Supply Chain - Threat Modeling for Attacks on AI Systems
Explore AI supply chain risks and threat modeling strategies to protect against attacks that could impact company reputation and executive liability.
Guardians of Cybersecurity - Deploying IoT Devices via Drones and Dropboxes
Explore the cybersecurity implications of drones carrying hacking devices, discussing potential threats and the need for increased awareness in this emerging field of IoT and aerial technology.
Drones, RemoteID and the Thrilling Future of UAS Flight
Explore RemoteID technology reshaping drone flight, focusing on safety, security, and regulatory compliance. Discover current applications and challenges in the thrilling future of UAV aviation.
Linnaeus on Human Diversity - Evolving Views and Classifications
Explore Linnaeus's evolving views on human diversity, examining his classification system, motivations, and perspectives on cultural and environmental influences on humanity.
Accelerating Electric Vehicle Innovation with Cloud Native Technologies
Explore NIO's use of cloud native technologies to enhance EV software development, addressing challenges in consistency, testing, and data utilization between simulated and real-world environments.
Network ACLs Made Easy: Establishing Zero Trust Network Policies
Learn to automate Zero Trust network policies using AWS VPC Flow Logs and Terraform. Discover techniques for analyzing traffic data, optimizing security groups, and implementing efficient access controls without third-party solutions.
Threat Modeling for AI Apps with Attacks as Code
Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.
Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers
Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.
How to Generate VEX Automatically for Your Project
Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.
SPIFFE Ecosystem: MTLS and Identity with Linkerd and Teleport
Explore SPIFFE ecosystem growth, focusing on Linkerd and Teleport's implementation for workload identity verification across Kubernetes clusters and external environments.
Leveraging Cryptographic Lineage for Context and Connected Trust
Explore cryptographic lineage for enhanced security, addressing challenges in AI adoption through attested claims and chain of custody, building on zero trust principles for improved traceability and trust in distributed systems.
When Software Kills: The Therac-25 Radiation Therapy Disaster
Explore the tragic story of the Therac-25 radiation therapy machine, examining software flaws, design issues, and their devastating consequences for patients.
Building a Physical "Connections" Word Puzzle with RFID and ESP32
Build a physical "Connections" word puzzle using RFID readers and microcontrollers. Learn component overview, wiring, PCB design, and coding for an infinitely replayable game suitable for schools, events, or escape rooms.
How to Stay Safe Online - Cyber Security Awareness for Everyone
Learn essential cyber security concepts, identify online threats, and protect your personal information with practical tips for securing networks and email.
Laptop Charging but Not Turning On - Common Fault Diagnosis and Repair
Diagnose and fix a common issue where laptops charge but won't power on, exploring potential causes and troubleshooting steps for this tricky electronic problem.
Asus TUF Laptop Repair - Misdiagnosis and Fault Detection
Detailed troubleshooting of an Asus TUF laptop with charging issues, showcasing diagnostic techniques and potential pitfalls in electronic repair.
Coding Consciousness - An Algorithm for Awareness?
Explore theories of consciousness with computer scientists Lenore and Manuel Blum as they discuss the potential for coding self-awareness into algorithms, moderated by Brian Greene.
TrustZone-M Security Vulnerabilities in Microcontroller TEEs - Lessons Learned
Explore TrustZone-M security vulnerabilities in Arm Cortex-M MCUs. Uncover isolation weaknesses, bypass techniques, and potential exploits in microcontroller Trusted Execution Environments.