Docker y Kubernetes - Seguridad 101
Explora los fundamentos de seguridad en contenedores y Kubernetes. Aprende consideraciones críticas para proteger aplicaciones y datos en entornos dinámicos. Amplía tus conocimientos en ciberseguridad.
Snyk Integrations
Learn key Snyk integrations for beginners: IDE setup, reporting, CLI usage, Git onboarding, and Jira ticket creation. Ideal for new users or administrators seeking to optimize their Snyk experience.
Analyzing and Improving the Security Properties of Secret Memory
Explore techniques for enhancing secret memory security in Linux systems, covering trusted kernels, container security, and cloud security considerations.
Making DevSecOps Happen with Containers - Security Concerns and Solutions
Explore DevSecOps implementation with containers, addressing security concerns through automation and collaboration. Learn to bridge the gap between DevOps and security teams for better application protection.
Protected Execution Facility: Enhancing Security for Virtual Machines
Explore IBM's Protected Execution Facility for enhanced security in cloud computing. Learn about secure virtual machines, architecture modifications, and safeguards against compromised components in Power Architecture servers.
Leave It to the Machines - AI and ML in Container Security
Explore how AI and ML empower security teams to proactively secure container-based applications, shifting left security capabilities and streamlining the development process.
Real World Security - Software Supply Chain
Explore software supply chain security through a case study on misconfigured registries, threat modeling, and best practices for securing the build-ship-run pipeline.
Software Supply Chain Integrity with Sigstore
Learn about Sigstore, a tool for securing software supply chains, with demos on Cosign for signing and verifying artifacts, and insights on its practical applications.
Attesting Practically: Exploring the Glue Behind Secure Runtime Environments
Explore practical applications of attestations in software supply chain security, focusing on Cosign, in-toto, and VEX to create secure, auditable runtime environments and effectively manage security threats.
Zero-Configuration Runtime Software Component Detection
Discover how to detect vulnerable software components in running systems using eBPF, focusing on Java applications and container images without initial configuration.
5G - Prioritizing Security Now
Explore 5G security strategies, standards, and challenges in virtualized and cloud environments, with insights on cybersecurity and container protection.
Log4Shell Live Hack - A Hands-on, Actionable Fix Guide
Hands-on guide to understanding and mitigating the Log4Shell vulnerability, featuring live hacks, real-world remediation approaches, and practical demos for Java-based applications and infrastructure.
Supply Chain Security: From Infrastructure to Application, Code to Cloud
Explore best practices for securing the entire software supply chain, from infrastructure to application, covering code, cloud, dependencies, and deployment.
Putting Hackers Breaching Your Cluster in Automatic Quarantine
Explore automatic isolation techniques for breached apps in Kubernetes clusters, enhancing overall security and minimizing potential damage from hacker intrusions.
Fileless Attack - Detecting the Undetectable
Explore fileless attacks in Linux containers, their detection using eBPF tools like Falco, Tracee, and Tetragon, and learn to identify unexpected activities in cloud-native environments.
Life of a Sigstore Signature - Understanding Code Signing for Container Images
Explore Sigstore's code signing process for Kubernetes images, including keyless signing, certificate authorities, and transparency logs. Learn to configure admission controllers for cluster security.
Sigstore: Evolution and Future of Software Security Signing
Explore Sigstore's journey in software security signing, its impact on Kubernetes, and future directions. Learn about supply chain security and cutting-edge cryptographic technologies.
Project Calico Network Policies
Explore Project Calico's network policies for Kubernetes, enhancing security and control in cloud-native environments.
SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments
Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.
Keeping Up with CVEs: Finding Needles in Haystacks - Practical Vulnerability Assessment
Discover practical approaches to assess product security beyond raw vulnerability numbers, focusing on risk assessment and understanding scanner limitations in container image analysis.
Shifting Security Left - Simplifying Security for Kubernetes and OpenShift Environments
Learn to simplify security in Kubernetes and OpenShift, focusing on authentication, secrets management, and bridging the gap between security and DevOps for more efficient cloud-native environments.