
Explore automated dependency assurance mechanisms for enhanced visibility into software components, addressing vulnerabilities and license obligations while maintaining development velocity.

Explore the importance of Software Bill of Materials (SBOM) in cloud-native ecosystems, its impact on security, and how you can contribute to its implementation and adoption.

Explore Sigstore's journey in software security signing, its impact on Kubernetes, and future directions. Learn about supply chain security and cutting-edge cryptographic technologies.

Explore Project Calico's network policies for Kubernetes, enhancing security and control in cloud-native environments.

Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.

Discover practical approaches to assess product security beyond raw vulnerability numbers, focusing on risk assessment and understanding scanner limitations in container image analysis.

Explore secure content delivery using The Update Framework (TUF). Learn about protecting repositories, managing keys, and recovering from compromises. Discover recent developments and implementation updates.

Explore security options for Rook with Ceph, including threat modeling, encryption, access controls, and infrastructure hardening for robust data protection in container-based storage systems.

Experts discuss Software Bill of Materials (SBOM), addressing misconceptions, sharing challenges, and exploring implementation strategies for enhanced software supply chain security.

Explore the socio-technical challenges of implementing modern security practices, blending research and anecdotes to address resistance to change and holistic problem-solving approaches.

Explore cryptographic signatures in software supply chain security, their benefits, limitations, and effective implementation strategies for cloud-native applications.

Explore SPIFFE's vision, components, and role in cloud-native environments. Learn about the SPIFFE specification, IDs, naming, and trust domains in this informative deep dive with Q&A.

Explore building an open-source SIEM using Fluentd and Fluent Bit. Learn about data collection, enrichment, correlation, and real-world security infrastructure examples for effective threat detection and analysis.

Explore the critical aspects and challenges of modern software supply chains in cloud-native environments, focusing on security, efficiency, and best practices.

Experts discuss how application security practices in cloud-native environments can reduce risks, enhance compliance, and drive innovation, leading to improved business value.

Discover strategies to integrate cybersecurity into workplace culture, empowering employees to identify and address potential risks, fostering a safer digital environment for your organization.

Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.

Explore Zero Trust Architecture implementation using identity-based segmentation, focusing on cloud-to-premises communication through DMZs with identity-aware proxies and service mesh.

Discover OmniBOR, a revolutionary approach to capture artifact dependency graphs in software development, enhancing supply chain security and reducing false positives in vulnerability scanning.

Explore zero-trust principles for cloud-native environments, covering identity, policy, continuous assessment, and security. Learn implementation guidelines for protecting users, devices, networks, applications, and data.

Explore software supply chain security with insights on guidance, resources, and recent developments. Learn about the whitepaper, compromise catalog, and reference architecture for secure supply chains.