
Discover strategies for seamlessly updating Yocto-based projects, addressing security, minimizing debt, and integrating new features with practical examples.

Detect and fix CVE security issues in Yocto-based embedded Linux distributions using CVE checker. Learn best practices, common problems, and effective solutions for maintaining high-quality software projects.

Explore flexible, secure CI pipelines using Tekton, Chains, and Enterprise Contract to balance developer innovation with robust security measures for various software targets.

Explore key elements of vulnerability disclosure and management, including CVE, CVSS, CWE, and VEX. Gain insights into communication between security teams and researchers.

Learn to enforce organizational policies on container images using Enterprise Contract, leveraging Sigstore signatures and in-toto attestations within the Tekton ecosystem.

Explore North Korean cyber threats targeting software developers through malicious npm packages, focusing on Lazarus Group campaigns and their evolving tactics to steal cryptocurrency.

Explore software supply chain security through a risk-based approach, focusing on open source vulnerabilities and process improvements to mitigate supplier risks.

Explore guidelines for forking dependencies when facing security vulnerabilities, balancing community responsibility with timely fixes.

Explore Enterprise Contract for enforcing software supply chain security and compliance. Learn to verify container images, signatures, and attestations using customizable policies.

Discover SBOMs: definition, importance, contents, creation methods, and open-source tools. Explore integration challenges and solutions in build processes.

Explore privacy risks of interactive LLMs, examining evaluation frameworks and proposing research directions for improved privacy auditing and mitigation strategies.

Explore Oblivious RAM's evolution from theory to real-world deployment. Learn about its applications in blockchain and cloud services, including Signal's implementation and the Oblivious STL library initiative.

Explore privacy implications of attribution reporting methods through label inference measures. Gain insights into adversary modeling and risk-accuracy tradeoffs in data privacy.

Explore an in-house tool for unified asset visibility, vulnerability mapping, and attack surface analysis in complex multi-cloud environments, tailored for Red Hat standards.

Explore SLSA framework for securing software supply chains, mitigating vulnerabilities, and ensuring code integrity from development to deployment.

Explore privacy implications of machine unlearning, including threat models, deletion inference, and experimental results in this Google TechTalk on differential privacy for ML.

Explore marginal-based methods for generating differentially private synthetic data, covering mechanisms, selection algorithms, and empirical findings.

Explore OpenSSF Scorecard for assessing NuGet package security. Learn to evaluate maintenance, workflows, and security tools to improve application safety and make informed decisions.

Discover vulnerabilities in AI-generated code and learn how to exploit and fix them. Gain insights into potential security risks and implement effective solutions using Snyk.

Explore how surveillance capitalism and flawed economic models impact human rights and society. Learn about alternative approaches prioritizing social good, privacy, and human welfare over unchecked growth.

Explore how surveillance capitalism and current economic models in tech threaten human rights and societal well-being. Learn about potential solutions and actions to prioritize human welfare.