
Learn practical approaches to implement privacy promises in software development, focusing on embedding privacy in CI/CD pipelines and overcoming common hurdles to ensure data handling aligns with user-facing policies.

Explore data security and storage hardening in Rook and Ceph. Learn about threat modeling, security zones, encryption, access controls, and infrastructure hardening for robust software-defined storage.

Explore security basics for developers, learn about free open-source tools, and gain practical knowledge to code confidently while improving software security.

Explore essential security practices for open source projects, including fuzzing, SBOM, and SSDLC. Learn to assess vulnerabilities and maintain robust security postures through real-world examples.

Explore open source security fundamentals, challenges, and opportunities. Learn how to contribute to existing communities and play a role in securing the software supply chain ecosystem.

Explore strategies to combat autocracy through information warfare, drawing insights from history and innovative approaches to defend and promote democracy globally.

Explore software end-of-life/support challenges, terminology, and potential solutions. Discuss impacts on supply chain security and the role of transparency efforts in managing EOL/EOS issues.

Explore essential security features and common pitfalls in Linux-based embedded systems to enhance your project's protection and implementation.

Analyze Go package imports with Capslock CLI tool to restrict permissions, thwart attack vectors, and enhance security by applying the principle of least privilege in third-party libraries.

Explore lessons learned from using Embedded Linux and Yocto Project in EOD mobile robots. Gain insights on design, implementation, and industry transformation over a decade.

Explore Industrial Grade Linux for sustainable, secure, and long-lasting civil infrastructure systems. Learn how CIP enhances reliability and fosters collaborative development.

Explore effective principles and practices for sustaining systems resilience, drawing inspiration from nature, human adaptations, and engineering practices.

Explore SPIFFE and SPIRE for establishing trust between workloads in complex cloud environments without pre-shared secrets, enhancing security and productivity.

Explore DevSecOps beyond pipelines, covering key concepts, application security, and practical strategies for integrating security into the development lifecycle.

Explore advanced JavaScript application security techniques, from understanding cyber attack chains to implementing network isolation and restrictive IAM permissions.

Learn essential incident response strategies for developers, focusing on security incidents, your role during crises, and effective communication with AppSec teams.

Explore threat-informed defense strategies for cloud environments, covering defensive measures, cyber threat intelligence, and testing methodologies to enhance cybersecurity effectiveness.

Explore software safety through SBOMs: Learn to create, analyze, and distribute software bills of materials for enhanced security and transparency in your applications.

Explore security chaos engineering to improve defenses, manage chaos, and foster collaboration. Learn to build experiments, measure reliability, and ask better questions for enhanced cybersecurity.

Explore scientific approaches to incident response, challenging traditional methods and emphasizing hypothesis-driven strategies for improved reliability in platform engineering.

Learn iterative threat modeling for agile development. Explore misconceptions, methodologies, and practical examples using OWASP Juice Shop. Discover effective ways to identify, prioritize, and mitigate security risks.