
Explore Linux kernel keystore's secure credential management, data encryption, and key negotiation capabilities. Learn its benefits for cloud-native environments and integration with specialized security hardware.

Explore software exploitation, hacking techniques, and tools in this talk. Learn to secure systems through gamified environments and build skills for safer software development.

Explore test-driven application security with automated tests to validate defenses. Learn to prevent OWASP TOP 10 vulnerabilities through clear requirements and security-focused testing in C# and ASP.NET Core 6.

Explore automation strategies for comprehensive cybersecurity, covering infrastructure, threat protection, cloud security, and proactive measures to address the growing skills gap in the industry.

Explore broken access control vulnerabilities, their impact, prevention methods, and efficient testing techniques in web applications.

Comprehensive exploration of software supply chain attacks, featuring real-world examples and practical solutions to minimize vulnerabilities and protect against emerging threats.

Learn to integrate security requirements early in development using OWASP ASVS. Discover strategies for buy-in, prioritization, and maintaining a sustainable security process tailored to your organization's needs.

Hands-on guide to setting up and using OWASP Juice Shop for Capture The Flag events. Learn to host your own security awareness competitions and improve hacking skills.

Explore GitHub Actions vulnerabilities, attacks, and countermeasures. Learn about runner risks, potential misuse by attackers, and security measures to protect your CI/CD pipeline.

Strategies for automating security operations by correlating detections and leveraging statistical methods to reduce false positives and enhance incident response effectiveness.

Explore passwordless infrastructure for enhanced security. Learn FIDO standards, design options, and implementation strategies. Discover how to improve your team's security posture regardless of size.

Explore Kubernetes security risks, including workload configurations, supply chain vulnerabilities, and RBAC issues. Learn mitigation strategies and best practices for securing containerized infrastructure.

Explore Return Oriented Programming (ROP) exploitation technique, its mechanics, and practical examples for executing code in non-executable stack contexts.

Exploring how Stacc extended DevOps principles to achieve ISO27001 certification, merging security, regulations, and compliance into an engaging project for financial software development.

Explore XSS threats in OAuth 2.0 frontends, assess real-world attacker capabilities, and learn effective defense strategies for securing your applications against advanced attacks.

Hands-on guide to securing .NET application supply chains, covering source code access, third-party libraries, build servers, and implementing SLSA guidance and SBOM concepts.

Explore modern web authentication methods beyond passwords, including SSO, 2FA, OAuth, and more. Learn their benefits, limitations, and how to enhance user security in web applications.

Explore strategies for integrating security tools and automation into CI/CD pipelines, including vulnerability scanning, static analysis, and dynamic testing to enhance DevOps agility.

Explore secure practices for managing production environments without direct access, ensuring data privacy and system integrity while maintaining agility and release efficiency.

Explore strategies to mitigate security risks from third-party dependencies in .NET Core, including compartmentalization and API review, to enhance application safety and reduce vulnerabilities.

Exploring modern mobile and IoT security challenges, this talk examines current enterprise defenses, demonstrates their shortcomings, and offers practical solutions for improving security in the evolving threat landscape.