Red Team Methodology - A Naked Look
Explore red team methodology, covering pre-engagement, external and internal tactics, infrastructure automation, and effective communication for comprehensive security assessments.
Perfect Storm - Taking the Helm of Kubernetes
Explore Kubernetes security, from container basics to advanced attack techniques and cloud security considerations, with practical insights and defensive strategies.
Blue Teamin on a Budget of Zero - Kyle Bubp
Learn essential blue team security practices and tools for organizations with limited budgets, covering frameworks, documentation, network mapping, vulnerability scanning, and intrusion detection.
Getting Started with Burst
Learn to optimize game performance using Burst compiler: hands-on porting to C# Job System, exploring capabilities and limitations, and avoiding common pitfalls in Unity development.
Building Unity Projects with Unity Cloud Build
Discover Unity Cloud Build's automated app building, testing, and distribution features for streamlined game development and efficient team collaboration.
How I Learned Docker Security the Hard Way - So You Don’t Have To
Practical insights on securing Docker containers, from architecture to incident response. Learn threat modeling, attacker techniques, and best practices for DevOps security.
Coding Secure Code - Best Practices, Advice for Writing Secure Code
Discover best practices for writing secure code, focusing on business-driven approaches, understanding your model, and integrating security seamlessly into development processes.
Distributed Tracing in .NET 6 using OpenTelemetry
Explore distributed tracing in .NET 6 using OpenTelemetry, covering observability, implementation, and visualization with Jaeger and Honeycomb.io for effective microservices monitoring.
Kubernetes and Selenium Grid for Highly Scalable Browser and Device Farm
Explore scalable browser and device farm solutions using Kubernetes and Selenium Grid. Learn to optimize cloud costs, enhance feedback cycles, and implement efficient UI automation testing for microservices architectures.
Container Security at the Speed of CI/CD
Explore container security challenges and learn to implement an automated solution that integrates with CI/CD pipelines, addressing application, code, web server, and host security.
Integrating Our DevSecOps Product Pipeline with Software Security Standards
Explore strategies for integrating security standards into DevOps pipelines, leveraging automation, and aligning innovation with compliance for efficient product development.
Advanced Persistence Threats - The Future of Kubernetes Attacks
Explore advanced Kubernetes attacks, their detection, and prevention methods. Gain insights into sophisticated threats and practical security techniques for protecting clusters.
Peel Back the Layers of Your Enterprise and Make Your Adversaries Cry
Explore enterprise security with Security Onion, an open-source platform offering comprehensive visibility. Learn about intrusion detection, network monitoring, and incident response techniques to detect and interrupt adversaries quickly.
How to Reduce Supply Chain Risk - Lessons from Efforts to Block Huawei
Explore supply chain risk management using Huawei as a case study. Experts discuss best practices for risk assessment, transparency, and securing networks in a global ecosystem.
Open Source in Security-Critical Environments
Explore best practices for using open-source code securely in critical environments, focusing on DevOps and management strategies for edge, network, and cloud applications.
Common Infrastructure Exploits in AWS - GCP - Azure Servers and Containers
Explore cloud infrastructure security risks, focusing on DNS tunneling and service endpoints in AWS/GCP/Azure. Learn practical mitigations for servers and containers.
Cloud-Powered Compromise Blast Analysis - In the Trenches with Microsoft IT
Discover advanced methods for identity compromise detection using cloud logs, SIEMs, and telemetry. Learn from Microsoft's experience in protecting millions of authentications.
Moving 17 Years of Old Legacy Code and Sites into the Cloud
Explore the challenges and solutions of migrating legacy systems to the cloud, covering requirements analysis, decision-making, and sustainable future planning for complex technical environments.
How to Use GitHub Actions with Security in Mind
Comprehensive guide to enhancing GitHub Actions security, covering access control, secrets management, containerization, and best practices for protecting CI/CD pipelines and workflows.
Protect Yourself Against Supply Chain Attacks
Explore supply chain attack vectors, from CI/CD pipeline vulnerabilities to package squatting, and learn protective measures for securing your development environment.
You See Honey, I See Beehive - Developing Honey Networks
Explore end-to-end honey networks for breach defense, combining honeypots, security sensors, and continuous monitoring. Learn open-source and enterprise options for networks of any size.