Software Supply Chain Security - Key Terms, Players, and Projects - Part 2
Explore key terms, players, and projects in software supply chain security. Gain insights on open-source visibility, SBOMs, and initiatives addressing complex security challenges in the open-source pipeline.
Tackling Software Supply Chain Security as an Organization - Episode 128
Explore organizational approaches to software supply chain security with experts discussing solutions, initiatives, and best practices for managing risks and improving visibility.
Software Supply Chain Security: Definition and Importance - Episode 1
Explore the key pillars of software supply chain security in this comprehensive podcast episode. Gain insights into problem definition, essential terms, and practical implementation strategies for enhancing your organization's security posture.
Malicious Packages and Malicious Intent - Episode 123
Explore malicious attacks, open source security, and practical tips for improving company safety with Liran Tal, director of developer advocacy at Snyk and Github Star.
Advancing DevSecOps Metrics - Creating a Clear Path to Improved Performance
Integrate a clear path to improved performance by advancing DevSecOps metrics. Learn to deconstruct core metrics for accelerated delivery and increased customer value.
Why You Can Still Get Hacked Even After Signing Your Software Artifacts
Explore artifact poisoning tactics in software supply chains and learn prevention methods, including secure artifact signing, to protect your CI/CD pipeline from malicious injections.
Cyber Attack - Learn Your Lesson from Recent Security Breaches
Explore hacker tactics and analyze a major recent attack case study to enhance your understanding of cybersecurity threats and defense strategies.
The Iceberg - How to Mitigate Risks in Your OSS Projects
Explore strategies to mitigate risks in open-source software projects and understand the expanding attack surface in modern development environments.
Open Source Supply Chain Security for Enterprises
Explore enterprise-level open source supply chain security strategies with insights from JPMorgan Chase's Product Security Director.
Regulation by Telemetry - How to Fix OS Security by 2030
Explore strategies to enhance OS security through telemetry-based regulation, aiming for improved cybersecurity measures by 2030.
DevSecOps Connect - Integrating Security in Development and Operations
Explore DevSecOps principles, secure serverless architectures, enhance WordPress security, and fortify Dart/Flutter projects. Gain insights from industry experts and network with professionals.
OWASP LLM Top 10 - Understanding Critical Security Risks for Large Language Models
Explore OWASP LLM Top 10: Gain insights into critical security risks, learn practical steps to fortify applications, and stay ahead in cybersecurity with expert R Nagarjun.
Weaving Application Security's Scale - Enabling Business Through Partnerships
Explore AppSec's growth journey and learn how to scale security across organizations by fostering partnerships and enabling wider business objectives.
Exploiting AI-Generated Code Vulnerabilities and Their Solutions
Discover vulnerabilities in AI-generated code and learn how to exploit and fix them. Gain insights into potential security risks and implement effective solutions using Snyk.
DevSecOps by Default: Lessons from Log4Shell - What We Have, Can, and Must Learn
Explore DevSecOps strategies post-Log4Shell, focusing on strengthening software supply chains, vulnerability detection, and implementing "Secure by Default" policies using open-source tools.
Organizational Change Through the Power of Why - DevSecOps Enablement
Empower teams with effective DevSecOps communication and education strategies to drive organizational change and enhance security practices.
Bridging the Dev-Sec Divide: Three Tips for Agile Developers
Discover proven steps to build and grow a DevSec culture in your tech organization, bridging the gap between development and security teams.
Confessions of a Vulnerable Developer: What Developers Need to Know About Security
Explore security basics for developers, learn about free open-source tools, and gain practical knowledge to code confidently while improving software security.
Becoming a Link in Securing the Software Supply Chain
Explore open source security fundamentals, challenges, and opportunities. Learn how to contribute to existing communities and play a role in securing the software supply chain ecosystem.
DevSecOps: More Than Just Pipelines
Explore DevSecOps beyond pipelines, covering key concepts, application security, and practical strategies for integrating security into the development lifecycle.
The Transformation of DevOps and InfoSec in AIoT
Explore the convergence of AI, IoT, DevOps, and InfoSec in AIoT, examining transformations, challenges, and security implications for modern tech landscapes.