2021 ICS/OT Cybersecurity Threat Landscape Review
Explore the 2021 ICS/OT cybersecurity landscape, including new threat groups, ransomware trends, and notable incidents. Gain insights to better safeguard industrial control systems and operational technologies.
Are We Forever Doomed to Software Supply Chain Security?
Explore software supply chain security challenges, recent incidents, and strategies for mitigating vulnerabilities in open-source ecosystems. Learn about maintainer account security and registry management.
When One Line Took Thousands of Websites Offline - Lessons from a Kubernetes Incident
Explore a critical incident where a single configuration change caused widespread website outages, examining the recovery process, lessons learned, and subsequent improvements in Kubernetes infrastructure.
Inside the Biggest Hacks and Facts of the Past Year - 2022-2023
Explore the most significant cybersecurity events, active threat actors, and surprising facts from 2022-2023 in this comprehensive overview of the rapidly evolving digital security landscape.
Defeating Cognitive Bias and Developing Analytic Technique - T100
Explore cognitive biases in cybersecurity analysis, learn techniques to overcome them, and develop stronger analytical skills for more effective network security monitoring and incident response.
Breaking the Cloud - A Tale of Three Breaches
Explore three real-world cloud security breaches, analyzing attack vectors, vulnerabilities, and lessons learned to enhance your organization's cloud defenses and incident response strategies.
How a Couple of Characters and GitOps Brought Down Our Site
Explore how GitOps adoption led to a global outage at Skyscanner, examining challenges, benefits, and key learnings to help prevent similar incidents in cloud-native environments.
Automating Incident Response
Explore techniques for streamlining and automating incident response processes to enhance cybersecurity efficiency and effectiveness.
A Year in the Wild - Fighting Malware at the Corporate Level
Explore Yelp's automated malware defense system, featuring in-house tools like AIR and OSXCollector, complemented by open-source solutions for swift threat detection and response in corporate networks.
Threat Intel Analysis of Ukrainians Power Grid Hack
Analyze the Ukrainian power grid hack, exploring tools, techniques, and implications. Learn about ICS vulnerabilities, attack stages, and strategies to enhance critical infrastructure security.
Metastable Failures in the Wild
Explores metastable failures in distributed systems, analyzing real-world incidents to categorize triggers and amplification mechanisms, aiding understanding and potential solutions for this prevalent issue.
The Origins of USAA's Postmortem of the Week
Discover USAA's journey in establishing an IT-wide Postmortem Review meeting, with tips for implementing your own large-scale review process. Learn from their experiences and insights.
Tales from the VOID - The Scary Truth about Incident Metrics
Challenges industry-standard incident metrics, proposing alternative approaches for better system resilience. Explores VOID database insights to improve incident response and organizational learning.
Are We Getting Better Yet? - Progress Toward Safer Operations
Exploring progress in safer operations, this talk delves into effective incident analysis, organizational learning, and strategic investments for improved reliability and team well-being.
Meatbag Systems - How Our Reliability Culture & Practice Evolved over Time
Exploring the evolution of reliability culture through major incidents, emphasizing the human aspect in maintaining production systems and aligning reliability with customer value.
OMGOVHBBQ
Análisis detallado del incendio en el centro de datos de Estrasburgo en marzo de 2021, sus causas y consecuencias para la infraestructura en la nube.
Patterns, Not Categories - Learning Across Incidents
Explore a pattern-centered approach to outage analysis, moving beyond traditional categorization methods to identify fundamental failure patterns in complex systems for improved reliability decision-making.
An Incident Post-Mortem
Explore the process of conducting effective incident post-mortems in software engineering, focusing on collaborative problem-solving and continuous improvement without blame or finger-pointing.
Turning an Incident Report into a Design Issue with TLA+
Explore how modeling-driven techniques and TLA+ can enhance postmortem analysis, uncover root causes, and improve system design in distributed database architectures.
Incident Commanders to Incident Analysts - How We Got Here
Explore the transition from incident management to incident analysis, highlighting the distinct skills required and the value of post-incident learning for driving meaningful organizational change.
Far from the Shallows - The Value of Deeper Incident Analysis
Explore the value of in-depth incident analysis in SRE, moving beyond surface-level metrics to uncover hidden insights and improve system reliability through qualitative investigation.