AppSec is Too Hard
Explore common AppSec pitfalls, robust security approaches, and practical examples to improve application security and make it more manageable at scale.
How to Deal with Privacy and GDPR in Event-Sourced Systems
Explore strategies for implementing privacy and GDPR compliance in event-sourced systems, addressing challenges and providing practical solutions for data protection.
Test-Driven Security with Spring 6
Learn to apply Test-Driven Development principles to security features using Spring Security 6, building a secure application from scratch with authentication and access control.
10 Things You Didn't Know Your Data Can Do for You
Discover 10 ways to maximize your data's potential, from simplifying infrastructure to automating workflows. Learn how modern applications can design, grow, and secure data while deriving insights and enhancing user experiences.
How to Gain Value from SAST Tools in SDLC - Most Common Findings and Mitigations
Explore SAST tools for secure software development, covering common findings and mitigations. Learn to integrate security checks early in the SDLC and prioritize critical issues for improved code security.
Stranger Danger - Your Java Attack Surface Just Got Bigger
Explore cloud-native Java security risks, vulnerabilities, and best practices through live-hacking demonstrations, focusing on open-source dependencies and Docker images.
Wargames - Java Vulnerabilities and Why You Should Care
Explore Java vulnerabilities, security tools, and best practices to protect applications. Learn about CVEs, software supply chain risks, and DevSecOps strategies for robust Java development.
How to Implement DDoS Protection in GCP
Implementación práctica de protección DDoS en GCP: arquitectura, herramientas y demostración en vivo de ataques y defensa para aplicaciones web modernas.
Everything in Spring Security 6 Baked with a Spring Boot 3 Recipe
Explore Spring Security 6 updates with Spring Boot 3, covering new features, changes, and the authorization server project. Learn why upgrading matters and how to implement these enhancements.
Wasmer Things - An Upside-Down Guide to WebAssembly
Explore WebAssembly from a compiler's perspective, uncovering its inner workings and discovering why it's becoming a popular choice for sandboxed, memory-safe runtime environments.
Why Building Your Ship with Raw Materials is a Bad Idea
Explore software bill of materials (SBOMs), open source compliance, and best practices for secure, robust application development in the face of new regulations and vulnerabilities.
Keep Your Dependencies in Check
Explore tools and strategies for efficiently managing and updating dependencies in software projects, balancing security needs with continuous delivery of business value.
Wasmer Things - An Upside-Down Guide to WebAssembly
Explore WebAssembly from a lower-level perspective, uncovering its inner workings and discovering why it's becoming a popular choice for sandboxed, memory-safe runtime environments.
Supply Chain Security for OpenSource Projects
Explore supply chain security for open-source projects, covering potential threats, attack points, free tools, and strategies to protect against cyber attacks in software development.
Building a One-Time-Password Token Authentication Infrastructure
Explore a robust one-time-password token authentication system for multi-site use, featuring Kerberos support, fault tolerance, and minimal management overhead. Learn from LIGO's real-world implementation and experiences.
Assume Compromise - Think Like a Hacker to Build Resilience
Explore hacker strategies to enhance cyber resilience. Learn why breaches escalate and how adopting an attacker's mindset can improve defense planning and preparedness for inevitable compromises.
Finding Vulnerabilities through Static Analysis and Scripting
Discover critical vulnerabilities through reverse engineering and static analysis. Learn to set up a build environment and explore real-world examples in this inspiring session on bug hunting techniques.
The Evolution of CVEs, Vulnerability Management, and Hybrid Architectures
Explore new research on vulnerabilities, including CVE trends, severity, and exploit code sharing. Learn about implications for vulnerability management in hybrid and multicloud architectures.
Emotet Exposed - Insider the Cybercriminal's Supply Chain
Uncover Emotet botnet's inner workings, including malware delivery, execution chains, and development lifecycle. Gain insights from VMware researchers who bypassed anti-analysis techniques to map its dynamic infrastructure.
Building International Coalitions to Scale Defense
Explore how international partnerships enhance global cybersecurity, focusing on combating ransomware and leveraging shared democratic values to achieve large-scale defense outcomes.
Cloud Security Made for the EU - Securing Data & Applications
Explore confidential computing and real-time compliance for ultimate data security in EU cloud transitions. Learn key strategies to satisfy data protection regulations and address CISO concerns.