Open Source Summit Latin America 2022 - Keynote Presentations on Open Source Trends
Explore the future of open source across industries with expert keynotes on cloud collaboration, financial services, telecom, and next-gen development at this Latin American summit.
The Evolution of Service Mesh and New Release of Cilium
Explore service mesh evolution, Cilium's latest release, and enterprise BPF usage with Liz Rice, discussing advancements in open-source networking and security.
SOAR with Postee - Automated Incident Response for Cloud Native Risks
Automate incident response for cloud-native risks using Postee, enhancing security operations and streamlining threat management in modern infrastructures.
Discussing the State of Open Source Report - Opportunities and Challenges
Explore the state of open source software, its adoption, and challenges with Javier Perez. Gain insights on opportunities and advice for organizations embracing open source technologies.
A Methodical Approach to Privilege Escalation in AWS
Explore methodical AWS privilege escalation techniques with Senior Penetration Tester Eduard Agavriloae. Learn advanced cybersecurity strategies for identifying and exploiting vulnerabilities in cloud environments.
Cracking the Code - Decoding Anti-Bot Systems
Explore techniques for decoding anti-bot systems with insights from an Anti-Ban Expert. Learn strategies to navigate web scraping challenges and enhance data collection capabilities.
Maximizing Security with Threat Modeling in the Cloud
Explore cloud security threat modeling techniques and lessons learned from analyzing security issues in multiple projects, focusing on proactive mitigation strategies for infrastructure flaws.
Empower Your Defenses - New Cloud Tools for Securing Vital Applications
Explore cutting-edge cloud security solutions including isolated environments, air gap gateways, and AI-powered tools to protect vital applications against advanced cyber threats.
How to Get the Most Out of Python Decompilers Uncompyle6 and Decompyle3
Explore Python bytecode decompilers Uncompyle6 and Decompyle3. Learn tips, tricks, and novel techniques for recreating source code from bytecode, applicable to other languages and potential machine learning applications.
Cloud Console Cartographer: Tapping Into Mapping - Slogging Through Logging
Explore an open-source framework for deciphering cloud console logs, enhancing threat detection and incident response in cloud environments. Learn to differentiate user actions from system-generated events.
Breaking Managed Identity Barriers in Azure Services
Explore novel approaches to bypass Managed Identities security in Azure Functions and Machine Learning, uncovering vulnerabilities that allow stealthy persistence and token extraction.
Attacking Debug Modules in the Android Ecosystem
Explore security vulnerabilities in Android debug modules, focusing on vendor-specific implementations. Learn about attack surfaces, real-world cases, and mitigation strategies for Android ecosystem security.
Pipeline Pandemonium - Hijacking Cloud Security Through CI/CD Vulnerabilities
Explore CI/CD pipeline vulnerabilities in cloud environments, examining real-world examples of security risks and exploitation techniques in GitHub, CircleCI, and Jenkins.
Fuzzing Frontiers - Exploring Unknown Vulnerabilities with Nuclei v3.2
Explore Nuclei v3.2's advanced fuzzing capabilities for uncovering unknown vulnerabilities. Learn to craft custom templates and import HTTP traffic, enhancing your security testing workflow and threat mitigation strategies.
Cloud Threats Through the Eyes of an Adversary - Evolving Tactics in Cloud Security
Explore how cybercriminals adapt tactics for cloud environments, leveraging unique vulnerabilities. Gain insights into advanced attack strategies and learn to develop proactive cloud-native security defenses.
My Terrible Roommates - Discovering the FlowFixation Vulnerability and the Risks of Sharing a Cloud Domain
Unveiling FlowFixation: High-severity cloud vulnerability affecting shared domains. Explore risks, prevention methods, and the importance of the public suffix list in cloud security.
Racing for Hidden Treasures in Public GitHub Repositories - Exploiting Build Artifacts
Explore a novel attack vector in GitHub Actions, uncovering hidden access tokens in build artifacts and racing against time to exploit ephemeral credentials for swift attacks on open-source projects.
From Keyless to Careless - Abusing Misconfigured OIDC Authentication in Cloud Environments
Explore vulnerabilities in keyless authentication for cloud environments, focusing on misconfigured OIDC. Learn to identify and prevent security risks in AWS IAM roles to protect against unauthorized access.
Confidential Computing in Azure Databricks
Explore Azure Databricks' integration with Confidential Computing, enhancing data security through hardware-based trusted execution environments and advanced VM features, with insights on future developments.
AI Functions: Using AI in SQL with Databricks
Leverage large language models directly in SQL queries to enhance data analysis, generate natural language queries, and create custom logic with Databricks' AI Functions.
5.0 Shades of Java Exploitation
Explore Java exploitation techniques in this DefCamp 2023 talk. Discover vulnerabilities, hacking methods, and cybersecurity insights from expert Matei Badanoiu of Deloitte.