Catch Me If You Can: The Race to Detect and Prevent Cloud Misconfigurations
Explore cloud misconfigurations, their risks, and prevention strategies. Learn to detect issues using Panoptica and safeguard against data breaches in today's fast-paced tech landscape.
Fuzzing at Mach Speed: Uncovering IPC Vulnerabilities on MacOS
Explore macOS IPC security, focusing on Mach message handlers. Learn about custom fuzzing techniques to uncover vulnerabilities in privileged RPC-like functions, potentially leading to sandbox escapes and privilege escalations.
Building Serverless AI Workflows with Wasm and Rust
Explore building customized AI workflows using WebAssembly and Rust for serverless functions. Learn to create secure, lightweight solutions integrating with LLMs and various SaaS platforms.
Software Composition Risk - Determining Actual Risk and Taking Action
Explore software composition risk assessment, mitigation strategies, and proactive processes to enhance enterprise security beyond vulnerability scanning and manual updates.
Decoding Trust in Confidential Computing: Foundations and Open Source Perspectives
Explore trust in confidential computing and open source, examining technical protocols, policy considerations, and human factors shaping the evolving landscape of secure and transparent computing.
Root Canal Static Analysis Audit of Zephyr
Comprehensive static analysis audit of Zephyr's code quality, revealing deeper security vulnerabilities beyond standard linters. Insights on advanced bug detection and fixing processes for critical open-source projects.
Don't Get Burned! Secure Coding Essentials to Protect Your Application
Explore common security pitfalls in coding and learn practical tips to write secure, bulletproof applications. Covers input validation, injection, file overwrites, and arbitrary code execution with real-world examples.
Using WebAssembly to Run, Extend, and Secure Your .NET Application - Niels Tanis - NDC Porto 2023
Explore WebAssembly's evolution, security features, and integration with .NET. Learn to run and extend applications, leverage sandboxing, and enhance security using Trusted Execution Environments.
Introduction to Fuzzing Using FFUF
Learn to use ffuf for efficient web application fuzzing, enhancing your bug bounty and penetration testing skills.
Cloud Native Supply Chain Security: Beyond SBOMs - Perspectives and Practices
Insights on cloud native supply chain security beyond SBOMs. Experts discuss straightforward approaches, simple security practices, and future perspectives using open-source tools and frameworks.
Bringing SPIFFE to Linkerd for Mesh Expansion
Explore how Linkerd integrates SPIFFE/SPIRE to extend service mesh identity beyond Kubernetes, enabling seamless workload integration and mesh expansion.
Confidential Containers for GPU Compute - Incorporating LLMs in AI Lift-and-Shift Strategy
Explore confidential containers for GPU-accelerated AI, integrating LLMs and Kubernetes for secure, high-performance computing while maintaining data privacy in cloud-native environments.
The Rustvolution: How Rust Is the Future of Cloud Native
Explore how Rust addresses critical challenges in modern distributed systems, offering memory safety, fearless concurrency, and zero-cost abstractions for the future of cloud native development.
IAM Confused: Analyzing 8 Identity Breach Incidents
Dissection of 8 real cloud breaches exploiting insecure identities, revealing insights and mitigation strategies for better identity and access management in cloud environments.
How to Implement Biometric Authentication in Your Android App
Implement secure biometric authentication in Android apps using step-by-step guidance. Learn to enhance user experience and protect sensitive data with fingerprint or face recognition.
Understanding Supply Chain Threats with Static Analysis - GopherCon 2023
Explore a CLI tool for Go that detects privileged permissions in package dependencies, enhancing security and preventing supply chain attacks.
Dapr Integration: A Tour of Tools, Platforms and Partnerships
Explore innovative tools, platforms, and integrations leveraging Dapr to enhance developer productivity and solve real-world challenges in cloud-native environments.
Java 17 to 21: A Showcase of JDK Security Enhancements
Explore JDK security advancements from Java 17 to 21, covering cryptographic algorithms, configuration, API improvements, and Java Flight Recorder's role in enhancing software security.
Maximizing Security with JDK - Understanding Built-in Capabilities
Explore JDK's native security features, including cryptography and post-quantum enhancements, to simplify development and strengthen application security through live coding demonstrations.
Patching Your Way to Compliance with a Small Team and Technical Debt
Learn strategies to overcome system patching challenges with limited resources, focusing on breaking the cycle of technical debt and meeting security compliance requirements.
Beyond Kubernetes with Linkerd 2.15 and SPIFFE
Explore Linkerd 2.15 and SPIFFE for advanced Kubernetes networking, security, and identity management in cloud-native environments.