Computing on Encrypted Data - It's a Kind of Magic
Explore practical applications of computing on encrypted data, including cross-organizational data collaboration, through demonstrations and real-world use cases. Learn about the magic of ciphertext computation.
Falco: Runtime Security for Kubernetes - Episode 16
Explore Kubernetes runtime security with Falco, an open-source tool for detecting unexpected application behavior and threats. Learn features, benefits, and best practices for enhanced cloud-native security.
Hacker Traction Through GitHub Actions - Is Your Open Source Project Safe?
Explore potential security vulnerabilities in GitHub Actions and learn strategies to safeguard open source projects from malicious exploitation.
Maturing SDLC at a Fortune 500 Company Based on OWASP SAMM - Successes and Pitfalls
Explore successes and challenges in implementing OWASP SAMM to enhance software development lifecycle at a Fortune 500 company, offering valuable insights for security professionals.
A Race to the Bottom: Database Transactions Undermining Your AppSec
Explore how database transactions can compromise application security, with insights on identifying and mitigating potential vulnerabilities in your software systems.
Detection Engineering in Kubernetes Environments - Wrangling Security Data Out of Your Clusters
Explore Kubernetes security: log types, detection strategies, and real-world scenarios. Learn to identify malicious activities and risky configurations in both self-managed and CSP-managed clusters.
Avengers Assemble: Threat Modeling Kubernetes Clusters at Massive Scale
Explore threat modeling for Kubernetes clusters at scale, identifying potential security risks and countermeasures in microservices architectures to enhance protection against unauthorized access and resource misuse.
CSI Forensics - Unraveling Kubernetes Crime Scenes
Explore advanced DFIR techniques for container environments, focusing on Kubernetes. Learn to checkpoint compromised apps, conduct memory forensics, and understand the latest DFIR capabilities for effective incident response.
Shadow Vulnerabilities in AI/ML Data Stacks - What You Don't Know Can Hurt You
Explore hidden security risks in AI/ML data stacks, focusing on open-source vulnerabilities, RCE issues, and security anti-patterns. Learn about new checkpoint formats and runtime-based detection methods using eBPF.
Hacking Istio: The Good, the Bad, and the Misconfigured
Explore Istio's network security tools, learn to identify and exploit vulnerabilities in misconfigurations, and understand the importance of proper security policy setup in service mesh environments.
Kubernetes Node Firewalling from the Inside Out
Explore advanced host network firewalling in Kubernetes using declarative resources. Learn about contemporary implementations in Talos and Cilium for enhanced cluster security.
Securing CI/CD Runners Through eBPF Agent
Explore eBPF agent-based security for CI/CD runners, addressing pipeline vulnerabilities and introducing a detection tool for various attack scenarios in development environments.
Cloud Native Governance, Risk, and Compliance - Policy-as-Code Applications
Explore policy-as-code's role in security, admission control, and automated compliance auditing. Learn how to implement governance across diverse environments for comprehensive risk management.
Implementing a Multi-Tenant, Relationship-Based Authorization Model with OpenFGA
Explore implementing multi-tenant, relationship-based authorization using OpenFGA. Learn to model permissions, perform checks, and integrate with identity providers for enhanced security in cloud-native applications.
Empowering Security with Generative AI - Fundamentals and Applications of GPT Models
Explore GPT models' potential in security research, covering semantic searching, few-shot learning, and code generation. Gain insights and inspiration for leveraging AI to empower security teams.
Malicious Compliance Automated: Building Secure Containers and Obfuscating Content
Explore container image compression techniques, secure image building, and obfuscation methods to reduce attack surfaces and disrupt vulnerability scanners. Learn automation and Linux kernel interfaces for enhanced security.
Demystify Modern Signing: Keys, Certificates, and Envelopes
Explore practical aspects of cryptographic signing tools, covering key algorithms, signing envelopes, certificates, and verification, with a focus on identity-based signing using short-lived keys.
From Risks to Resilience: Leveraging CNCF Projects Against Kubernetes' OWASP Top 10
Explore strategies to mitigate OWASP Kubernetes Top Ten security risks using CNCF projects. Learn actionable insights to enhance the security of your Kubernetes deployments.
Security-Focused Chaos Engineering - The Lasso for AI Security Threats
Explore proactive AI security testing using Secops-Chaos, an open-source framework for encoding threat tactics as chaos experiments in Kubernetes environments.
Container Images and Security 101: 5 Need to Know Facts
Explore 5 essential facts about container image formats, security tools, and best practices for confident application deployment in cloud and Kubernetes environments.
Brave New World - Welcoming New AI Identity Challenges
Explore AI identity challenges in digital systems, examining differences between AI and human identities, and learn about building auth systems for the AI era using open-source software.