Policy as Code: Embracing Continuous Policy Management
Explore continuous policy management using software development patterns to mitigate risks, update policies efficiently, and measure compliance effectively.
AI Safety, Security, and Play - Episode 137
Explore AI safety and security with David Haber, covering prompt injections, data poisoning, LLM vulnerabilities, and approaches to handling sensitive data in AI models.
Effective Risk Management and AI Security Standards - Episode 138
Explore Google's Secure AI Framework (SAIF) for effective risk management in AI adoption. Learn six core elements, collaboration importance, and practical approaches to address AI security concerns.
SCARLETEEL: Advancing Cloud Attack Chains
Explore SCARLETEEL operation's tactics for infiltrating AWS, stealing data, and performing cryptojacking attacks. Learn defensive strategies for EC2, IAM, Lambda, and Terraform to fortify cloud security.
Software Bill of Materials in DevOps, DevSecOps, and Value Stream Management
Explore the evolving concept of Software Bill of Materials in DevOps and DevSecOps, discussing its expanded scope, security implications, and modern purposes.
The Need for Diverse Perspectives in AI Security - Episode 139
Explore diverse perspectives in AI security, early measures, and risk evaluations. Learn collaboration strategies and resources for addressing AI-related risks.
Evaluating Security Within a Go-Centric DevOps Environment
Assess and enhance security in Go-based DevOps, covering code integrity, infrastructure, data protection, and compliance. Implement robust protocols across the software development lifecycle.
OWASP Top 10 for Machine Learning Security - A Comprehensive Walkthrough
Explore OWASP's top 10 ML security vulnerabilities, gain insights into real-world examples, and learn actionable strategies for securing machine learning models and systems.
Strengthening Azure AD Authentication - Methods and Best Practices
Explore advanced Azure AD authentication methods, including MFA, passwordless options, and phishing-resistant techniques to enhance security for your tenant and specific applications.
How DNS Works - Understanding Domain Name System Resolution and Hierarchy
Explore DNS functionality, hierarchy, and resolution process. Learn about caching, security risks, and forwarding in this comprehensive overview of how DNS operates.
Microsoft Entra ID Governance: Features, Licensing, and Key Capabilities
Explore Microsoft Entra ID Governance's key features, licensing options, and recent capabilities. Learn about access reviews, entitlement management, and integration with Verified ID for enhanced identity governance.
Bastion Host and Its Importance - Step-by-Step Tutorial - Part 6
Explore bastion host setup for secure remote access to private network servers. Learn VPC creation, subnet configuration, and SSH key management in this hands-on tutorial.
How to Automate Zero Trust: Step-by-Step Twingate and Terraform Guide
Automate Zero Trust implementation using Twingate and Terraform on AWS. Learn to set up secure remote access, configure resources, and test connectivity from mobile and laptop to EC2 instances.
Serverless TOP 10 Security Issues and Protection Patterns for AWS - 2023
Explore top 10 serverless security issues and protection patterns for AWS, covering event injection, denial of wallet attacks, and cloud misconfigurations in this comprehensive guide.
AWS AI Services Transforming DevSecOps - Amazon Q Insights
Explore how AWS AI services like CodeGuru, Amazon Q, and GuardDuty revolutionize DevSecOps, enhancing code quality, extracting insights, and bolstering security in AWS environments.
Days of Future Past: The Impacts of GenAI on Cybersecurity
Explore GenAI's transformative impact on cybersecurity, examining challenges, opportunities, and strategies for organizations to evolve defensively and offensively in this new landscape.
EARN-IT Act 2022: The Threat to Encryption and Privacy
Explore the revival of the EARN-IT Act and its potential impact on encryption, privacy, and free speech. Learn about government-mandated backdoors and Section 230 implications.
RESTRICT Act: Beyond the TikTok Ban - Implications for Freedom and Technology
Explore the RESTRICT Act's implications beyond TikTok, examining potential threats to free speech, privacy, and everyday tech like VPNs and encryption.
COCONUT-SVSM on KVM: Progress, Plans, and Challenges
Explore COCONUT-SVSM's evolution to a paravisor layer, recent achievements, and challenges in KVM integration. Learn about proposed solutions for AMD SEV-SNP VMPLs and Intel TDX partitioning support.
Coconut-SVSM - Early Attestation to Unlock Persistent State - KVM Forum
Explore early attestation for unlocking persistent state in Coconut-SVSM, enabling stateful services like vTPM and secure UEFI variable store for Confidential VM guests on AMD SEV-SNP platforms.
Ethical Considerations of AI in Healthcare
Explore ethical implications of AI in healthcare, examining potential benefits and challenges for patient care, privacy, and medical decision-making.