Building a Rusty Path Validation Library for PyCA Cryptography
Explore the development of a new X.509 path validation implementation in Rust for PyCA Cryptography, enhancing security and standards compliance for Python's HTTPS connections.
Making Python Safer Than Ever
Explore Python ecosystem security efforts, best practices for library maintainers and users, and PSF's initiatives to enhance safety in the open-source supply chain.
Kubernetes Policies Master Class
Master Kubernetes policies: security, compliance, and best practices for effective cluster management and governance.
AI Assistance Beyond Code: What Do We Need to Make it Work? - GOTO 2024
Exploring AI assistance beyond coding: leveraging prompts, interaction patterns, and knowledge orchestration for software delivery tasks like analysis and architecture.
Embracing the Future: Effortless Mutual TLS and Rich Layer 7 Authorization Policy Without Sidecars
Explore innovative sidecar-less service mesh in Istio, featuring effortless mTLS and L7 authorization policies. Learn advantages and see live demonstrations of this cutting-edge architecture.
A Needle in a Haystack: Finding Threats in Billions of Cloud Logs
Discover techniques for efficiently analyzing massive cloud audit logs to identify security threats using basic cloud tools and advanced platforms like OpenSearch and Kubernetes.
Implementing Transaction Tokens with Keycloak for API Request Authentication
Explore implementing Transaction Tokens with Keycloak for secure API authentication in cloud-native architectures, addressing token redirect attacks and enabling call chain identification for internal workloads.
Level Up Your Security Career with the TAG Security Community
Discover how to advance your security career through CNCF's TAG Security community. Learn about project security, whitepapers, threat modeling, and industry trends while collaborating with experts.
Bridging Mesh Enclaves - Securing and Maintaining Mesh Heterogeneity
Explore secure workload connections across service mesh technologies using SPIFFE and SPIRE. Learn to maintain technical heterogeneity while implementing universal workload security in complex software architectures.
Decoding 8 Real-World Cloud Identity Breaches
Dissection of 8 real cloud breaches exploiting insecure identities, revealing insights and mitigation strategies for common IAM vulnerabilities in cloud environments.
Shift Down Security - How Platform Teams Can Help Break the Logjam
Explore how platform engineering and cloud native practices can automate security using policy as code, enabling developers and security teams to focus on their core competencies.
Automating Configuration and Management of GitHub Repositories with Minder
Learn to automate GitHub repository management using Minder, an open-source platform. Write custom Rego rules to enforce security policies across multiple repositories, enhancing supply chain security.
The Story of Crush - Navigating the Cloud Native Ocean with SPIFFE Identity
Explore how a microservice named Crush overcame security challenges using SPIFFE ID, enabling secure communication and access across cloud platforms through mTLS and standardized identity management.
Metrics That Matter - Choosing Cloud Security KPIs for Your Business
Learn to select and implement effective cloud security metrics tailored to your organization's needs, risk appetite, and business goals. Explore real-world examples and innovative concepts for enhancing security operations.
Below the Radar: Identifying Hidden Threats Within the Development Ecosystem
Explore critical threats in cloud-native environments, focusing on hidden exposed secrets in code. Learn about vulnerabilities in source code management, Kubernetes secrets, and Shadow IT, with mitigation strategies and tools.
Secure by Design: Strategies for LLM Adoption in Cloud-Native Environments
Explore strategies for secure LLM adoption in cloud-native environments, addressing data privacy, AI-agent architectures, and security hardening. Learn practical approaches and insights from real-world implementations.
Toward Zero Trust with AI
Explore how K8sGPT, an AI-powered tool, simplifies Zero Trust implementation in cloud-native environments by integrating with system events and enhancing policy enforcement and network security.
Tracking and Hacking Your Career
Learn strategies for career advancement in cybersecurity from industry experts, focusing on goal-setting, skill development, and professional growth opportunities.
Winning Buy-In: Mastering the Art of Communicating Security to Management
Learn effective strategies for communicating security concerns to management, enhancing your ability to gain support and implement crucial security measures in your organization.
Pushing Boundaries: Journeys to the Top of Security Engineering
Trailblazing women share insights on reaching top security engineering roles, offering career guidance and strategies for overcoming challenges in the field.
Temporary Access to the Cloud - A Case Study
Explore Chime's innovative temporary access solution for Okta, balancing product development with cultural shifts in security practices. Learn from this real-world case study.