Bringing Provenance to Open Source - Lessons from Npm's Sigstore Integration
Explore npm's integration with Sigstore to enhance package provenance, addressing security challenges and implications for the broader open-source ecosystem.
Authenticating Single Page Apps Using JSON Web Tokens
Learn to implement secure authentication in single page apps using OpenID Connect and JSON Web Tokens, enhancing user experience and application security.
The Future of Authentication - WebAuthn with PHP
Explore WebAuthn, a passwordless authentication standard, and learn how to implement it using PHP and JavaScript for enhanced security and user experience.
Only an Electron Away from Code Execution
Explore vulnerabilities in Electron-based applications and learn techniques for achieving code execution, presented by security researcher Silvia Väli at Hack.lu 2018.
Fake CAPTCHA Malware Analysis
Explore the deceptive tactics of malware disguised as CAPTCHA, uncovering its distribution methods and analyzing its impact on cybersecurity.
How to Implement Keycloak Authentication in React
Implement Keycloak authentication in React applications for enhanced security and access management in web-based projects.
Nation-State Threats in the Open-Source Software Supply Chain
Explore nation-state threats in open-source software, focusing on North Korean Lazarus Group's npm campaigns. Learn evolving tactics and motivations to better defend against sophisticated cyber threats.
Securing Cloud Services with TLS X.509 Client Certificates
Learn to secure cloud services using X.509 client certificates, from generating and deploying certificates to automating processes with OpenXPKI. Includes practical examples for MQTT and home automation.
Supply Chain Shenanigans - Evil npm and Shady NuGet
Explore npm and NuGet supply chain vulnerabilities, uncovering potential threats and security risks in package management ecosystems for software developers and cybersecurity professionals.
Sigstore: 2024 and Beyond
Explore Sigstore's achievements, future roadmap, and vision for securing open source software. Learn about upcoming milestones and opportunities to contribute to this de-facto signing solution.
AppSec Wingman for Copilot in VS Code - Secure AI-Generated Code Recommendations
Discover how Veracode's AI-powered extension for VS Code enhances Copilot, offering secure code recommendations to fix vulnerabilities based on insights from scanning trillions of code lines.
Secure RDTs: Enforcing Access Control Policies for Offline Available JSON Data
Explore Secure RDTs for enforcing role-based access control on offline-available JSON data, enhancing security in applications with intermittent network connectivity.
How to Setup Fingerprint Authentication in JavaScript
Learn to implement fingerprint and biometric authentication in JavaScript using WebAuthn APIs. Covers client and server-side setup for secure, third-party-free user registration and login.
The V8 Heap Sandbox - Understanding JavaScript Engine Security
Explore V8 engine's heap sandbox implementation, its security implications, and potential vulnerabilities in Chrome's JavaScript engine.
Securing Supply Chains in C++, Java and JavaScript - Episode 133
Explore supply chain security across C++, Java, and JavaScript ecosystems. Learn about challenges, dependencies, versioning, and software bill of materials (SBOMs) from industry experts.
A Glimpse into DevSecOps - Building a Secure NodeJS Service
Explore DevSecOps through building a NodeJS service, focusing on security integration throughout development and deployment. Learn practical insights and best practices for robust, secure software creation.
DevSecOps Connect - Integrating Security in Development and Operations
Explore DevSecOps principles, secure serverless architectures, enhance WordPress security, and fortify Dart/Flutter projects. Gain insights from industry experts and network with professionals.
Supply Chain Attacks - Focusing on NPM Vulnerabilities and Defenses
Explore NPM ecosystem vulnerabilities, learn to identify and protect against supply chain attacks, and discover strategies to fortify open-source software security.
Getting Started with Gen-Machine-Conf - YPS 2023.11
Learn to generate machine configuration files for System Device-tree and non-SDT builds using the gen-machine-conf tool in Yocto Project.
Building a Hypervisor Firewall with nftables and Rust
Learn to build a hypervisor firewall using nftables and Rust. Explore complex rulesets, zone-based firewalling, and programmatic rule creation for securing virtualized Linux network environments.
Virtual-Physical Environment Manipulation System Based on ROS - Python and Three.js Integration
Explore ROS-based virtual-physical environment manipulation using Python, Three.js, and WebRTC. Learn architecture, tools, and implementation for interactive 3D visualizations and robotic control.