Log4Shell Live Hack - A Hands-on, Actionable Fix Guide
Hands-on guide to understanding and mitigating the Log4Shell vulnerability, featuring live hacks, real-world remediation approaches, and practical demos for Java-based applications and infrastructure.
Understanding the Role of Software Bill of Materials in Cybersecurity Readiness
Explore the importance of Software Bill of Materials (SBOMs) in cybersecurity, including adoption challenges, implementation benefits, and strategies for improving production and consumption rates.
Securing the Software Supply Chain: From Threats to Best Practices
Comprehensive overview of software supply chain security, covering history, threats, initiatives, challenges, and best practices. Experts discuss key issues and solutions for organizations.
Supply Chain Security: From Infrastructure to Application, Code to Cloud
Explore best practices for securing the entire software supply chain, from infrastructure to application, covering code, cloud, dependencies, and deployment.
Global Software Vulnerability Standard Birds of a Feather Discussion
Explore the Global Software Vulnerability Standard (GSVS) in this Linux Foundation discussion, addressing key aspects of software security and vulnerability management.
Mobilizing the Open Source Industry for Better Security by Default
Explore strategies to enhance open source security through industry collaboration, focusing on default protections and collective action for safer software ecosystems.
Automated Techniques for Measuring Trustworthiness of Open Source Code and Communities
Explore cutting-edge tools and methods for analyzing software security, determining project trustworthiness, and measuring against best practices in open source development.
Hacking for Developers
Learn ethical hacking techniques, tools, and methodologies to enhance your development skills and improve software security. Gain insights into vulnerability assessment and exploitation.
Authenticating Supply-chain Metadata - Building Remote Code Attestations on GitHub
Explore techniques for authenticating supply-chain metadata and building remote code attestations on GitHub, enhancing software security and integrity in the development process.
Finding the Path from Embedded to Edge Using Product Lines
Explore the evolution from embedded to edge computing, focusing on product lines, maintenance, open source, and container frameworks for efficient development and deployment.
SBOMs for Embedded Systems - What's Working, What's Not
Explore challenges and successes in implementing Software Bill of Materials (SBOMs) for embedded systems, discussing regulatory impacts, generation methods, and practical applications.
How to Choose a Software Update Mechanism for Embedded Linux Devices
Explore software update mechanisms for embedded Linux devices, covering build systems, update types, containers, and open-source solutions like RockRock and Mandrake.
Corporate Use of Embedded Linux
Explore corporate challenges and strategies for embedded Linux, including upstream drivers, compliance, and testing, with insights from Sony Corporation.
VEX Overview - Cybersecurity and Infrastructure Security Agency
Explore VEX with cybersecurity expert Allan Friedman, gaining insights into this crucial aspect of infrastructure security and its implications for modern digital systems.
Using FOSS as Part of a System Safety Mechanism
Explore the integration of Free and Open Source Software (FOSS) in system safety mechanisms, addressing challenges and discussing practical implementation strategies.
All About That BOM - Understanding Software Bill of Materials
Explore software supply chain security with a focus on Software Bill of Materials (SBOM), its importance, and implementation strategies for enhanced transparency and risk management.
Women's Participation in Open Source
Explore women's involvement in open source projects, challenges faced, and strategies for increasing diversity and inclusion in the tech community.
Supply Chain Security, SBOMs and OSPOs: An Ecosystem and Compliance Update
Explore cybersecurity, regulatory compliance, and software supply chain integrity. Learn about SBOMs, the Open Source Security Foundation, and the role of OSPOs in enhancing security.
Google SLSA and NIST SSDF - Emerging Software Supply Chain Security Best Practices
Explore emerging best practices for software supply chain security, focusing on Google's SLSA framework and NIST's SSDF guidelines to enhance your organization's cybersecurity posture.
Summing Up the OpenSSF Summit - May 2022 Gathering and Action Plan
Experts discuss OpenSSF's May 2022 summit, addressing open source security challenges, government involvement, and future initiatives for enhancing software supply chain resilience.
What Role Do Package Registries Have in Securing the Supply Chain?
Explore the critical role of package registries in supply chain security, focusing on their impact, challenges, and best practices for enhancing software integrity and reliability.