Collaborative Project Updates: Hyperledger, ONF, OCI, Node.js, OPNFV, and JS Foundation
Explore updates on collaborative open-source projects in blockchain, networking, containers, JavaScript, and more. Gain insights into cutting-edge developments across various technology domains.
State of the Union - The Linux Foundation
Explore the latest trends in open source, cloud computing, and mobile technology with insights on security, sustainability, and innovation from The Linux Foundation's executive director.
Collaborative Project Updates: AGL, SPDX, FOSSology and OpenChain
Collaborative project updates on AGL, SPDX, FOSSology, and OpenChain, highlighting recent developments and future directions in open source initiatives for automotive and software compliance.
Open Source: The Impossibilities Are Endless
Explore open source beyond software, from collaboration to governance, and its strategic advantages for companies. Learn how openness drives innovation and shapes our future.
HTTP Desync Attacks - Smashing Into The Cell Next Door
Explore HTTP desync attacks and their impact on web security, learning techniques to exploit vulnerabilities and breach neighboring systems.
How Scripting in ZAP Can Bridge the Gap Between Dev Teams and Security
Learn to bridge dev and security teams using ZAP scripting. Explore opportunities, overcome obstacles, and implement effective testing strategies for enhanced application security.
Attacking AWS: The Full Cyber Kill Chain
Comprehensive exploration of AWS vulnerabilities and attack strategies, covering the entire cyber kill chain for enhanced cloud security awareness.
Building a Valid Threat Library for Cloud-Based Applications
Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.
Testing iOS Apps without Jailbreak - Penetration Testing Techniques
Learn techniques for penetration testing iOS apps without jailbreaking, including live demos on accessing protected resources on the latest iOS version. Ideal for pentesters facing jailbreak limitations.
Black Clouds and Silver Linings in Node.js Security
Explore Node.js security challenges and mitigation strategies. Learn from real-world incidents to build secure JavaScript applications and understand ecosystem responsibilities.
Defending Cloud Infrastructures with Cloud Security Suite
Comprehensive tool for auditing AWS/GCP/Azure security, combining open-source capabilities with custom checks to enhance cloud infrastructure protection and address human error risks.
Securing Node.js and JavaScript
Explore common security vulnerabilities in Node.js and JavaScript ecosystems, and learn effective strategies to protect your applications from potential attacks.
New Web Platform Security Features to Protect Modern Web Applications
Explore modern web browser security features to protect against XSS, CSRF, and clickjacking. Learn about CSP3, Trusted Types, Fetch Metadata Request Headers, CORP, and COOP for enhanced application security.
NOSQL Web Application Vulnerabilities and Mitigation
Explore NOSQL database vulnerabilities, including injection methods and CSRF, and learn mitigation strategies for enhanced security in web applications.
Turning Engineers into Extended Blue Team Members - Security Strategies
Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.
Authorization in Microservices World - Kubernetes, ISTIO and Open Policy Agent
Explore fine-grained authorization in microservices using Open Policy Agent, integrated with Kubernetes and ISTIO. Learn challenges and solutions for enforcing programmatic authorization in cloud-native environments.
ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices
Learn techniques to mitigate security risks associated with third-party JavaScript, enhancing web application safety and protecting against potential vulnerabilities.
How I Could Have Stolen Your Photos From Google
Uncover a critical security vulnerability in Google Photos and learn how it could have compromised user privacy. Gain insights into responsible disclosure and ethical hacking practices.
SUSTO: Systematic Universal Security Testing Orchestration
Explore systematic universal security testing orchestration for efficient vulnerability detection and management in software development lifecycles.
OWASP ESAPI - A Retrospective: The Good, the Bad, and the Ugly
Retrospective on OWASP ESAPI security library, exploring successes, failures, and challenges in developing and maintaining comprehensive web application defenses.
Web Application Honeypot Threat Intelligence - Techniques and Implementation
Explore web application honeypots for threat intelligence, using ModSecurity and OWASP Core Rule Set to capture attacker activity and protect software against emerging threats.