In-toto - Providing Farm-to-Table Guarantees for Bits and Bytes
Explore in-toto, a framework ensuring software supply chain integrity from inception to deployment, addressing vulnerabilities and protecting millions of users across various cloud environments.
From Nothing to SRE - Practical Guidance
Practical guidance on implementing Site Reliability Engineering in smaller organizations, addressing unique challenges, gaining buy-in, and fostering a culture of continuous improvement and experimentation.
Ten Persistent SRE Antipatterns - Pitfalls on the Road to a Successful SRE Program
Explore common pitfalls in Site Reliability Engineering and learn strategies to build successful SRE programs, drawing insights from industry leaders like Netflix and Google.
Identifying Hidden Dependencies
Discover how Honeycomb improved system reliability through intentional node termination, uncovering bugs and progressing towards continuous experimentation for enhanced resilience and scalability.
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
Explore cloud security threats, including crypto-mining worms and innovative techniques targeting AWS, Kubernetes, and other providers. Learn about hackers' methods, persistence strategies, and potential impacts on cloud environments.
Embedding a Human-Centric Approach Into a Global Cyber Security Program
Explore a human-centric approach to cybersecurity, challenging traditional views and examining how Airbus integrates this perspective into their global program for enhanced protection.
Reverse Engineering Compliance
Explore reverse engineering techniques applied to compliance standards, shifting from checkbox mentality to understanding the spirit of requirements for more effective security practices.
Hacking Government Cybersecurity
Explore latest cybersecurity developments in government, risk management at scale, and collaboration with industry and hackers. Learn about hacking mindset and cyber volunteering.
ProdSec - A Technical Approach
Explore product security strategies, including risk management, automation, and attack surface reduction. Learn how to integrate security into development processes and foster a security-conscious culture within organizations.
Taking Over Telecom Networks
Explore telecom network vulnerabilities, attack vectors, and security best practices in this comprehensive overview of mobile infrastructure risks.
Wash Your Hands! This Is Bot Country
Network security challenges in remote work: risks, tools, and strategies for protecting expanded perimeters from IoT vulnerabilities and global threats. Tips for forensics and threat intelligence.
Incident Communications - How to Disclose a Cyber Incident
Learn effective cyber incident disclosure strategies to save money and protect reputation in this informative talk by Kaspersky's Product Marketing Manager.
Designing Cyber Secured Building Management Systems
Learn to identify and address security vulnerabilities in smart building systems, focusing on risk assessment, business continuity, and comprehensive protection strategies.
ICS Security Risk Management and Effective Executive Communication
Insights on communicating ICS risks to executives, focusing on business impact, risk prioritization, and effective presentation strategies for cybersecurity professionals.
The Hardware Pivot
Explore physical attack risks in large-scale device networks, focusing on modchips and counterfeit parts. Learn about threat propagation and strategies for securing hardware infrastructure.
The Cyber Insurance Emperor Has No Clothes
Explore the flaws in cyber insurance and its impact on security incentives, with insights on better alternatives for improving cybersecurity practices.
Chrome Extension Risks and You
Explore Chrome extension risks, malicious examples, and Lyft's strategic approach to mitigate threats at scale. Learn effective strategies for enhancing browser security.
East vs West - How The Coasts Approach Information Security Differently
Explore the contrasting approaches to information security between Wall Street and Silicon Valley, uncovering valuable insights for professionals across various security roles.
Remember When We Broke the Internet
Exploring unexpected incidents in open source history, their impact on technology, and the complexity of open source ecosystems as sociotechnical systems.
Policy Implications of Faulty Cyber Risk Models and How to Fix Them
Explore data-driven analysis of cyber incidents, their economic impact, and policy implications. Learn to improve risk models for better security governance and third-party risk management.
Those Don't Matter! Effective Prioritization Through Exploit Prediction
Discover a machine learning classifier for data-driven vulnerability prioritization, enhancing risk management strategies and improving decision-making in cybersecurity.