How to Reduce Supply Chain Risk - Lessons from Efforts to Block Huawei
Explore supply chain risk management using Huawei as a case study. Experts discuss best practices for risk assessment, transparency, and securing networks in a global ecosystem.
Cloud Configuration - Mitigate Risks from Cloud Security Failures
Learn to identify, prevent, and resolve cloud configuration issues to protect sensitive data and mitigate security risks in enterprise environments.
Complexity - The Crucial Ingredient in Your Kitchen
Explore how software engineering can learn from NASA's Challenger incident, drawing parallels to modern reliability challenges and navigating complexity in system architecture.
In-toto - Providing Farm-to-Table Guarantees for Bits and Bytes
Explore in-toto, a framework ensuring software supply chain integrity from inception to deployment, addressing vulnerabilities and protecting millions of users across various cloud environments.
Identifying Hidden Dependencies
Discover how Honeycomb improved system reliability through intentional node termination, uncovering bugs and progressing towards continuous experimentation for enhanced resilience and scalability.
They Hacked Thousands of Cloud Accounts Then Sent Us Weird GIFs
Explore cloud security threats, including crypto-mining worms and innovative techniques targeting AWS, Kubernetes, and other providers. Learn about hackers' methods, persistence strategies, and potential impacts on cloud environments.
Taking Over Telecom Networks
Explore telecom network vulnerabilities, attack vectors, and security best practices in this comprehensive overview of mobile infrastructure risks.
The Hardware Pivot
Explore physical attack risks in large-scale device networks, focusing on modchips and counterfeit parts. Learn about threat propagation and strategies for securing hardware infrastructure.
Chrome Extension Risks and You
Explore Chrome extension risks, malicious examples, and Lyft's strategic approach to mitigate threats at scale. Learn effective strategies for enhancing browser security.
Broken Links - Emergence and Future of Software-Supply Chain Compromises
Explore software supply chain attacks, their rise, attacker motivations, and practical enterprise defense strategies in this comprehensive examination of a critical cybersecurity threat.
Breaking Access Controls With BLEKey
Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.
AndroBugs Framework - An Android Application Security Vulnerability Scanner
Explore AndroBugs Framework, a free Android vulnerability analysis system. Learn to identify and mitigate security risks in Android apps before release, enhancing app safety and user protection.
Stranger Danger - What Is The Risk From 3rd Party Libraries
Explore the risks of third-party libraries in software, analyzing vulnerability metrics and exposure times. Learn strategies to mitigate risks and improve security practices in your organization.
Hacking Humans - Addressing Vulnerabilities in the Advancing Medical Device Landscape
Explore vulnerabilities in medical devices and their impact on human health, discussing potential risks and security measures in the evolving healthcare technology landscape.
Who's Breaking into Your Garden - iOS and OS X Malware You May or May Not Know
Explore iOS and OS X malware threats, understanding potential vulnerabilities and attack vectors to enhance your device and network security.
Reliable Data Processing with Minimal Toil
Explore strategies for safer, automated batch job processing across millions of users, featuring insights from Google and Slack on canarying, rollouts, and validations.
Misleading Implementations That Compromise the Privacy and Information Security
Análisis de implementaciones engañosas que comprometen la privacidad y seguridad de la información, explorando vulnerabilidades y mejores prácticas en ciberseguridad.
The Rise of RaaS
Explore the emerging trend of Ransomware-as-a-Service (RaaS) and its impact on cybersecurity landscapes. Gain insights into this evolving threat and learn strategies for protection.
Tracking Meaningful Security Product Metrics
Learn strategies for quantifying and communicating security team value through effective metrics, demonstrating risk mitigation and revenue growth contributions.
The Invasion of Bad Drivers
Explore vulnerabilities in peripheral drivers, including a 0day discovery, exploitation techniques, and mitigation strategies. Learn about common security risks and how to protect your system.
Horse Pill - A New Type of Linux Rootkit
Explore a novel Linux rootkit that exploits container technology, bypassing UEFI secure boot and kernel module signing. Learn about its covert capabilities and discover mitigation strategies to enhance boot security.