Bug Bounty Hunting - Ethical Hacking for Software Security
Explore legal hacking, vulnerability disclosure, and ethical security practices. Learn to write effective reports and analyze published exploits.
An Introduction to Sigstore for Pythonistas
Explore Sigstore for securing Python projects: learn to sign, verify, and protect software artifacts, addressing supply chain vulnerabilities with accessible tracing methods.
The Power of JWT and Cryptography - Fundamentals and Digital Signatures
Explore fundamental cryptography principles, JWT, and digital signatures for software security. Learn how to protect infrastructure and data from attacks.
Revolutionizing Automotive Software: DevSecOps, Functional Safety, and Open Source Synergy
Explore DevSecOps integration in automotive software development, focusing on functional safety and open-source synergy to enhance innovation and reliability in vehicle systems.
The Road to Zero CVEs: People and Technology
Explore open source software vulnerabilities, supply chain security legislation, and emerging tools like Sigstore to fortify digital ecosystems and manage CVEs effectively.
Monitoring Malware Behavior Through Kernel Syscall Tracing
Explore kernel syscall tracing techniques for monitoring malware behavior, presented by security experts at a major cybersecurity conference in Eastern Europe.
Navigating the Software Supply Chain Defense Landscape
Explore software supply chain security tools and frameworks, their integration, and how to select the right combination for comprehensive protection against rising cyber threats.
Structured Scorecard Results: Tailor Your Own Supply-Chain Security Policies
Learn to customize OpenSSF Scorecard for tailored supply-chain security assessments using Structured Results feature. Explore practical examples and use cases for automated policy-driven analysis.
Eliminating Vulnerabilities with Memory Safe Languages
Explore how memory-safe languages can enhance software security by eliminating common vulnerabilities, improving reliability, and reducing potential attack vectors in cloud-native applications.
Finding LibRaska: The Open Source Library that Props up our Infrastructure
Explore challenges in identifying and supporting critical, yet obscure open source packages that underpin infrastructure. Learn strategies to enhance security in open source supply chains.
Driving Security at Scale: Principles for Package Repository Security - Lecture
Explore principles for enhancing package repository security, including a four-level maturity model. Learn about CISA's collaboration with OpenSSF to improve open source ecosystem security at scale.
Leveraging Sigstore Capabilities in a Local Environment
Explore Lockheed Martin's integration of Sigstore for secure, auditable software development. Learn about internal Kubernetes deployments, certificate authorities, and streamlined GitLab pipelines for enhanced security.
Beyond "Just Update All the Things": Uncovering the Nuances of Dependency Security
Uncover complexities of dependency security, explore OSV project solutions, and learn strategies for integrating vulnerability management into developer workflows.
Sigstore: 2024 and Beyond
Explore Sigstore's achievements, future roadmap, and vision for securing open source software. Learn about upcoming milestones and opportunities to contribute to this de-facto signing solution.
Deep Dive into the OpenSSF Mobilization Plan
Explore the OpenSSF Mobilization Plan for securing open source supply chains through automated tools, best practices, education, and collaboration.
Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain
Explore transparent digital signatures with Sigstore to enhance software supply chain security. Learn key techniques for protecting open source ecosystems.
Beginner DevSecOps - Starting Your Cybersecurity Career Path
Explore DevSecOps careers with expert insights on transitioning, networking, essential tools, and skill development. Gain practical tips for starting your cybersecurity journey and debunking industry myths.
Supply Chain Security in the Enterprise
Explore open source solutions for enterprise software supply chain security, focusing on Sigstore and Archivista to enhance accountability and transparency in software development.
Writing Secure Software - Applying Security Principles in Practice
Practical application of security principles in web app development, showcasing architectural decisions for enhanced security using a blog as an example.
A Beginner's Guide to Code Review
Learn essential code review techniques to identify vulnerabilities, practice with labs, and discover resources for finding code to review. Improve your skills in detecting and fixing security issues.
The Hidden Risk in Undocumented API Behavior
Explore undocumented Win32 API risks affecting AV and EDR vendors. Learn how overlooked behaviors can lead to security vulnerabilities and gain insights on mitigating these hidden threats.