Enterprise Linux Security
Explore Linux-specific security topics for enterprises through episodes covering vulnerabilities, attack vectors, migrations, supply chain attacks, and more, enhancing your cybersecurity knowledge.
Stranger Danger - Your JavaScript Attack Surface Just Got Bigger
Hands-on JavaScript and cloud native live-hacking session demonstrating common threats, vulnerabilities, and misconfigurations in modern application development, with actionable remediation and best practices for each exploit.
Entendiendo y Confiando en tus Dependencias en Python
Análisis de dependencias en Python: riesgos ocultos, ataques como typosquatting y estrategias para evaluar y confiar en paquetes de terceros. Herramientas y prácticas para realizar controles de seguridad efectivos.
Detecting and Controlling Rogue Third-Party Scripts in Web Applications
Explore web supply chain attacks, their impact on sensitive data, and strategies to detect and prevent rogue third-party scripts from compromising web application security.
SolarWinds - The Detailed Account of the Incident Response
Experts discuss the SolarWinds supply chain attack, analyzing SUNBURST and SUNSPOT, and offering insights into future cybersecurity challenges and protective measures for similar sophisticated threats.
Dependency Hijacking Vulnerability in Microsoft Teams - Supply Chain Security Gaps
Explore real-world dependency hijacking in Microsoft Teams, understanding software supply chain vulnerabilities and learning strategies to protect infrastructure, SDLC, and code.
Supply Chain Attacks: The New Reality
Explore software supply chain vulnerabilities, threats, and best practices for securing your ecosystem in this comprehensive overview of modern cybersecurity challenges.
SolarWinds Compromise: Impact on ICS/OT Networks and Remediation Strategies
Comprehensive analysis of the SolarWinds compromise, its impact on industrial networks, and actionable recommendations for identification and remediation in ICS/OT environments.
Building a Secure Future: Lessons from Past and Present Information Security Challenges
Explore the future of information security, examining past lessons, current challenges, and emerging technologies like quantum cryptography to build a more secure digital world.
Rhyming with Hacks - The Ballad of Supply Chain Attacks
Explore supply chain attacks, their anatomy, and prevention strategies. Learn about real-life examples, existing solutions, and a new DOM monitoring approach with live demonstration.
Benchmarking the Security of Your Software Supply Chain
Learn to assess and enhance the security of your software supply chain through benchmarking techniques, improving overall cybersecurity posture and reducing vulnerabilities.
Tracking Attackers in Open Source Supply Chain Attacks - The New Frontier
Explore automated tools and techniques for detecting and tracking sophisticated open source supply chain attacks, with real-world examples and insights into attacker tactics.
Securing Open Source Through Threat Modeling
Learn to identify attack surfaces and secure open source projects through threat modeling. Discover techniques to find vulnerabilities, analyze risks, and enhance software security.
Google SLSA and NIST SSDF - Emerging Software Supply Chain Security Best Practices
Explore emerging best practices for software supply chain security, focusing on Google's SLSA framework and NIST's SSDF guidelines to enhance your organization's cybersecurity posture.
Attacking and Defending Supply Chains - How We Got Admin in Your Cloud
Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.
Insane in the Supply Chain - Threat Modeling for Attacks on AI Systems
Explore AI supply chain risks and threat modeling strategies to protect against attacks that could impact company reputation and executive liability.
Is the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities
Explore strategies for mitigating open source software vulnerabilities, including supply chain attacks, SBOMs, and next-generation security controls for robust defense and compromise resilience.
The Internet is Broken: Breaking Down the Software Supply Chain
Explore modern software vulnerabilities, recent supply chain attacks, and actionable steps to build secure applications in an insecure internet environment.
Ghost in Your Supply Chain - APT Attacks on Taiwan's Financial Sector
Explore APT attacks on Taiwan's financial sector, focusing on supply chain vulnerabilities. Learn about MDM platform exploitation, JIRA abuse, and malware-free attacks. Gain insights into island-hopping techniques and comprehensive threat mapping.
The Road to Zero CVEs: People and Technology
Explore open source software vulnerabilities, supply chain security legislation, and emerging tools like Sigstore to fortify digital ecosystems and manage CVEs effectively.
Scaling Content Security Policy: Enterprise Compliance and Third-Party Resource Management
Learn to implement Content Security Policy and monitor web resources at scale, addressing supply chain attacks and PCI requirements for enhanced frontend security in enterprise applications.