
Dive into advanced cloud security concepts, focusing on confidential computing, hardware-based TEEs, and GPU-accelerated workloads for building secure serverless functions with complete stack attestation.

Discover practical strategies for implementing SLSA compliance, from using GitHub Actions and Cosign for artifact signing to enforcing runtime policies with Kyverno and securing keys with HSMs.

Gain insights into security audit processes, from preparation and execution to post-audit actions, based on real experiences with external auditors in the Temurin JDK project.

Discover how to assess NuGet package security using OpenSSF Scorecard, focusing on maintenance quality, workflow safety, and security tools implementation for better application security.

Explore firmware attack vulnerabilities in 3D printing systems, examining classification methods, attack vectors, and security implications for fused filament fabrication processes.

Explore real-world software supply chain attacks, security vulnerabilities, and defense strategies through npm and NuGet examples, learning to protect projects from malicious package threats.

Explore modern supply chain security challenges and solutions through DevSecOps principles, focusing on emerging threats, operational complexities, and practical defensive strategies for today's digital landscape.

Discover how leading tech companies collaborate through CoSAI to establish security standards, best practices, and governance frameworks for AI systems, focusing on supply chain security and cybersecurity preparedness.

Explore how Linux distributions can enhance software supply chain security through centralized access, trusted SBOM delivery, and improved vulnerability management mechanisms.

Discover cost-effective strategies and open-source tools to secure your startup's supply chain, build customer trust, and maintain business continuity while working with limited security resources.

Explore emerging AI supply chain security threats and defensive strategies, focusing on CI/CD pipelines and creative approaches to protect AI-enabled features in modern software systems.

Black Hat USA 2025

Black Hat Europe 2023

Black Hat Asia 2025

Black Hat Europe 2024