Doing Recon Like a Boss - Ben Sadeghipour, Bugcrowd's LevelUp 2017
Learn efficient hacking reconnaissance techniques, including methodologies for Amazon AWS, GitHub, asset identification, and QA, to enhance your cybersecurity skills and target assessment capabilities.
Recon Methodology for Consistent High-Value Bug Bounties - Interview with Th3G3nt3lman
Discover effective recon methodologies for high-value bug bounties. Learn from @Th3G3nt3lman's experience in GitHub reconnaissance, tool usage, and collaboration strategies for successful hacking.
How Bad Is a Leaked GitHub SSH Key?
Explore the implications of GitHub's leaked SSH key, understand SSH vs TLS authentication, and learn how to protect yourself from potential security risks.
Living in AppSec - Promised, Fantasy, or Wonderland? - 2019
Explore GitHub's AppSec practices, successes, and ongoing challenges in creating an ideal security environment for application development.
Using DevOps Practices to Implement a Full Route-to-Live for SIEM Platforms
Explore DevOps practices for implementing full route-to-live in SIEM platforms. Learn about threat detection, adaptive hunting, and version control for enhanced cybersecurity.
Use Case Management at Scale - Harry McLaren, ECS Security
Explore scalable use case management in cybersecurity, covering frameworks, metrics, implementation layers, and standardization for effective threat detection and response.
Remediating XSS in GitHub Open Source Projects - Lessons Learned
Insights on scaling XSS remediation across GitHub open source projects, focusing on risk reduction, adding security controls, and automating code modification for diverse applications.
OWASP SEDATED - Preventing Sensitive Data Disclosure in GitHub Commits
Prevent sensitive data leaks to GitHub with SEDATED, an analyzer that catches and blocks commits containing user credentials or tokens before they're pushed.
Gitsign - Keyless Git Commit Signing
Explore Gitsign, a Sigstore project enabling keyless Git commit signing. Learn its functionality, integration with Sigstore, and application in development, CI/CD, and GitOps workflows.
Board Farms for Everyone - Making Hardware Debugging Easier and Sharing Boards Across the Globe
Discover how to create a board farm for remote hardware debugging, simplifying development and enabling global collaboration. Learn practical tips for setup, integration, and efficient device management.
Authenticating Supply-chain Metadata - Building Remote Code Attestations on GitHub
Explore techniques for authenticating supply-chain metadata and building remote code attestations on GitHub, enhancing software security and integrity in the development process.
What Role Do Package Registries Have in Securing the Supply Chain?
Explore the critical role of package registries in supply chain security, focusing on their impact, challenges, and best practices for enhancing software integrity and reliability.
Open Source Cybersecurity - Addressing Challenges in Software Security
Explore open source cybersecurity challenges and solutions with industry experts, discussing survey findings, enterprise impacts, and automation strategies for improved software security.
GitBOM - Repurposing Git's Graph for Supply Chain Security and Transparency
Explore innovative use of Git's graph structure for enhancing software supply chain security and transparency, offering insights into modern cybersecurity practices.
Building SLSA 3 Conformant Attestors for Artifacts Generated on GitHub
Learn to create SLSA 3 compliant attestors for GitHub artifacts, enhancing software supply chain security with minimal effort using recent framework extensions.
Secure CI/CD Using JSON Web Token (JWT)
Explore how GitLab leverages JWT for secure access to secret management solutions, enhancing DevSecOps practices and addressing challenges in retrieving sensitive data across cloud providers.
Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton
Practical guide to securing container native supply chains using SLSA principles, in-toto attestations, and step-by-step demos for achieving SLSA Level 2 in Tekton and Github Actions.
Automated Incident Response - Streamlining Processes and Enhancing Efficiency
Explore innovative Slack-based tools for streamlining incident response processes, reducing overhead, and enhancing efficiency through automation and integration with critical cloud-based systems.
Cyber Gym: Open-source Security Labs in Google Cloud
Hands-on Google Cloud environment for cybersecurity training, offering customizable workouts mapped to industry standards. Flexible for instructors and students, with automated assessment and scalable deployment.
Fetching, Configuring and Building Your Bitbake Project with Just One Command
Streamline Yocto/OpenEmbedded projects with kas: Simplify setup, configuration, and building. Learn advanced features for efficient project management and distribution in embedded Linux development.
Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification
Explore GitHub's Artifact Attestations: a new capability for verifying open source software origins, enhancing transparency and security in the OSS ecosystem.