Gaining Initial Access by Exploiting Leaked Credentials
Explore how attackers exploit leaked credentials to breach organizations and learn effective prevention strategies for safeguarding sensitive information.
Unpacking Open Source Security in Public Repositories
Explore open source security challenges in public repositories and learn strategies to mitigate risks in cloud-native environments.
The SaaS-y Side of Incident Response - Key Log Sources for Okta, GitHub, and Salesforce
Explore key log sources for Okta, GitHub, and Salesforce in cloud-based incident response. Learn to interpret SaaS logs, avoid common pitfalls, and improve detection strategies for effective security management.
Secrets Scanning Techniques and Tools
Explore secret scanning techniques using GitLeaks, truffleHog, and orchestration with AWS Lambda, AWS Code Build, or Secure Codebox. Learn through fun comic-style explanations.
Secure Boot Vulnerabilities and Private Key Leaks - Implications and Solutions
Explore recent security breaches, their implications, and learn how to protect yourself online using two-factor authentication and tools like YubiKey.
GRC Engineering - Bringing Governance, Risk, and Compliance to Your Git Repositories
Explore innovative approaches to integrate Governance, Risk, and Compliance directly into git repositories, revolutionizing how organizations handle compliance and security challenges.
Rolling out the C2 - Modern Red Team Infrastructure in 2024
Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.
Removing AWS Policy Review Fatigue with Automated Terraform Resource Analysis
Automate AWS policy control with Terraform resource analysis, reducing security review fatigue and improving developer productivity through early-stage static analysis in IaC pipelines.
The Impact of Policy-as-Code on the Software Supply Chain
Explore DevSecOps principles for securing the software supply chain. Learn to automate, version, and implement controls as code for resilient software ecosystems.
Malicious Packages and Malicious Intent - Episode 123
Explore malicious attacks, open source security, and practical tips for improving company safety with Liran Tal, director of developer advocacy at Snyk and Github Star.
Detection as Code - Buzzword or Panacea?
Explore the reality of Detection-as-Code in cybersecurity. Separate hype from facts and understand its potential benefits for blue teams and threat detection programs.
DevSecOps Connect - Integrating Security in Development and Operations
Explore DevSecOps principles, secure serverless architectures, enhance WordPress security, and fortify Dart/Flutter projects. Gain insights from industry experts and network with professionals.
How to Contribute to the Yocto Project - YPS 2023.11
Learn efficient Git usage and best practices for contributing to Yocto Project, OpenEmbedded, and other open source projects. Discover new techniques to enhance your code submission process.
Updates of Yocto-Based Projects - YPDD 2023
Discover strategies for seamlessly updating Yocto-based projects, addressing security, minimizing debt, and integrating new features with practical examples.
Automating Yocto Layer Maintenance with Cloud Managed Services - Thomas Roos
Automate Yocto layer maintenance using cloud services to save time, upgrade software, test recipes, and backport changes efficiently.
Modern Yocto Project Setup for Embedded Systems - Example and Best Practices
Explore a modern Yocto setup for maintainable embedded systems, covering version control, CI/CD, updates, and Flutter application development.
How to Submit a CVE Fix to the Yocto Project - YPS 2023.11
Learn the step-by-step process of submitting security fixes to the Yocto Project, from identifying issues to getting patches accepted.
Yocto Project Reference Kernel Status Update - YPS 2023.11
Explore the current state and updates of the Yocto reference kernel in this comprehensive weather report and state of the union presentation.
AUTOREV in Yocto-Based Projects: To Use or Not to Use - Lecture 6
Explore AUTOREV usage in Yocto projects: benefits, drawbacks, and development workflow tricks for reproducible builds in embedded systems.
Jupyter for First-Time Users - Introduction to Notebooks and Code Execution
Learn to use Jupyter notebooks for coding projects, including markdown, LaTeX, code execution, and debugging. Ideal for beginners in scientific computing and data analysis.
Breaking Down Silos and Fostering Open Collaboration in Organizations
Learn strategies to break organizational silos, foster collaboration, and drive innovation by applying open-source principles within your company. Discover how to create synergies, leverage resources, and promote cross-team cooperation for better outcome…