Confessions of a Vulnerable Developer: What Developers Need to Know About Security
Explore security basics for developers, learn about free open-source tools, and gain practical knowledge to code confidently while improving software security.
Becoming a Link in Securing the Software Supply Chain
Explore open source security fundamentals, challenges, and opportunities. Learn how to contribute to existing communities and play a role in securing the software supply chain ecosystem.
Beyond the Basics: Securing JavaScript Applications
Explore advanced JavaScript application security techniques, from understanding cyber attack chains to implementing network isolation and restrictive IAM permissions.
How to Prove the Safety of Your Software
Explore software safety through SBOMs: Learn to create, analyze, and distribute software bills of materials for enhanced security and transparency in your applications.
Security Concerns in Every Stage of the Software Supply Chain
Explore security concerns throughout the software supply chain, from development to deployment. Learn strategies to mitigate risks and enhance overall security posture in DevOps practices.
Ending Open Source Security Fatigue - Lessons from Major Vulnerabilities
Explore strategies to streamline open-source security responses, reducing disruption while maintaining resilience. Learn from past incidents to implement effective countermeasures against vulnerabilities in popular packages.
OSS Supply Chain Security: Drowning in Information, While Starving for Wisdom?
Explore challenges and opportunities in open source software supply chain security, focusing on actionable knowledge for developers and operators amid increasing information availability.
Ending Open Source Security Fatigue - Lessons from Major Vulnerabilities
Explore strategies to streamline countermeasures for open-source security vulnerabilities, reducing disruption while maintaining resilience in software development organizations.
Dragos Platform: Asset Inventory for Enhanced Detection and Response in OT Cybersecurity
Explore advanced OT cybersecurity with Dragos Platform's enhanced asset inventory, vulnerability management, and threat detection capabilities for industrial environments.
Securing Your Software Supply Chain with SBOMs
Explore software supply chain security through SBOMs, focusing on artifact provenance and package identification for enhanced protection.
Using CHAOSS Metrics, Models, and Software to Identify At-Risk Dependencies in Your Portfolio
Learn to identify critical at-risk dependencies in your portfolio using CHAOSS metrics, models, and software for improved risk management and decision-making.
Comparing Risks: Why Asset Management Is Broken and How to Fix It
Explore innovative approaches to asset management in cybersecurity, focusing on risk comparison, vulnerability prioritization, and effective remediation strategies for improved security outcomes.
Transforming Company Culture to Embrace Risk - Six Years in Review
Explore a 6-year journey of cultural transformation in security, focusing on shared responsibility, adapting to regulations, and overcoming challenges in vulnerability management.
Generating Software Bill of Materials (SBOM) Using AWS Inspector
Learn how to generate and utilize Software Bill of Materials (SBOM) through AWS Inspector, covering both console and CLI approaches for effective software component tracking.
Understanding Risk: Supply Chain Transparency and SBOM
Gain insights into supply chain transparency and SBOM implementation strategies for better risk management and security in IoT ecosystems.
Security Champions Program: Scaling Up Cybersecurity Expertise - The What, Why, and How
Explore the importance of Security Champions programs in cybersecurity strategy, including implementation, costs, and benefits for scaling up security expertise in technical teams.
Staring Into the Abyss with the Security Technical Advisory Group
Explore cloud native security with CNCF's Security TAG. Learn about their charter, ongoing projects, and community impact. Discover how to get involved in shaping the future of cloud native security.
Securing Windows Workloads in Cloud Native Environments
Learn strategies and best practices for enhancing security in Windows-based cloud environments, focusing on workload protection and risk mitigation.
Secure Software Factory - Adding SBOM and Code Signing to Security Checks
Enhance your security checks with SBOM and code signing in a secure software factory, improving software supply chain integrity and compliance.
How the Argo Project Transitioned From Security Aware to Security First
Discover how the Argo project enhanced its security strategy, implementing best practices, formalizing processes, and leveraging community resources to transition from security-aware to security-first.
Software Quality and Testing - Recognize and Fix the Risks
Learn to recognize and mitigate software quality risks through static analysis, open source management, and best practices for improved development outcomes.