Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Supply Chain Attacks

Showing: 70 courses

Enterprise Linux Security

0 rewiews
Explore Linux-specific security topics for enterprises through episodes covering vulnerabilities, attack vectors, migrations, supply chain attacks, and more, enhancing your cybersecurity knowledge.
Add to list
23 Lesons
20 hours
On-Demand
Free-Video
Snyk

Stranger Danger - Your JavaScript Attack Surface Just Got Bigger

0 rewiews
Hands-on JavaScript and cloud native live-hacking session demonstrating common threats, vulnerabilities, and misconfigurations in modern application development, with actionable remediation and best practices for each exploit.
Add to list
18 Lesons
52 minutes
On-Demand
Free-Video
PyCon US

Entendiendo y Confiando en tus Dependencias en Python

0 rewiews
Análisis de dependencias en Python: riesgos ocultos, ataques como typosquatting y estrategias para evaluar y confiar en paquetes de terceros. Herramientas y prácticas para realizar controles de seguridad efectivos.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
LASCON

Detecting and Controlling Rogue Third-Party Scripts in Web Applications

0 rewiews
Explore web supply chain attacks, their impact on sensitive data, and strategies to detect and prevent rogue third-party scripts from compromising web application security.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
RSA Conference

SolarWinds - The Detailed Account of the Incident Response

0 rewiews
Experts discuss the SolarWinds supply chain attack, analyzing SUNBURST and SUNSPOT, and offering insights into future cybersecurity challenges and protective measures for similar sophisticated threats.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video
Linux Foundation

Dependency Hijacking Vulnerability in Microsoft Teams - Supply Chain Security Gaps

0 rewiews
Explore real-world dependency hijacking in Microsoft Teams, understanding software supply chain vulnerabilities and learning strategies to protect infrastructure, SDLC, and code.
Add to list
14 Lesons
56 minutes
On-Demand
Free-Video
Linux Foundation

Supply Chain Attacks: The New Reality

0 rewiews
Explore software supply chain vulnerabilities, threats, and best practices for securing your ecosystem in this comprehensive overview of modern cybersecurity challenges.
Add to list
15 Lesons
35 minutes
On-Demand
Free-Video
Dragos: ICS Cybersecurity

SolarWinds Compromise: Impact on ICS/OT Networks and Remediation Strategies

0 rewiews
Comprehensive analysis of the SolarWinds compromise, its impact on industrial networks, and actionable recommendations for identification and remediation in ICS/OT environments.
Add to list
24 Lesons
57 minutes
On-Demand
Free-Video
OWASP Foundation

Building a Secure Future: Lessons from Past and Present Information Security Challenges

0 rewiews
Explore the future of information security, examining past lessons, current challenges, and emerging technologies like quantum cryptography to build a more secure digital world.
Add to list
33 Lesons
1 hour 14 minutes
On-Demand
Free-Video
OWASP Foundation

Rhyming with Hacks - The Ballad of Supply Chain Attacks

0 rewiews
Explore supply chain attacks, their anatomy, and prevention strategies. Learn about real-life examples, existing solutions, and a new DOM monitoring approach with live demonstration.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
OWASP Foundation

Benchmarking the Security of Your Software Supply Chain

0 rewiews
Learn to assess and enhance the security of your software supply chain through benchmarking techniques, improving overall cybersecurity posture and reducing vulnerabilities.
Add to list
1 Lesons
54 minutes
On-Demand
Free-Video
Linux Foundation

Tracking Attackers in Open Source Supply Chain Attacks - The New Frontier

0 rewiews
Explore automated tools and techniques for detecting and tracking sophisticated open source supply chain attacks, with real-world examples and insights into attacker tactics.
Add to list
14 Lesons
42 minutes
On-Demand
Free-Video
Linux Foundation

Securing Open Source Through Threat Modeling

0 rewiews
Learn to identify attack surfaces and secure open source projects through threat modeling. Discover techniques to find vulnerabilities, analyze risks, and enhance software security.
Add to list
26 Lesons
37 minutes
On-Demand
Free-Video
Linux Foundation

Google SLSA and NIST SSDF - Emerging Software Supply Chain Security Best Practices

0 rewiews
Explore emerging best practices for software supply chain security, focusing on Google's SLSA framework and NIST's SSDF guidelines to enhance your organization's cybersecurity posture.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Security BSides San Francisco

Attacking and Defending Supply Chains - How We Got Admin in Your Cloud

0 rewiews
Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Security BSides San Francisco

Insane in the Supply Chain - Threat Modeling for Attacks on AI Systems

0 rewiews
Explore AI supply chain risks and threat modeling strategies to protect against attacks that could impact company reputation and executive liability.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Is the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities

0 rewiews
Explore strategies for mitigating open source software vulnerabilities, including supply chain attacks, SBOMs, and next-generation security controls for robust defense and compromise resilience.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
DevConf

The Internet is Broken: Breaking Down the Software Supply Chain

0 rewiews
Explore modern software vulnerabilities, recent supply chain attacks, and actionable steps to build secure applications in an insecure internet environment.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
SANS

Ghost in Your Supply Chain - APT Attacks on Taiwan's Financial Sector

0 rewiews
Explore APT attacks on Taiwan's financial sector, focusing on supply chain vulnerabilities. Learn about MDM platform exploitation, JIRA abuse, and malware-free attacks. Gain insights into island-hopping techniques and comprehensive threat mapping.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
Linux Foundation

The Road to Zero CVEs: People and Technology

0 rewiews
Explore open source software vulnerabilities, supply chain security legislation, and emerging tools like Sigstore to fortify digital ecosystems and manage CVEs effectively.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
OWASP Foundation

Scaling Content Security Policy: Enterprise Compliance and Third-Party Resource Management

0 rewiews
Learn to implement Content Security Policy and monitor web resources at scale, addressing supply chain attacks and PCI requirements for enhanced frontend security in enterprise applications.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
Linux Foundation

The Critical Path to Implant Backdoors and Potential Mitigation Techniques: Learnings from XZ Utils

0 rewiews
Analyze the critical attack path of XZ Utils backdoor and explore mitigation strategies for supply-chain attacks in open-source software.
Add to list
1 Lesons
1 hour 9 minutes
On-Demand
Free-Video
RSA Conference

Intersection of AI and Security - Traditional Sessions

0 rewiews
Explore AI security challenges and solutions: CISO checklist, LLM security framework, and machine learning model serialization attacks. Gain insights from experts on safeguarding AI systems.
Add to list
1 Lesons
1 hour 34 minutes
On-Demand
Free-Video
OWASP Foundation

XZ Backdoor - Navigating the Complexities of Supply Chain Attacks Detected by Accident

0 rewiews
Explore the intricacies of supply chain attacks through the lens of the XZ Backdoor incident, uncovering detection methods and implications for cybersecurity professionals.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
BSidesLV

Detection Engineering Demystified - Building Custom Detections for GitHub Enterprise

0 rewiews
Learn to build custom detections for GitHub Enterprise, focusing on identifying attacker behavior and protecting intellectual property through practical Detection Engineering techniques.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
BSidesLV

Securing Cloud-Native DevOps - A Zero Trust Approach

0 rewiews
Explore Zero Trust principles for securing cloud-native DevOps environments, addressing challenges like supply chain attacks and lateral movement in microservices and serverless architectures.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
Platform Engineering

Securing the Software Supply Chain: Challenges and Solutions

0 rewiews
Learn strategies to secure the software supply chain against attacks, prioritize security measures, and protect your organization from catastrophic data breaches.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
DevSecCon

This Is How They Tell Me the World Ends - The Cyber Weapons Arms Race

0 rewiews
Explore the global cyber arms race and its societal impact with cybersecurity expert Nicole Perlroth. Gain insights into cyber warfare, supply chain attacks, and strategies for addressing cybersecurity challenges.
Add to list
7 Lesons
54 minutes
On-Demand
Free-Video
DevSecCon

Supply Chain Attacks - Focusing on NPM Vulnerabilities and Defenses

0 rewiews
Explore NPM ecosystem vulnerabilities, learn to identify and protect against supply chain attacks, and discover strategies to fortify open-source software security.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
OpenSSF

Exploring a Risk Approach to Software Supply Chain Security

0 rewiews
Explore software supply chain security through a risk-based approach, focusing on open source vulnerabilities and process improvements to mitigate supplier risks.
Add to list
1 Lesons
18 minutes
On-Demand
Free-Video
Conf42

Adding Security for Reliable Continuous Delivery

0 rewiews
Enhance security in continuous delivery: Learn containerization challenges, vulnerabilities, misconfigurations, supply chain attacks, and IAM. Explore solutions and see a practical demo.
Add to list
18 Lesons
46 minutes
On-Demand
Free-Video
Conf42

Supply Chain Attacks: Focusing on NPM Vulnerabilities - DevSecOps 2023

0 rewiews
Explore supply chain attacks focusing on NPM, learn defensive strategies, and discover research findings on vulnerabilities in package ecosystems. Gain insights into detection tools and solutions.
Add to list
27 Lesons
35 minutes
On-Demand
Free-Video
Linux Foundation

4 CI Security Best Practices to Prevent Cloud-Native Supply Chain Attacks

0 rewiews
Explore security challenges in CI pipelines and learn best practices to prevent cloud-native supply chain attacks. Discover tips for securing GitHub Actions, GitLab Runner, and CircleCI workflows.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Exploitation Techniques and Attacks on Hosting Assets and Access for Resale

0 rewiews
Exploration of underground markets for compromised network assets, covering exploitation techniques, lateral movement, monetization, and defender strategies for incident response and security monitoring.
Add to list
25 Lesons
54 minutes
On-Demand
Free-Video
NorthSec

Surprise Supplies

0 rewiews
Exploring major supply chain attacks of 2017, including MeDoc and CCleaner compromises. Analyzes attacker methods, malware used, and impact on victims. Discusses the history and future of supply chain attacks.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Recon Conference

Samsara Metamorphic Engine

0 rewiews
Explore Samsara, a viral metamorphic engine for JVM that transforms compiled targets, complicating analysis and enabling supply chain attacks from within IDEs, with added anti-debugging features.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
Ekoparty Security Conference

1-Click to Infiltrate Your Organization via Vulnerable VS Code Extensions

0 rewiews
Explore vulnerabilities in popular VS Code extensions and their potential for supply chain attacks. Learn how attackers can compromise organizations through developers' IDEs.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
RSA Conference

Chronicle of the Supply Chain Attack and Two Attack Strategies

0 rewiews
Explore supply chain attack strategies, including software development environment and update server penetration, through analysis of incidents targeting Korean and global companies.
Add to list
35 Lesons
40 minutes
On-Demand
Free-Video
Ekoparty Security Conference

IIoT, Data Infrastructure, Smart Factory - Sarka Pekarova - Ekoparty 2021: OT - IIOT - IOT Space

0 rewiews
Explore industrial cybersecurity challenges in IIoT and smart factories. Learn about automation pyramids, network segmentation, and threat landscapes to enhance IT-OT security in Industry 4.0 environments.
Add to list
22 Lesons
42 minutes
On-Demand
Free-Video
Black Hat

Reverse Engineering and Exploiting Builds in the Cloud

0 rewiews
Explore security vulnerabilities in cloud-based CI/CD and container build environments. Learn about potential attack scenarios, remediation strategies, and best practices for securing the software supply chain.
Add to list
33 Lesons
47 minutes
On-Demand
Free-Video
RSA Conference

Mitigating Russian State-Sponsored Cyber Threats to US Critical Infrastructure

0 rewiews
Explore Russian state-sponsored cyber threats to US critical infrastructure, learn mitigation strategies, and understand FBI resources for enhancing cybersecurity preparedness.
Add to list
19 Lesons
59 minutes
On-Demand
Free-Video
Black Hat

The Enemy Within - Modern Supply Chain Attacks

0 rewiews
Practical guidance on defending against and responding to supply chain attacks, covering prevention strategies, risk assessment, and best practices for both SecOps and App Development professionals.
Add to list
31 Lesons
51 minutes
On-Demand
Free-Video
Black Hat

Practical Approach to Automate the Discovery and Eradication of Open-Source Software Vulnerabilities

0 rewiews
Discover and eradicate open-source vulnerabilities in web applications at scale. Learn Netflix's pragmatic approach to identifying risks, triaging vulnerabilities, and implementing effective remediation strategies.
Add to list
26 Lesons
51 minutes
On-Demand
Free-Video
RSA Conference

Building Secure and Reliable Systems at Scale

0 rewiews
Learn Google's best practices for building secure, reliable systems at scale through automated security, containment, and multi-party techniques that foster a culture of review and resilience.
Add to list
22 Lesons
40 minutes
On-Demand
Free-Video
nullcon

I Boot when U-Boot

0 rewiews
Explore a custom bootkit for U-Boot devices, its persistence techniques, and implications for IoT security. Learn about backdooring methods and potential countermeasures.
Add to list
22 Lesons
33 minutes
On-Demand
Free-Video
RSA Conference

What Was Once Old Is New Again - Domain Squatting in 2020

0 rewiews
Modernized domain squatting techniques for OSINT gathering and weaponized document delivery, exploring corporate relationships, supply chain mapping, and advanced spear-phishing attacks.
Add to list
46 Lesons
52 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

Two Strategies for Supply Chain Attacks

0 rewiews
Explore two supply chain attack strategies by BARIUM APT group, analyzing real-world cases and their tactics. Learn defensive measures against these sophisticated cyber threats.
Add to list
22 Lesons
40 minutes
On-Demand
Free-Video
Hack In The Box Security Conference

TOCTOU Attacks Against Secure Boot and BootGuard

0 rewiews
Explore TOCTOU attacks on Intel's BootGuard, learn about vulnerabilities in secure boot processes, and discover open-source tools for testing system security.
Add to list
20 Lesons
39 minutes
On-Demand
Free-Video
Kaspersky

The Evolving Attack Surface

0 rewiews
Explore the expanding vulnerabilities in industrial control systems, from traditional security to blockchain, with insights on hardware attacks, supply chain risks, and network hijacking.
Add to list
20 Lesons
33 minutes
On-Demand
Free-Video
Security BSides San Francisco

Supply Chain Attack Through CCleaner - Evidence Aurora Operation Still Active

0 rewiews
Análisis detallado del ataque de cadena de suministro a CCleaner, explorando su sofisticación, objetivos y conexiones con el grupo APT17/Axiom, destacando la persistente amenaza de ataques estatales avanzados.
Add to list
14 Lesons
27 minutes
On-Demand
Free-Video
Black Hat

We Are About to Land - How CloudDragon Turns a Nightmare Into Reality

0 rewiews
Explore CloudDragon's advanced cyber tactics, including supply chain and cross-platform attacks. Gain insights into APT group operations and their evolving techniques in this cybersecurity analysis.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
IEEE

On-Chip Randomization for Memory Protection Against Hardware Supply Chain Attacks to DRAM

0 rewiews
Explore innovative techniques for safeguarding DRAM against hardware supply chain attacks through on-chip randomization, enhancing memory protection in modern computing systems.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
Black Hat

Mac-ing Sense of the 3CX Supply Chain Attack - Analysis of the macOS Payloads

0 rewiews
Detailed analysis of the 3CX supply chain attack's macOS payloads, exploring the first "chained" supply chain attack and its impact on macOS systems. Insights into advanced cybersecurity threats and defenses.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
PyCon US

Secure Software Supply Chains for Python

0 rewiews
Explore Python software supply chain security, including common attacks, protective measures, and tools. Learn about ecosystem improvements for enhanced security in third-party package integration.
Add to list
23 Lesons
26 minutes
On-Demand
Free-Video
PyCon US

Why You Should Care About Open Source Supply Chain Security

0 rewiews
Explore open source supply chain security, understanding vulnerabilities, attack vectors, and protective measures. Learn to evaluate dependencies and implement safeguards against potential threats.
Add to list
21 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Project Trebuchet - How SolarWinds is Using Open Source to Secure Their Supply Chain in the Wake of the Sunburst Hack

0 rewiews
SolarWinds' Project Trebuchet: Rebuilding secure software supply chain using CNCF and CDF projects after Sunburst hack. Insights on new build system, its necessity, and lessons learned from a major security breach.
Add to list
14 Lesons
37 minutes
On-Demand
Free-Video
DevSecCon

Defending JavaScript Projects from Supply Chain Attacks - Running Code from the Internet Safely

0 rewiews
Explore proactive defenses against JavaScript supply chain attacks, including access control and future JS features for enhanced project security.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
Linux Foundation

Securing the Unseen: Defending Against Open Source Software Supply Chain Attacks

0 rewiews
Discover practical strategies to protect applications from supply chain attacks targeting open source dependencies, with real examples and actionable defense measures.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Confreaks

Gem Install: What Could Go Wrong? - Risks and Prevention in Ruby Dependencies

0 rewiews
Explore potential risks of installing gems and learn strategies to safeguard your Rails application's dependencies against attacks.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Android Makers

Securing Gradle Builds: Protecting Against Supply Chain Attacks

0 rewiews
Secure Gradle builds against supply chain attacks with insights on vulnerabilities, protection strategies, and best practices for dependency and metadata verification.
Add to list
10 Lesons
37 minutes
On-Demand
Free-Video
RSA Conference

Insights into New Supply Chain and Cloud-Identity Attacks

0 rewiews
Explore new cloud threat tactics exploiting supply chain and identity vulnerabilities, with live demonstrations and defense strategies against adversaries like PANDA.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
OpenSSF

The Simple Yet Lethal Anatomy of an AI Attack

0 rewiews
Dive into the anatomy of AI security threats through live demonstrations, exploring attack strategies from reconnaissance to LLM poisoning, and learn to defend against emerging vulnerabilities in AI systems.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
DEFCONConference

The XZ Backdoor Story: How a Supply Chain Attack Nearly Compromised SSH Servers

0 rewiews
Uncover the gripping investigation of the XZ backdoor incident, exploring the mysterious maintainer Jia Tan, technical analysis of the compromise, and crucial lessons for open-source security.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
DevOops

(Не)стандартный подход к моделированию Supply Chain Attack

0 rewiews
Исследуйте методы защиты от Supply Chain атак через практические примеры моделирования угроз и эффективные стратегии предотвращения в сфере Operations Security.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
DevSecCon

Insecure Execution: Attacking the Cloud Native Supply Chain

0 rewiews
Explore cloud native supply chain vulnerabilities and learn strategies to enhance security against internal threats and software implants.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Black Hat

Confused Learning: Supply Chain Attacks Through Machine Learning Models

0 rewiews
Explore novel ML model vulnerabilities, including malware distribution and data exfiltration. Learn to create, distribute, and analyze ML malware, with insights on threat hunting and mitigation strategies.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
RSA Conference

Lessons Learned from the Summer of Supply Chain Attacks

0 rewiews
Explore multi-cloud environment compromises, supply chain attacks, and their implications for data security, governance, contracting, communications, and legal exposure with expert panelists.
Add to list
1 Lesons
52 minutes
On-Demand
Free-Video
Yannic Kilcher

Privacy Backdoors: Stealing Data with Corrupted Pretrained Models - Explained

0 rewiews
Explore how tampering with pretrained models can compromise privacy, enabling attackers to reconstruct finetuning data. Learn about privacy backdoors in transformers and their implications for machine learning security.
Add to list
5 Lesons
1 hour 4 minutes
On-Demand
Free-Video
Conf42

TTPs of Attacks on OSS in Python - Trusty Package Security

0 rewiews
Explore tactics and techniques of supply-chain attacks on Python open-source software, including starjacking, installation, delivery, and exfiltration. Learn defensive strategies against these threats.
Add to list
15 Lesons
1 hour 14 minutes
On-Demand
Free-Video
Eclipse Foundation

A Java Developer's Guide to Supply Chain Security

0 rewiews
Discover essential software supply chain security practices for Java development, from SBOMs and automated builds to vulnerability management and secure distribution methods.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video