Below the Radar: Identifying Hidden Threats Within the Development Ecosystem

Explore critical threats in the development ecosystem and their impact on cloud-native environment security in this 30-minute conference talk. Delve into the hidden world of exposed secrets in code due to vulnerabilities in source code management platforms. Learn how to identify these exposed secrets before attackers do, gaining insights into the often-overlooked aspects of secret scanning. Examine discovered flaws, with a focus on Kubernetes secrets and their elusive nature. Discuss the concept of Shadow IT and its role in exposing secrets. Through real-world examples, understand how attacker vectors have led to major supply chain attacks on popular platforms. Acquire valuable mitigation strategies and tools, complete with detailed explanations, to enhance your cloud-native security posture.