Strengthening Defenses Against CI/CD Security Threats - Understanding and Mitigating Pipeline Vulnerabilities

Explore a comprehensive conference talk from LASCON that delves into the critical security challenges facing CI/CD pipelines in modern software development. Learn about the top OWASP-identified CI/CD security risks, understanding how attackers execute these exploits, their potential impacts, and underlying motivations. Discover practical defensive strategies to fortify CI/CD pipeline security and transform potential vulnerabilities into robust security assets. Through this 48-minute presentation, gain valuable insights into securing traditionally overlooked development pipeline vulnerabilities that have become increasingly attractive targets for malicious actors.