CNCF [Cloud Native Computing Foundation] Courses

Malicious Compliance Automated: Building Secure Containers and Obfuscating Content

Explore container image compression techniques, secure image building, and obfuscation methods to reduce attack surfaces and disrupt vulnerability scanners. Learn automation and Linux kernel interfaces for enhanced security.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

ShellTorch - The Next Evolution in *4Shell Executions

Uncover ShellTorch vulnerabilities in TorchServe, enabling remote code execution and AI model manipulation. Learn about the high-severity exploit's impact on PyTorch ecosystem and essential mitigation strategies.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Future Open Source LLM Kill Chains - Security Risks and Mitigation Strategies

Explore potential security risks in open-source AI ecosystems, focusing on LLM vulnerabilities and kill chains. Learn mitigation strategies to protect against sophisticated adversaries in the evolving AI landscape.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Elevate Cloud Threat Hunting with AI

Explore AI-powered cloud threat hunting with Kestrel as a Service, enhancing detection speed and efficiency through reusable hunting flows and predictive AI model plugins.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Sigstore: Past, Present and Future Directions

Explore Sigstore's journey, impact on OSS code signing, and future plans. Learn about its adoption by major projects and integration efforts with package managers.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Security-Focused Chaos Engineering - The Lasso for AI Security Threats

Explore proactive AI security testing using Secops-Chaos, an open-source framework for encoding threat tactics as chaos experiments in Kubernetes environments.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Security Champions Leaderboard - Building and Gamifying Security Culture

Gamifying security initiatives to foster a proactive security culture, recognizing champions, and improving overall developer engagement in organizational security practices.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Accelerating AI Securely with GVisor

Explore container sandboxing for AI security, focusing on gVisor's implementation, hardware accelerator support, and performance optimization for mitigating AI/ML risks.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

How OpenTelemetry Helps Generative AI

Explore how OpenTelemetry enhances Generative AI debugging and performance. Learn about observability's role in understanding AI behavior, improving outcomes, and leveraging OpenTelemetry for effective AI development.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Championing Security - Scaling Security at Every Level

Explore the concept of Security Champions to address enterprise security challenges. Learn best practices for implementing a program that empowers team members to promote and integrate security across the organization.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Invisible Infiltration of AI Supply Chains: Protective Measures from Adversarial Actors

Explore protective measures against adversarial actors infiltrating AI supply chains. Learn to secure data, models, and pipelines, implement security controls, and mitigate risks in AI systems.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Metrics That Matter - Choosing Cloud Security KPIs for Your Business

Learn to select and implement effective cloud security metrics tailored to your organization's needs, risk appetite, and business goals. Explore real-world examples and innovative concepts for enhancing security operations.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem

Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

The Story of Crush - Navigating the Cloud Native Ocean with SPIFFE Identity

Explore how a microservice named Crush overcame security challenges using SPIFFE ID, enabling secure communication and access across cloud platforms through mTLS and standardized identity management.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Container Images and Security 101: 5 Need to Know Facts

Explore 5 essential facts about container image formats, security tools, and best practices for confident application deployment in cloud and Kubernetes environments.

• YouTube
• 36 minutes
• Self-Paced
• Free Video