CNCF [Cloud Native Computing Foundation] Courses

Evasive Maneuvers - Strategies to Overcome Runtime Detection Tools

Amit Schendel examines how obfuscation, polymorphism, sandbox evasion, and behavioral camouflage can help attackers bypass runtime detection.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Malicious Compliance Automated: Building Secure Containers and Obfuscating Content

Explore automating container image minification to keep necessary components, reduce attack surface, and examine how compression and obfuscation affect security scanners.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

ShellTorch - The Next Evolution in *4Shell Executions

Researchers trace a four-vulnerability chain to full remote code execution in TorchServe, demonstrate the exploit, and explain how to mitigate it.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Future Open Source LLM Kill Chains - Security Risks and Mitigation Strategies

A threat model for open-source LLMs shows how attacks through model redistribution and MLOps gaps can compromise downstream software.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Elevate Cloud Threat Hunting with AI

Kestrel’s cloud-deployable threat hunting flows and predictive AI plugins aim to shorten the time from threat detection to response.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Sigstore: Past, Present and Future Directions

Sigstore’s founders trace how the project grew and discuss its integrations, roadmap priorities, and future direction.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Security-Focused Chaos Engineering - The Lasso for AI Security Threats

Learn how security-focused chaos experiments can expose evolving threats in AI applications and test protections for organizational data, intellectual property, and APIs.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Security Champions Leaderboard - Building and Gamifying Security Culture

A talk on designing a gamified security champions leaderboard to involve more people in organizational security.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Accelerating AI Securely with GVisor

Learn how gVisor container sandboxing balances isolation and performance while supporting hardware accelerators for high-risk AI workloads.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

How OpenTelemetry Helps Generative AI

Explains how observability and OpenTelemetry can help teams understand and improve generative AI systems that cannot be debugged by stepping through code.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Championing Security - Scaling Security at Every Level

Learn how security champions spread security practices across teams and how to start a program that connects security teams with everyday work.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Invisible Infiltration of AI Supply Chains: Protective Measures from Adversarial Actors

Threat-model AI systems across data, models, training pipelines, and production inference, then apply controls to reduce adversarial compromise.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Metrics That Matter - Choosing Cloud Security KPIs for Your Business

Examines how to choose cloud security metrics that reflect business scenarios and risk appetite while helping teams prioritize remediation and improve security posture.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem

Explores how AI changes open-source software security, from securing components used in AI systems to automating vulnerability management and contributing to software development.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

The Story of Crush - Navigating the Cloud Native Ocean with SPIFFE Identity

A turtle-shaped microservice replaces mishandled secrets with a SPIFFE identity to secure service traffic and access using mTLS.

• YouTube
• 37 minutes
• Self-Paced
• Free Video