DevSecCon Courses

Ferramentas AST e Arquiteturas MAD e Monolítica na Segurança de Aplicações Modernas

Explore ferramentas de segurança para arquiteturas modernas e monolíticas. Aprenda a integrar sistemas de detecção, firewalls e scanners no desenvolvimento, garantindo conformidade e mitigando riscos.

• YouTube
• 57 minutes
• Self-Paced
• Free Video

OWASP LLM Top 10 - Understanding Critical Security Risks for Large Language Models

Explore OWASP LLM Top 10: Gain insights into critical security risks, learn practical steps to fortify applications, and stay ahead in cybersecurity with expert R Nagarjun.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Supply Chain Attacks - Focusing on NPM Vulnerabilities and Defenses

Explore NPM ecosystem vulnerabilities, learn to identify and protect against supply chain attacks, and discover strategies to fortify open-source software security.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Weaving Application Security's Scale - Enabling Business Through Partnerships

Explore AppSec's growth journey and learn how to scale security across organizations by fostering partnerships and enabling wider business objectives.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

The North Star: Risk-Driven Security - DevSecCon

Discover risk-first threat modeling to identify and prioritize security vulnerabilities, focusing on business risks for effective risk reduction and stakeholder buy-in.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Empowering DevSecOps - Risk-Driven Security and Scaling Application Security

Discover risk-driven security and scale application security across your organization. Learn threat modeling techniques, identify crucial vulnerabilities, and enable business-wide security partnerships.

• YouTube
• 1 hour 44 minutes
• Self-Paced
• Free Video

Software Bill of Materials in DevOps, DevSecOps, and Value Stream Management

Explore the evolving concept of Software Bill of Materials in DevOps and DevSecOps, discussing its expanded scope, security implications, and modern purposes.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Deep Dive into Falco - Empowering DevSecOps with Real-time Container Security

Explore Falco's Kubernetes-native runtime security features, detect threats in real-time, and enhance container security posture through behavior-based rules and customized alerts.

• YouTube
• 1 hour 14 minutes
• Self-Paced
• Free Video

Entendendo o Cybersecurity Color Wheel - Conceitos e Aplicações

Explore a roda de cores da segurança cibernética, uma representação simbólica dos aspectos multifacetados da proteção digital, com especialistas em cibersegurança e pesquisa de segurança.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

Pod Security Policy is Dead, Long Live... What's Next?

Explore alternatives to deprecated Pod Security Policies in Kubernetes, understanding their importance and discovering new solutions for securing your clusters.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

GitOps and GitHub Events in DevSecOps Release Orchestration Pipeline

Implement DevOps processes to ensure controlled software releases comply with standards. Learn how to define control levels, establish best practices, and disseminate culture across the organization.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Free Video

SCARLETEEL: Advancing Cloud Attack Chains

Explore SCARLETEEL operation's tactics for infiltrating AWS, stealing data, and performing cryptojacking attacks. Learn defensive strategies for EC2, IAM, Lambda, and Terraform to fortify cloud security.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Effective Risk Management and AI Security Standards - Episode 138

Explore Google's Secure AI Framework (SAIF) for effective risk management in AI adoption. Learn six core elements, collaboration importance, and practical approaches to address AI security concerns.

• YouTube
• 54 minutes
• Self-Paced
• Free Video

AI Hallucinations and Manipulation - How to Use AI Coding Tools Securely - DevSecCon

Explore AI coding tools' security implications, challenging their ability to produce secure software and learning strategies for safe implementation in development workflows.

• YouTube
• 1 hour 4 minutes
• Self-Paced
• Free Video

Combating Fraud in High-End Marketplaces - Lessons from a Year-Long Battle

Dive into a developer's intense year-long battle against fraud in a high-end marketplace, exploring technical challenges, phishing tactics, and crucial lessons for safeguarding online platforms.

• YouTube
• 1 hour 8 minutes
• Self-Paced
• Free Video