Supply Chain Attacks Courses and Certifications

Forensic 365

Emerging Cyber Threats and Supply Chain Attacks in 2021

Explore emerging cyber threats and supply chain attacks, focusing on ransomware, phishing, and insider threats. Learn preventive measures and strategies to combat these evolving security challenges.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Free Video

DevSecCon

Supply Chain Attacks - Focusing on NPM Vulnerabilities and Defenses

Explore NPM ecosystem vulnerabilities, learn to identify and protect against supply chain attacks, and discover strategies to fortify open-source software security.

• YouTube
• 44 minutes
• On-Demand
• Free Video

SANS

Ghost in Your Supply Chain - APT Attacks on Taiwan's Financial Sector

Explore APT attacks on Taiwan's financial sector, focusing on supply chain vulnerabilities. Learn about MDM platform exploitation, JIRA abuse, and malware-free attacks. Gain insights into island-hopping techniques and comprehensive threat mapping.

• YouTube
• 45 minutes
• On-Demand
• Free Video

OWASP Foundation

XZ Backdoor - Navigating the Complexities of Supply Chain Attacks Detected by Accident

Explore the intricacies of supply chain attacks through the lens of the XZ Backdoor incident, uncovering detection methods and implications for cybersecurity professionals.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Conf42

Supply Chain Attacks: Focusing on NPM Vulnerabilities - DevSecOps 2023

Explore supply chain attacks focusing on NPM, learn defensive strategies, and discover research findings on vulnerabilities in package ecosystems. Gain insights into detection tools and solutions.

• YouTube
• 35 minutes
• On-Demand
• Free Video

DEFCONConference

Preventing One of The Largest Supply Chain Attacks in History

Discover how abandoned AWS S3 buckets could enable massive supply chain attacks affecting thousands of organizations worldwide and learn prevention strategies.

• YouTube
• 38 minutes
• On-Demand
• Free Video

NorthSec

Living Off the Pipeline - Advanced Supply Chain Attacks in CI/CD Build Environments

Discover advanced supply chain attack techniques targeting CI/CD pipelines, learn to predict threats using adapted MITRE ATT&CK framework, and defend against XZ-like compromises.

• YouTube
• 28 minutes
• On-Demand
• Free Video

NDC Conferences

Supply Chain Attacks in the Terraform Registry - Live Demo

Uncover critical security vulnerabilities in Terraform Registry through a live demonstration of supply chain attacks, revealing how malicious code can compromise enterprise credentials.

• YouTube
• 47 minutes
• On-Demand
• Free Video

OpenSSF

Living Off the Pipeline - From Supply Chain 0-Days to Predicting the Next XZ-like Attacks

Discover how threat actors exploit CI/CD pipelines for supply chain attacks, learn to predict XZ-like compromises using MITRE ATT&CK framework, and defend against advanced pipeline threats.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Black Hat

Your Traffic Doesn't Lie - Unmasking Supply Chain Attacks via Application Behaviour

Discover BEAM, an open source tool that detects supply chain attacks through web traffic analysis, achieving 95%+ accuracy without endpoint agents or code changes.

• YouTube
• 43 minutes
• On-Demand
• Free Video

Supply Chain Cybersecurity: Preventing Supply Chain Attacks

310 ratings at LinkedIn Learning

Explore security frameworks and practical strategies to prevent supply chain attacks on your organization.

• LinkedIn Learning
• 42 minutes
• On-Demand
• Free Trial Available

Security BSides San Francisco

Attacking and Defending Supply Chains - How We Got Admin in Your Cloud

Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.

• YouTube
• 44 minutes
• On-Demand
• Free Video

LASCON

3CX Supply Chain Attack: Lessons Learned

Análisis del ataque de cadena de suministro a 3CX: lecciones aprendidas para prevenir futuros incidentes y fortalecer la seguridad en sistemas VoIP y software empresarial.

• YouTube
• 46 minutes
• On-Demand
• Free Video

DEFCONConference

Not Just a Pipeline Leak - Reconstructing Real Attack Behind tj-actions

Uncover the sophisticated supply chain attack behind the tj-actions incident, revealing how attackers weaponized open-source trust to target Coinbase through lateral movement.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Black Hat

The Enemy Within - Modern Supply Chain Attacks

Practical guidance on defending against and responding to supply chain attacks, covering prevention strategies, risk assessment, and best practices for both SecOps and App Development professionals.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk