Typosquatting Courses and Certifications

IEEE

Every Second Counts - Quantifying the Negative Externalities of Cybercrime via Typosquatting

Quantifying harm from typosquatting using intent inference. New metrics and methodology reveal average time cost to users and traffic loss for legitimate sites. Some typosquatters unexpectedly improve latency.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

GOTO Conferences

Adapting DevOps in a World of Growing Software Supply Chain Attacks

Explore DevSecOps strategies to combat rising software supply chain attacks. Learn about vulnerabilities, prevention techniques, and essential rules for securing your development pipeline.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Open Source Supply Chain Security - Are Containers the Biggest Blind Spot?

Experts discuss open source supply chain security, focusing on container vulnerabilities, SBOMs, and best practices for managing security in modern engineering toolchains.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Open Source Supply Chain Threat Landscape - A Moving Target

Explore the evolving landscape of open source supply chain threats, their impacts, and strategies for implementing developer-first security to counter sophisticated attacks.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Software Supply Chain Aspects in Infrastructure as Code

Explore infrastructure-as-code security risks, focusing on supply chain vulnerabilities in reused templates and containers. Learn strategies to mitigate threats and ensure robust IaC practices.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Software Supply Chain Aspects in Infrastructure as Code and How to Secure It

Explore software supply chain risks in Infrastructure as Code, learn about KICS for security, and discover strategies to safeguard your infrastructure from vulnerabilities in reused components.

• YouTube
• 40 minutes
• On-Demand
• Free Video

nullcon

Unearthing Malicious and Risky OpenSource Packages Using Packj

Explore PACKJ, a security framework for detecting risky open-source packages. Learn about supply chain attacks, defense strategies, and real-world examples to enhance your software security practices.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

PyCon US

Bad Actors vs Our Community - Detecting Software Supply Chain Attacks

Explore techniques used by bad actors in software supply chain attacks and learn about a large-scale vetting system for detecting malware in Python packages.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

DevSecCon

Securing Supply Chains in C++, Java and JavaScript - Episode 133

Explore supply chain security across C++, Java, and JavaScript ecosystems. Learn about challenges, dependencies, versioning, and software bill of materials (SBOMs) from industry experts.

• YouTube
• 38 minutes
• On-Demand
• Free Video

RSA Conference

How Your Engineering Teams Are Being Attacked - It's Not What You Think

Uncover unconventional attack methods targeting engineering teams through fake recruiting tests, malicious IDE plugins, and compromised dependencies with real-world case studies.

• YouTube
• 47 minutes
• On-Demand
• Free Video

Black Hat

Flipping Bits - Credential Harvesting Through Domain Bitflip Attacks

Explore how bit-flipping attacks on domain names can lead to credential harvesting, featuring the 'Certainly' tool for red-team engagements and essential defensive strategies against DNS exploitation.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Security Vibe Check - Which Malware Are You?

Discover your security habits through a fun quiz matching your coding practices to iconic supply chain attacks while learning practical security posture improvements.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Security BSides San Francisco

Slaying the Dragons - A Security Professional's Guide to Malicious Packages

Discover how attackers exploit typosquatting and author impersonation to infiltrate software supply chains. Learn practical threat hunting methodologies to detect, analyze, and defend against malicious packages.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Security BSides San Francisco

WHOIS Your Daddy: Tracking Iranian-backed Cyber Operations with Passive DNS

Uncover how passive DNS data exposes Iranian cyber operations through malicious name servers and typosquatting domains used for malware distribution.

• YouTube
• 21 minutes
• On-Demand
• Free Video

ISTA Conference

Software Supply Chain Security: Understanding and Mitigating Package Ecosystem Attacks

Explore real-world software supply chain attacks, security vulnerabilities, and defense strategies through npm and NuGet examples, learning to protect projects from malicious package threats.

• YouTube
• 29 minutes
• On-Demand
• Free Video