Security Courses

OpenSSF

Meeting the OpenSSF Security Baseline with Minder

Discover how Minder platform helps monitor and ensure OpenSSF Security Baseline compliance across repositories, with practical demonstrations of automated security posture management.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

OpenSSF

Open Source Software Transparency for Acquisition - Making Security Trade-off Decisions

Explore software security measurement strategies and trade-off decisions for organizations using open-source components, focusing on vulnerability assessment, process metrics, and cybersecurity analysis.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

OpenSSF

Supply-Chain Security: What Helping 200 Projects Improve Their Security Looks Like

Discover how Google's Open Source Security Team helped 200+ projects improve their supply-chain security, with insights on maintainer collaboration and practical security implementation strategies.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

OpenSSF

Scorecard at Scale: Old and New Possibilities for Lifting Security on All Repositories

Discover strategies for implementing OpenSSF Scorecard at scale, exploring various tools and methods to assess, monitor, and enhance repository security across large organizations.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

OpenSSF

Why Is My Software on Fire? - Understanding Software Versioning and Supply Chain Security

Discover essential software versioning practices and supply chain management principles to enhance security and prevent hazards in open source development.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

OpenSSF

Back to Security Basics: Evaluating, Consuming, and Contributing Open Source Software

Discover essential strategies for evaluating and securing open source software through maintenance assessment, vulnerability management, and community engagement practices for safer implementation.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

OpenSSF

Continuous Assurance of Supply Chain Security Levels of Open Source Artifacts Using SLSA 0.1

Discover how to verify SLSA provenance in trusted build systems to enhance supply chain security and protect against modified sources, compromised builds, and package tampering.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

OpenSSF

There Is Just One Way to Do Open Source Security - Together

Discover how collective efforts and unified approaches in open source security lead to superior results, exploring why fragmentation hinders progress and how collaboration drives innovation.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Ethereum Engineering Group

Security Vulnerabilities in ZK-SNARKs and Their Application in ZK-Rollups

Explore critical security vulnerabilities in zk SNARK systems and their implications for zk rollups, focusing on systematic analysis and potential mitigation strategies in blockchain scaling solutions.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

HashiCorp

Sentinel Policy-as-Code: Implementing Security and Compliance Guardrails in Financial Services

Discover how Fannie Mae implements 400+ security and compliance guardrails using Sentinel policies for infrastructure automation in regulated financial environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

HashiCorp

People, Process, and Technology for Infrastructure and Security Lifecycle Management Adoption

Discover how infrastructure and security lifecycle management transforms organizational dynamics through modern automation practices and technological frameworks.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

OpenInfra Foundation

Implementing Zero Trust Security in MLOps for Intelligent Energy Storage Systems

Discover how to implement Zero Trust security within MLOps for Energy Storage Systems, integrating Kubernetes and OpenStack environments for enhanced cybersecurity in critical energy infrastructure.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

DEFCONConference

Security Vulnerabilities in Video Surveillance Systems and Supply Chain Analysis

Explore security vulnerabilities in surveillance systems, focusing on NVR devices from major vendors like Hikvision and Dahua, while examining supply chain risks and exploitation scenarios.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

DEFCONConference

Defeating ATM Disk Encryption - Security Vulnerabilities in Vynamic Security Suite

Delve into critical ATM security vulnerabilities, focusing on Diebold Nixdorf's VSS encryption weaknesses, exploitation methods, and essential defense strategies for financial systems protection.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

DEFCONConference

Abusing OIDC Authentication for Cloud Security Vulnerabilities

Dive into OIDC security vulnerabilities, exploring authentication mechanisms, potential misconfigurations, and real-world attack vectors in cloud environments through CI/CD workflows and identity providers.

• YouTube
• 38 minutes
• Self-Paced
• Free Video