Security Courses

Multi-messenger Security - Adaptive Kubernetes SOC From Disparate eBPF Tools

Discover how to build an adaptive Kubernetes Security Operations Center using eBPF tools like Kubescape, Pixie, and Tetragon for enhanced threat detection and data sovereignty.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

What Doesn't Kill You Makes You Stronger - The Vulnerabilities That Redefined Kubernetes Security

Explore five pivotal Kubernetes CVEs that transformed container security, from runC escapes to CRI-O vulnerabilities, and discover the threat patterns and tools they created.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

The State of Git Security With SLSA and Gittuf

Explore Git security beyond forge platforms using gittuf and SLSA Source Track to implement repository policies, read permissions, and standardized source provenance verification.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Threat Modeling for Kubernetes - Enhancing Security Posture in Complex and Regulated Environments

Discover practical threat modeling techniques for Kubernetes environments, focusing on risk identification across clusters, workloads, and third-party components in regulated settings.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

SAFE-MCP - A Security Framework for AI and Model Context Protocol

Discover a comprehensive security framework for Model Context Protocol (MCP) covering 65 attack techniques, detection strategies, and mitigation controls for AI systems.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

It's Not a Best Practice If No One Can Follow It - Learning From Our Container Security Mistakes

Discover practical container security lessons from Twistlock and Alpine Linux founders on making security best practices actually implementable for engineering teams.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Rewiring Cilium - Operator-Driven Scale and Security With CiliumEndpointSlice

Explore CiliumEndpointSlice feature for scalable container networking, reducing control plane stress and unlocking higher cluster scale with practical optimization strategies.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

No Joke - Two Security Maintainers Walk Into a Cluster

Explore Kubernetes security fundamentals through Network Policies, RBAC, Pod Security Standards, and vulnerability scanning with practical examples and best practices.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

End-to-End Security With gRPC in Kubernetes

Discover best practices for securing gRPC applications in Kubernetes with TLS, MTLS, JWT authentication, and service mesh integration for robust microservices communication.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Modern PostgreSQL Authorization With Keycloak - Cloud Native Identity Meets Database Security

Discover how to modernize PostgreSQL security by integrating Keycloak for centralized identity management, replacing static credentials with OAuth support in cloud-native environments.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Red Vs. Blue - A Live Attacker-Defender Showdown in Kubernetes Security

Experience a live attacker-defender simulation in Kubernetes security, covering privilege escalation, RBAC misconfigurations, and real-time defense strategies through interactive demos.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Strengthening Kubernetes Trust - SIG Auth's Latest Security Enhancements

Discover how SIG Auth enhances Kubernetes security with ephemeral tokens, X.509 certificates, kubelet hardening, and improved authorization policies for stronger trust.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

MUST/SHOULD/MAY - A Tour of TAG Security and Compliance Project Services

Discover TAG Security and Compliance services for CNCF projects, including mandatory assessments, advisory tools, and best practices to enhance security posture and maturity.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Aligning Enterprise AI Security With MITRE ATLAS Using Open Source Technologies

Discover how to secure AI/ML systems using MITRE ATLAS framework and open-source tools like Kubeflow, Falco, and StackRox to detect data poisoning, model extraction, and evasion attacks.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

The Ultimate Container Challenge - An Interactive Trivia Game on Supply Chain Security

Discover container supply chain security through an interactive trivia game covering SBOM, SigStore, SLSA, and other CNCF projects with live demos and prizes.

• YouTube
• 29 minutes
• Self-Paced
• Free Video