Security Courses

NDC Conferences

Navigating the Cloud Native Security Landscape

Explore cloud-native security challenges, acronyms, and attack surfaces. Learn about real-world exploits, research data, and see a demonstration of attacks like Log4Shell in relation to different security layers.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

Cyber Mentor

Remediating XML External Entity Injection - Cyber Security Tutorial

Learn to identify, exploit, and mitigate XML External Entity (XXE) vulnerabilities through hands-on labs and practical demonstrations, enhancing your web application security skills.

• YouTube
• 14 minutes
• Self-Paced
• Free Video

Black Hat

LogoFAIL - Security Implications of Image Parsing During System Boot

Uncovers critical vulnerabilities in BIOS image parsing libraries, allowing attackers to exploit boot processes for code execution and compromising system security at the firmware level.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

NDC Conferences

Developing Secure Software with GitHub - Automated Security Checks and Tools

Learn to leverage GitHub for automated security checks, including static application security testing and software composition analysis, to enhance your application's security posture with minimal effort.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

Playing Defense: The Reactive Cloud Native Security Battle

Explore cloud native security challenges, including attack surface growth, regulatory pressures, and supply chain complexities. Learn strategies to shift from reactive to proactive security and achieve SLOs.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

OAuth2 Token Exchange for Microservice API Security

Explore OAuth2.0 flows, challenges in microservice environments, and the OAuth2 Token Exchange standard for secure API authentication and identity propagation.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Linkerd Project Update: VM Support, Ingress, Security on the Edge, and Rust

Discover Linkerd's latest advancements: Rust adoption, mesh expansion for non-Kubernetes environments, enhanced edge security, and upcoming ingress traffic handling features. Learn about the world's fastest service mesh.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

TAG Security Highlights - Improving Cloud Native Project Security

Explore TAG Security's recent work on cloud native security, including software supply chain tools and Security Pals initiative. Learn about their outputs and how to get involved in improving CNCF project security.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Policy as Code: A Game-Changer for Stack Security

Explore "Policy as Code" and its impact on stack security. Learn about access control models, policy engines, and how to integrate authorization into your codebase for enhanced application security.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

An Acronym-Free Introduction to Software Supply Chain Security

Explore principles and practices for securing software supply chains without jargon. Learn about open-source projects, standards, and common terms to enhance your understanding of this rapidly evolving field.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

A Practical Guide to ArgoCD Security Gating

Explore end-to-end security for Kubernetes deployments using ArgoCD and Kubescape. Learn to implement security gates, audit container images, and enhance deployment hygiene without compromising speed.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

DefCamp

Sherlock - OpenSource Platform for Applying LLMs to Security Use Cases

Explore Sherlock: an open-source platform leveraging LLMs for security applications. Learn about its configurable features and potential impact on cybersecurity practices.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

DefCamp

AI-Powered Security Operation Center - Myth or Reality

Explore the potential of AI-powered Security Operation Centers (SOCs) in cybersecurity. Gain insights from Vladimir Ghita's DefCamp 2023 presentation on the reality and myths surrounding this innovative approach.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

DefCamp

The JARM'ing Adventures of a Weaponized Security Tool

Explore JARM, a weaponized security tool, and its applications in cybersecurity. Learn about its capabilities, potential uses, and impact on network defense strategies.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

DefCamp

Building a Successful Security Team - DefCamp 2023

Insights on building an effective security team, covering recruitment, skill development, and team dynamics for optimal cybersecurity operations in organizations.

• YouTube
• 33 minutes
• Self-Paced
• Free Video