Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Paul Dwyer, a prominent figure in the world of cybersecurity, delves into the complex and multifaceted realm of cyber threats. Join us as we explore the blurred lines between cyber warfare, cyber terrorism, and cybercrime, all converging into a malevolent force known as cyber evil. Discover the pivotal role of cybersecurity professionals in combating this darkness, relentlessly protecting our digital society from the abyss.

Asset inventories enable you to know what you have to secure, and to monitor it for deviations. The pace of iteration in the world of software engineering makes those platforms inevitable. In this episode we welcome Sacha Faust, director of security engineering at Grammarly, who built Cartography, one of the first open source asset inventory. Sacha describes what led them to building this (funnily: an offensive use case!), how inventories enable spreading ownership to software teams, the solution that exist off the shelf today, …

Managing access to EKS clusters can be fraught with peril if not done correctly. By leveraging Teleport to manage EKS access, you reduce your potential exposure to attacks, add audit trails, and even achieve compliance! Watch this session with Chintan Sanghavi and Nivathan Somasundharam, where they walk you through how to.

At RSA 2023, JFrog spoke with security experts about their current challenges and focus areas. With increasing scrutiny on the vulnerability of open-source, and blindspots in their Software Supply Chain (SSC) it was no surprise to hear that SSC attacks have become a top concern. But with so many vulnerabilities to fix, the need for heavy manual efforts, and a plethora of complex AST security tools to navigate, security experts say that securing the SSC can feel like an overwhelming task.

Every company’s APIs are unique and so are its security gaps. Bad actors will poke and prod to learn your APIs and find mistakes in business logic they can exploit. Catching these attacks requires context and deep behavioral analysis over time. With its recent AWS WAF Ready designation, Salt Security makes it easier and faster for businesses to protect the APIs running in their AWS environments. Salt provides the visibility, intelligence, and context over time to identify and block attacks using tools you already rely on such as Amazon API Gateway, AWS WAF, and other inline enforcement points.

Discover how Netskope's Intelligent SSE and DLP create a robust defense against potential leaks of proprietary code to AI tools like ChatGPT. This secure technology ensures your organization's precious source code remains safeguarded at all times.

Sravish sits down with Thomas Owen to discuss the latest security and GRC trends.

What can startups and large enterprises have in common? Different organizational structures that cause friction when bringing in and rolling out a new tool. If you are familiar with Snyk, you’ll know that Groups can hold many organizations, and Organizations contain Projects. But that does not stop there… Each node in the organizational layer has different reporting, access control as well as security and license policy settings.

Video Series: Angular Web Development #12 Part 3: Modifying the Standard Web Portal.

Join renowned cybersecurity expert Paul Dwyer in this compelling video as he highlights the urgent need for a cultural shift toward security consciousness. In today's digital landscape, organizations, and individuals often perceive security as a cumbersome inconvenience. Paul delves into the reasons behind this mindset, emphasizing the importance of understanding why security matters.