Black Hat·45 min
Aleksandr Krasnov
Security researchers examine technical aspects of SecTor 2025 | What If We Caught SUNBURST in CI/CD?.
ci-cdsectorcaught+1
ci-cd
71 talks tagged with this topic.
Filters+
Loading filters…
1–24 of 70 talks / 71 · loading…
Black Hat·36 min
Tian Zhou · Yiwen Wang · Xiu Zhang
Industry experts analyze emerging threats surrounding The Illusion of Isolation: How Isolation Failures in CI/CD Servers Lead to RCE and Privacy Risks.
rceci-cdillusion+3
Briefings·41 min
Varun Sharma · Ashish Kurmi
Incident responders detail the compromise of popular GitHub Actions workflows, tracing malicious pull requests and automated credential harvesting.
ci-cdnetworkexfiltration+2
DragonJAR - Hacking y Seguridad Informática·1 hr
Daniel Echeverry aka Adastra
Outlines Cómo implementar DevSecOps con CI/CD en proyectos reales | Daniel Echeverry aka Adastra and evaluates key implications for security practitioners.
devsecopsci-cdimplementar+2
FIRST·28 min
Engineers explore architecture and security mechanisms for How to Improve and Accelerate Detection Rule Development using CI/CD.
detectionci-cdimprove+3
Main Stage·42 min
Aviad Hahami
Reconstructs the multi-stage CI/CD supply chain compromise of the popular tj-actions GitHub Action, detailing secret exfiltration and attacker tradecraft.
supply-chaingithub-actionsci-cd+2
Microsoft Security Response Center (MSRC)·30 min
Analysts investigate attack surfaces and defenses concerning BlueHat Asia: Exploiting the pipeline: Real-world CI/CD vulnerabilities and how to secure them.
vulnerabilitiesci-cdasia+2
nullcon·44 min
Engineers explore architecture and security mechanisms for Goa 2023 | Securing CI/CD Pipelines: Exploring Vulnerabilities In Workflows by Siddharth.
vulnerabilitiesci-cdpipeline+1
OWASP Foundation·26 min
AppSecUSA 2018 analyzes A new framework to automate MSTG and MASVS in your CI/CD pipeline.
ci-cdframeworkautomate+2
OWASP Foundation·49 min
Bobby Lin
Bobby Lin analyzes Enhancing CI/CD Secrets Security: The 3Rs Approach.
ci-cdenhancingapproach+1
OWASP Foundation·48 min
Matt Tesauro
Analysts investigate attack surfaces and defenses concerning Matt Tesauro - AppSec++ Take the best of Agile, DevOps and CI/CD into your AppSec Program.
ci-cddevopsagile
OWASP Foundation·28 min
D. Cornell
D. Cornell investigates OWASP Standard Classification: Threat Modeling the CI/CD Pipeline to Improve Softwar....
owaspthreat-modelingci-cd
PROIDEA Events·33 min
Engineers explore architecture and security mechanisms for 4Dev Live 2021: Karol Horosin - CI/CD and tooling for standard Python projects.
pythonci-cdtooling
PROIDEA Events·24 min
Security researchers examine technical aspects of Atmosphere 2016 - CI/CD: How I Learned to Stop Worrying and Love the Bomb(Waldemar Piszczewiat).
ci-cdatmospherelearned+2
PROIDEA Events·25 min
Ádám Sándor
Presenters detail vulnerability discovery and exploitation in DevOpsDays Krakow 2020 - Ádám Sándor - How GitOps Changes Everything in CI/CD.
ci-cddevopsdaykrakow+2
PROIDEA Events·38 min
Victoria Almazova
Presenters detail vulnerability discovery and exploitation in DevOpsDays Warsaw 2019 - Victoria Almazova - Best practices for securing CI/CD pipeline.
ci-cdbest-practicesdevopsday+2
PROIDEA Events·33 min
Paweł Piwosz
Security researchers examine technical aspects of DevOpsDays Warsaw 2022 - Paweł Piwosz - Plan CI/CD on the Enterprise level!.
ci-cddevopsdaywarsaw+2
PROIDEA Events·38 min
Juliusz Marciniak
Juliusz Marciniak explores JDD 2024: Forteca Java: Wielopoziomowe Bezpieczeństwo od Architektury po CI/CD.
ci-cdfortecajava+2
SEC-T·44 min
Analysts investigate attack surfaces and defenses concerning 0x12: Jesper Larsson - The CI/CD Escape Room - Eleven doors, zero exploits.
ci-cdjesperlarsson+2
Security BSides San Francisco·26 min
Atul Gaikwad
Discusses BSidesSF 2020 - Mistakes Made Integrating Security Scanning into CI/CD (Atul G • Moses S) and evaluates key implications for security practitioners.
scanningci-cdbsidessf+1
The Linux Foundation·35 min
Shash Reddy
Outlines (k)Native K8s CI/CD platform and evaluates key implications for security practitioners.
ci-cdk8snative+2
The Linux Foundation·44 min
Agentic Delivery
Details agentic Delivery, Guardrailed: AI in CI/CD & Platform Engineering... Manas Ray & Kalyan Kolachala and evaluates key implications for security practitioners.
ci-cdagenticdelivery+2
The Linux Foundation·20 min
Robert Hafner
Presents bringing CI/CD Practices to Machine Learning with MLOps and evaluates key implications for security practitioners.
machine-learningci-cdbringing+2
The Linux Foundation·39 min
CI/CD, APIs, and Scaling: What Every Cloud Native Developer Needs To Kn... Aditya Soni & Aditi Gupta
Outlines CI/CD, APIs, and Scaling: What Every Cloud Native Developer Needs To Kn... Aditya Soni & Aditi Gupta and evaluates key implications for security practitioners.
ci-cdapiscaling+2