Supply Chain Attacks Courses and Certifications

DevSecCon

Supply Chain Attacks - Focusing on NPM Vulnerabilities and Defenses

Explore NPM ecosystem vulnerabilities, learn to identify and protect against supply chain attacks, and discover strategies to fortify open-source software security.

• YouTube
• 44 minutes
• On-Demand
• Free Video

LASCON

3CX Supply Chain Attack: Lessons Learned

Análisis del ataque de cadena de suministro a 3CX: lecciones aprendidas para prevenir futuros incidentes y fortalecer la seguridad en sistemas VoIP y software empresarial.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Security BSides San Francisco

Attacking and Defending Supply Chains - How We Got Admin in Your Cloud

Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.

• YouTube
• 44 minutes
• On-Demand
• Free Video

OWASP Foundation

XZ Backdoor - Navigating the Complexities of Supply Chain Attacks Detected by Accident

Explore the intricacies of supply chain attacks through the lens of the XZ Backdoor incident, uncovering detection methods and implications for cybersecurity professionals.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Conf42

Supply Chain Attacks: Focusing on NPM Vulnerabilities - DevSecOps 2023

Explore supply chain attacks focusing on NPM, learn defensive strategies, and discover research findings on vulnerabilities in package ecosystems. Gain insights into detection tools and solutions.

• YouTube
• 35 minutes
• On-Demand
• Free Video

SANS

Ghost in Your Supply Chain - APT Attacks on Taiwan's Financial Sector

Explore APT attacks on Taiwan's financial sector, focusing on supply chain vulnerabilities. Learn about MDM platform exploitation, JIRA abuse, and malware-free attacks. Gain insights into island-hopping techniques and comprehensive threat mapping.

• YouTube
• 45 minutes
• On-Demand
• Free Video

DevOops

(Не)стандартный подход к моделированию Supply Chain Attack

Исследуйте методы защиты от Supply Chain атак через практические примеры моделирования угроз и эффективные стратегии предотвращения в сфере Operations Security.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

La Historia Sin Fin: La Backdoor del XZ y el Abuso del GLIBC

Descubre las técnicas avanzadas de la backdoor que atacó sistemas Linux mediante XZ, explorando su infiltración sigilosa y el aprovechamiento de características GLIBC para ejecutar API hooking.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Information Security Course (English subtitles version)

16 ratings at Udemy

Learn examples of information security incident caused by lack of awareness

• Udemy
• 1 hour 17 minutes
• On-Demand
• Paid Course

Supply Chain Cybersecurity: Preventing Supply Chain Attacks

310 ratings at LinkedIn Learning

Explore security frameworks and practical strategies to prevent supply chain attacks on your organization.

• LinkedIn Learning
• 42 minutes
• On-Demand
• Free Trial Available

Hardening Your Soft Software Supply Chain

This talk will help you gain a better understanding of what you can do for supply chain security for your organization, the projects you depend on, and the projects you maintain.

• Pluralsight
• On-Demand
• Free Trial Available

Hack In The Box Security Conference

Exploitation Techniques and Attacks on Hosting Assets and Access for Resale

Exploration of underground markets for compromised network assets, covering exploitation techniques, lateral movement, monetization, and defender strategies for incident response and security monitoring.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

Two Strategies for Supply Chain Attacks

Explore two supply chain attack strategies by BARIUM APT group, analyzing real-world cases and their tactics. Learn defensive measures against these sophisticated cyber threats.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Hack In The Box Security Conference

TOCTOU Attacks Against Secure Boot and BootGuard

Explore TOCTOU attacks on Intel's BootGuard, learn about vulnerabilities in secure boot processes, and discover open-source tools for testing system security.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Kaspersky

The Evolving Attack Surface

Explore the expanding vulnerabilities in industrial control systems, from traditional security to blockchain, with insights on hardware attacks, supply chain risks, and network hijacking.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk