Supply Chain Attacks Courses and Certifications

LASCON

3CX Supply Chain Attack: Lessons Learned

Análisis del ataque de cadena de suministro a 3CX: lecciones aprendidas para prevenir futuros incidentes y fortalecer la seguridad en sistemas VoIP y software empresarial.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Security BSides San Francisco

Attacking and Defending Supply Chains - How We Got Admin in Your Cloud

Explore software supply chain vulnerabilities leading to secrets exfiltration and privilege escalation, with best practices for securing reference architectures and production environments.

• YouTube
• 44 minutes
• On-Demand
• Free Video

OWASP Foundation

XZ Backdoor - Navigating the Complexities of Supply Chain Attacks Detected by Accident

Explore the intricacies of supply chain attacks through the lens of the XZ Backdoor incident, uncovering detection methods and implications for cybersecurity professionals.

• YouTube
• 42 minutes
• On-Demand
• Free Video

DevSecCon

Supply Chain Attacks - Focusing on NPM Vulnerabilities and Defenses

Explore NPM ecosystem vulnerabilities, learn to identify and protect against supply chain attacks, and discover strategies to fortify open-source software security.

• YouTube
• 44 minutes
• On-Demand
• Free Video

SANS

Ghost in Your Supply Chain - APT Attacks on Taiwan's Financial Sector

Explore APT attacks on Taiwan's financial sector, focusing on supply chain vulnerabilities. Learn about MDM platform exploitation, JIRA abuse, and malware-free attacks. Gain insights into island-hopping techniques and comprehensive threat mapping.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Conf42

Supply Chain Attacks: Focusing on NPM Vulnerabilities - DevSecOps 2023

Explore supply chain attacks focusing on NPM, learn defensive strategies, and discover research findings on vulnerabilities in package ecosystems. Gain insights into detection tools and solutions.

• YouTube
• 35 minutes
• On-Demand
• Free Video

DevOops

(Не)стандартный подход к моделированию Supply Chain Attack

Исследуйте методы защиты от Supply Chain атак через практические примеры моделирования угроз и эффективные стратегии предотвращения в сфере Operations Security.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Supply Chain Cybersecurity: Preventing Supply Chain Attacks

310 ratings at LinkedIn Learning

Explore security frameworks and practical strategies to prevent supply chain attacks on your organization.

• LinkedIn Learning
• 42 minutes
• On-Demand
• Free Trial Available

Hardening Your Soft Software Supply Chain

This talk will help you gain a better understanding of what you can do for supply chain security for your organization, the projects you depend on, and the projects you maintain.

• Pluralsight
• On-Demand
• Free Trial Available

Enterprise Linux Security

Explore Linux-specific security topics for enterprises through episodes covering vulnerabilities, attack vectors, migrations, supply chain attacks, and more, enhancing your cybersecurity knowledge.

• YouTube
• 20 hours
• On-Demand
• Free Video

nullcon

I Boot when U-Boot

Explore a custom bootkit for U-Boot devices, its persistence techniques, and implications for IoT security. Learn about backdooring methods and potential countermeasures.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Snyk

Stranger Danger - Your JavaScript Attack Surface Just Got Bigger

Hands-on JavaScript and cloud native live-hacking session demonstrating common threats, vulnerabilities, and misconfigurations in modern application development, with actionable remediation and best practices for each exploit.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Black Hat

Practical Approach to Automate the Discovery and Eradication of Open-Source Software Vulnerabilities

Discover and eradicate open-source vulnerabilities in web applications at scale. Learn Netflix's pragmatic approach to identifying risks, triaging vulnerabilities, and implementing effective remediation strategies.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

RSA Conference

What Was Once Old Is New Again - Domain Squatting in 2020

Modernized domain squatting techniques for OSINT gathering and weaponized document delivery, exploring corporate relationships, supply chain mapping, and advanced spear-phishing attacks.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

RSA Conference

Mitigating Russian State-Sponsored Cyber Threats to US Critical Infrastructure

Explore Russian state-sponsored cyber threats to US critical infrastructure, learn mitigation strategies, and understand FBI resources for enhancing cybersecurity preparedness.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk