Cloud security & platform engineering topics

Conference talks and case studies spanning cloud security, Kubernetes security, software supply chains, and incident response.

Cloud security talks and case studies covering AWS, CNAPP, posture management, risk prioritization, detection, and runtime protection.

CloudNativeCon sessions on building and protecting cloud-native systems with open standards and CNCF tooling.

KubeCon talks on Kubernetes, SLSA, artifact integrity, policy enforcement, and cloud-native supply chain security.

Hands-on guidance for SLSA, Sigstore and Cosign, build provenance, attestations, admission policy, and secure CI/CD.

Real-world Wiz and CNAPP lessons for cloud visibility, contextual risk prioritization, shift-left security, and runtime detection.

AWS cloud security talks covering posture management, runtime protection, detection, and practical controls for production environments.

Sessions presented at AWS Summit, with field-tested lessons for securing cloud infrastructure from code through runtime.

Practical approaches to cloud and software compliance that turn policy requirements into repeatable engineering controls.

Infrastructure security lessons from protecting cloud systems and digital-asset products in a highly targeted industry.

JavaScript ecosystem security, including dependency risk, npm compromise patterns, and safer package delivery pipelines.

Public talks and case studies about cloud security, platform reliability, and developer security practices at Ledger.

Analysis of npm supply chain attacks and practical guidance for trusted publishing, lockfiles, tokens, and dependency monitoring.

OWASP community sessions focused on current application-security incidents and controls engineering teams can apply.

Security incident analysis showing how phishing can compromise maintainers, packages, CI/CD credentials, and downstream users.

Research and talks on dependency compromise, artifact trust, package ecosystems, and end-to-end software supply chain defense.