DEVSECOPS Talks #53 - Open Software Supply Chain Attack Reference Framework with Neatsun

The DevSecOps Talks Podcast

Player FM - Internet Radio Done Right

16 subscribers

הוסף לפני four שנים

תוכן מסופק על ידי Mattias Hemmingsson, Julien Bisconti and Andrey Devyatkin, Mattias Hemmingsson, Julien Bisconti, and Andrey Devyatkin. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Mattias Hemmingsson, Julien Bisconti and Andrey Devyatkin, Mattias Hemmingsson, Julien Bisconti, and Andrey Devyatkin או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

Most Innovative Companies

1
Sweetgreen's CEO explains why his salads are so expensive 1:12:26

לפני 15 ימים1:12:26

הפעל מאוחר יותר

רשימות

לייק

אהבתי

1:12:26

On today's episode, co-hosts Yasmin Gagne and Josh Christensen discuss the latest news in the world of business and innovation, including Apple’s newest product announcements at WWDC, Warner Bros. Discovery’s split back into two companies, and the U.S. and China meeting in London to discuss trade talks. (00:45) Next, since its inception in 2008, NPR's Tiny Desk Concerts have become a staple on YouTube with over 11 million subscribers. Josh and Yaz speak with Fast Company associate editor David Salazar about the lasting influence, favorite acts, and future programming of Tiny Desk Concerts. (08:43) Finally, Yaz and Josh interview Sweetgreen CEO Jonathan Neman about the company's new menu items, advancements in culinary technology like Infinite Kitchens, and the removal of seed oils from their food preparation process. (31:25) For more of the latest business and innovation news, go to https://www.fastcompany.com/news To read David Salazar’s piece on NPR’s Tiny Desk concerts: https://www.fastcompany.com/91337277/npr-tiny-desk-concert-artist-impact…

לפני שנתיים 49:22

MP3•בית הפרקים

We had the opportunity to talk with Neatsun Ziv, one of the founders of Ox Security, about the Open Source Software Supply Chain Attack Reference Framework (https://pbom.dev). We delved deeper into possible attack vectors and explored ways to mitigate some of them. During our discussions, we also had a couple of unusual takes on supply chain security. If you are looking to understand the Open Source Software Supply Chain, then this episode is perfect for you.

Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes or hear from you, our listeners.

80 פרקים

#Tech #Andrey Devyatkin #Julien Bisconti #Mattias Hemmingsson

The DevSecOps Talks Podcast

DEVSECOPS Talks #53 - Open Software Supply Chain Attack Reference Framework with Neatsun

The DevSecOps Talks Podcast

16 subscribers

published לפני שנתיים

שתפו

MP3•בית הפרקים

Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes or hear from you, our listeners.

80 פרקים

#Tech #Andrey Devyatkin #Julien Bisconti #Mattias Hemmingsson

Alle afleveringen

The DevSecOps Talks Podcast

1
#80 - Understanding Passkeys: Benefits And Limitations 36:55

לפני 5 weeks36:55

36:55

Passkeys are gaining attention as a new way to log in without passwords. How do they work, and how do they compare to traditional multi-factor authentication (MFA)? In this episode, we explore the history of passwords, the strengths and weaknesses of common MFA methods, and the potential of passkeys to enhance security. What threats do passkeys mitigate, and what still remain? Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#79 - Going Local: What’S Driving The Move? 20:31

לפני 9 weeks20:31

20:31

Andrey, Paulina, and Mattias kick off a miniseries on European infrastructure. We talk about infrastructure providers' options across Europe, ask what really drives the move away from hyperscalers, and wonder whether the trade-offs make sense for most teams. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#78 - Building AI Tools For IaC Compliance 41:12

לפני 11 weeks41:12

41:12

In this guest episode, we chat with Davlet Dzhakishev, co-founder of Cloudgeni, who’s working on an AI-powered approach to fixing compliance issues in IaC. What’s the state of tools in this space? Where does his idea fit in? And how should we think about the relationship between compliance and security? Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#77 - Chaos Engineering Explained: Part 2 34:30

לפני 13 weeks34:30

34:30

Part two of our chaos engineering series is here! Join Andrey, Mattias, and Paulina as they talk through practical strategies for chaos engineering. Who should do it? How can you start? And what are the essential prerequisites? Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#76 - Chaos Engineering Explained: Part 1 26:29

לפני 15 weeks26:29

26:29

Chaos engineering—is it really chaos, or something more structured? Andrey, Paulina, and Mattias talk about what chaos engineering means, how it started, and why you might already be using it unintentionally. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#75 - Learning from the Crisis: Post-Incident Actions 24:18

לפני 17 weeks24:18

24:18

This is the final episode of our three-part series on incident response. We focus on what happens after the dust settles. How do you learn from what went wrong and avoid repeating it? Tune in to hear our top recommendations. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#74 - From Preparation To Execution: Handling An Active Incident 27:50

לפני 20 weeks27:50

27:50

What keeps an incident from spiraling out of control? How can you organize your team on the spot? We continue our series on incident response, moving from preparation to real-time actions. Mattias shares key points from his course. Listen to learn how we handle incidents step by step. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#73 - Incident Response: Key Preparations You Need 38:23

לפני 22 weeks38:23

38:23

Incident response can be complex, but where do you start? Andrey, Mattias, and Paulina dive into the preparation steps you need to take. Mattias shares his expertise from teaching an incident response course. What’s their top recommendation? Listen and find out! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#72 - AWS Resource Control Policies (RCPs) 21:25

לפני 23 weeks21:25

21:25

We are looking into recently announced AWS Resource Control Policies. What are they? How are they different from Service Control Policies? What is a Data Perimeter? Tune in to find out! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#71 - Unpacking The Dora Accelerate State Of Devops Report 40:49

לפני 27 weeks40:49

40:49

In this episode, Andrey, Mattias, and Paulina break down the new DORA Accelerate State of DevOps report. What’s changed since the last report? What do these insights mean for your team? Tune in for our insightful conversation! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#70 - System Initiative Goes Ga 40:26

לפני 30 weeks40:26

40:26

Andrey, Mattias, and Paulina are joined by Paul Stack, an IaC tools developer and a frequent guest on the show. He’s back to discuss the general availability of System Initiative and share what has changed since his last visit when they talked about the early beta of the tool. Will this be a revolution or evolution in Infrastructure as Code tooling? Do we really need collaborative infrastructure management tools? Tune in to find out! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#69 - Who Is Paulina? 42:16

לפני 33 weeks42:16

42:16

Join Andrey and Mattias as they sit down with Paulina Dubas, an independent DevOps consultant and public speaker. Who is Paulina, and what experiences does she bring to the table? What topics particularly resonate with her? Tune in to learn more about Paulina since we have a feeling that she is here to stay Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#68 - Julien’s Last Episode? 27:16

לפני 36 weeks27:16

27:16

Julien shares big news with co-hosts Mattias and Andrey. What led to his decision to step down? And what does the future hold for him? Tune in for the off-boarding interview as we look back at the past four years and 60+ episodes we did together! Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#67 - Building MVP On AWS 29:53

לפני 38 weeks29:53

29:53

Join Andrey, Julien, and Mattias in this episode of DevSecOps Talks as they delve into building Minimum Viable Products (MVPs) and selecting the best solutions for them. Andrey goes first and, as an AWS consultant, kicks off the discussion by outlining his preferred AWS services for MVP development. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

The DevSecOps Talks Podcast

1
#66 - Multi-Account Strategy And Landing Zones: Account Segmentation Approaches For Security And Efficiency On AWS 58:14

לפני 1 year58:14

58:14

In this episode of DevSecOps Talks, co-hosts Andrey, Julien, and Mattias are joined by AWS Consultant Fernando Gonçalves to explore the complexities of AWS organization and account segmentation. Get insights into the debate over development, stage, and production accounts versus micro-segmentation. Don’t miss Julien's take on why he believes staging is a waste of time and money, as well as Fernando’s explanation of what the AWS Landing Zone is. Learn about the tools provided by AWS for multi-account management and the pros and cons of various account segmentation approaches. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.…

ברוכים הבאים אל Player FM!

Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.

תקשיבו ל-500+ נושאים

16 subscribers

דומה לThe DevSecOps Talks Podcast

Amazon Basics Multipurpose Copy Printer Paper, 8.5 x 11 inches, 20 lb, 1 Ream, 500 Sheets, 92 Bright, White

Amazon eGift Card - Bright Balloons (Animated)

EcoNour Patented Design for Car Windshield Sun Shade | Blocks 99% Heat and Keep Interior Cool | Fits Cars, SUV, Truck | Automotive Sun Screen,Visor and Summer Vehicle Accessories | Medium (64x32)

פודקאסטים ששווה להאזין

The DevSecOps Talks Podcast « » DEVSECOPS Talks #53 - Open Software Supply Chain Attack Reference Framework with Neatsun

DEVSECOPS Talks #53 - Open Software Supply Chain Attack Reference Framework with Neatsun

פודקאסטים ששווה להאזין

ברוכים הבאים אל Player FM!

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Amazon eGift Card - Amazon Logo (Animated)

Earth Rated Poop Bags for Dogs, Guaranteed Leak Proof and Extra Thick Waste Bag Refill Rolls, Lavender Scented, 270 Count

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

דומה לThe DevSecOps Talks Podcast

מדריך עזר מהיר

The DevSecOps Talks Podcast « »
DEVSECOPS Talks #53 - Open Software Supply Chain Attack Reference Framework with Neatsun