The Top 10 CI/CD Security Risks and CI/CD Goat – Daniel Krivelevich – ASW #220
Cider Security’s recently published research of the Top 10 CI/CD Security Risks acts to identify vulnerabilities to help defenders focus on areas to secure their CI/CD ecosystem. They created a free learning tool with a deliberately vulnerable environment to demonstrate these flaws -- “CI/CD Goat”. Like similar tools, this helps appsec and devops teams gain a better understanding of major CI/CD security risks and, importantly, their appropriate countermeasures.
Segment Resources:
Announcements
Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.
Guest
Daniel Krivelevich is a veteran cybersecurity industry expert and problem solver with over 13 years of enterprise security experience. He has a proven track record working with 100+ enterprises across multiple industries, with a strong orientation to application and cloud security. Having led application and cloud security at Sygnia for nearly four years, Daniel is passionate about finding and developing the right technologies and processes to secure organizations, with a focus on identifying and protecting ‘crown jewels’ and key assets to stay ahead of the threat landscape.