CloudNativeSecurityCon North America 2024

In this session, attendees will explore new critical threats in the Development Ecosystem, posing security challenges for cloud-native environments. We will focus on how exposed secrets can be hidden in code due to vulnerabilities in source code management platforms, and how to find these exposed secrets before attackers do. Attendees will discover that they know little about secret scanning. The session will delve into discovered flaws, examining Kubernetes secrets and their elusive nature and discussing Shadow IT and how it can expose secrets. Examples will illustrate how attacker vectors have led to major supply chain attacks on popular platforms. Attendees will acquire mitigation strategies and tools, with detailed explanations.