Rethinking CI/CD Security in the Age of GitHub Actions
Three real attacks that used GitHub workflows as a route to breach, and three fixes that work within GitHub. Presented with Max Saltonstall.
View talk →Recent Talks
Rethinking Vulnerability Backlogs: When CVSS Scores Don't Match Reality
Why CVSS scores alone often don't reflect real risk, and how to rethink prioritization of an ever-growing vulnerability backlog.
View talk →When the Supply Chain Hits a Sour Note
Real supply chain attacks, how to respond under pressure across teams, and preventive measures that limit damage.
View talk →Posts
Applying Football's Defense in Depth Principles to Application Security
Breaking down football to teach application security concepts.
Read more →More Than One Path: Exploring Alternative Technical Careers
A guide to lesser-known but highly technical roles in the tech world, and how they can open unexpected doors in your career.
Read more →A Quick Introduction
Sharing my journey, goals, and what you can expect here.
Read more →