InfoQ Homepage Security Content on InfoQ
-
Startup Software Architecture - You Never Really Throw it Away: a Conversation with David Gudeman
In this podcast, Michael Stiefel spoke with David Gudeman about software architecture for startups. The discussion starts by illuminating how to make decisions with imperfect information, and how uncertainty and ambiguity flow through all aspects of developing the architecture. This leads to analyzing how the architect must focus on both product strategy and technical decisions.
-
GenAI Security: Defending Against Deepfakes and Automated Social Engineering
In this episode, QCon AI New York 2025 Chair Wes Reisz speaks with Reken CEO and Google Trust & Safety founder Shuman Ghosemajumder about the erosion of digital trust. They explore how deepfakes and automated social engineering are scaling cybercrime and argues defenders must move beyond default trust, utilizing behavioral telemetry and game theory to counter attacks that simulate human behavior.
-
Cloud Security Challenges in the AI Era - How Running Containers and Inference Weaken Your System
Marina Moore, a security researcher and the co-chair of the security and compliance TAG of CNCF, shares her concerns about the security vulnerabilities of containers. She explains where the issues originate, providing solutions and discussing alternative routes to using micro-VMs rather than containers. Additionally, she highlights the risks associated with AI inference.
-
The Hidden Vulnerability of the Open Source Software Supply Chain: the Underlying Infrastructure
Software supply chain veteran Brian Fox unpacks the security implications of the new EU Cyber Resilience Act and its profound impact on open-source projects. He reveals the hidden infrastructure risks threatening open-source projects and shares insights for senior software leaders navigating this regulatory landscape.
-
Is WebAssembly the Secure, Efficient Alternative Everybody was Waiting for?
Laurent Doguin and Geoffroy Couprie discuss their pioneering work with Wasm on the infrastructure side. They walk us through the benefits and challenges of building a platform over WebAssembly and why it’s the safer alternative to containers.
-
Investing in Open Source: The Open Source Pledge and Why it Matters
In this podcast, Shane Hastie, Lead Editor for Culture & Methods, spoke to Chad Whitacre about the Open Source Pledge, an initiative to encourage companies to financially support open-source maintainers to ensure the sustainability and security of the software they depend on. The goal is to address the social contract within open source, where companies benefit from freely available software.
-
Spies, Lies, and Cybercrime: Insider Perspectives from a Former FBI Agent
In this podcast Shane Hastie, Lead Editor for Culture & Methods spoke to Former FBI Operative Eric O’Neill about the growing threat of cyberattacks, cyber espionage and cybercrime, and how organizations and individuals can "think like a spy hunter" to better protect themselves.
-
The Ongoing Challenges of DevSecOps Transformation and Improving Developer Experience
In this podcast Shane Hastie, Lead Editor for Culture & Methods, spoke to Adam Kentosh about the ongoing challenges organisations face in their DevOps, DevSecOps and digital transformation journeys.
-
Crisis Management, Black Swans and Resilience
In this podcast Shane Hastie, Lead Editor for Culture & Methods spoke to Sharon Robson about crisis management and business resilience, particularly in the context of technology and software supply chains.
-
Data Privacy, Retention and Security Challenges and Opportunities
In this podcast Shane Hastie, Lead Editor for Culture & Methods spoke to Shiva Nathan about data security, privacy, retention and enabling a security mindset in development.