Security Journey's hi/5

✓

Tuntutan

Masukkan bar carian ini ke laman web anda

CARI EPISOD LEPAS

Cari episod lepas bagi Security Journey's hi/5.

EPISOD SEBELUMNYA 🔗

Implementation of DevSevOps, Product Security Leads, GO Mitigations, and more

9 Jun 2022

3 Cultural Obstacles to Successful DevSecOps ImplementationWhen our goal is to change security culture we must consider how to influence our developers while still caring for their needs. This article shares helpful insight into implementing successful security culture change within an organizat ...

00:02:35

Hi/5: Automated Threat Modeling; In depth research; GitHub 99 designs/aws-vault; Nginx

26 Mei 2022

1. An Analysis of Open-source Automated Threat Modeling Tools and Their Extensibility from Security into Privacy-https://www.usenix.org/publications/l...We conducted our review of threat modeling tools in three main phases: Tool Discovery, Evaluation Criteria Selection, and Application of Evalua ...

00:02:49

Internal Secrets; SHA-256; 28,000 Vulnerabilities disclosed in 2021; Threat Modeling.

12 Mei 2022

1. Is it safe to use SECRETS_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED?- https://datasociety.net/wp-content/up...This first story is a react development issue. A developer was asking if a specific property was safe to use. This shows the importance of naming in understanding the security risks w ...

00:02:49

Terraform, CI/CD, Bug Bounties and more

28 Apr 2022

Bounty EverythingThis ebook has in-depth explanations of how bug bounties work, how the economy works within the bug bounty, and how the researchers are paid and treated.Understanding Website SQL InjectionsA high-level deep dive into SQL injection, so even those that have no understanding of wha ...

00:02:39

Python Repos, Advanced SQL, NPM corruption, and more

12 Apr 2022

5% of 666 Python repos had comma typos (including Tensorflow, PyTorch, Sentry, and V8)Out of a group of GitHub repositories that had been checked, 5% had a comma problem. Either too few or too many commas somewhere in the library. Advanced SQL Injection Cheatsheet This repository contains an a ...

00:02:32

XSS, Cybersecurity Management, OWASP Top Ten review, Web3 and more

5 Apr 2022

1.Fuzzing for XSS via nested parsers condition-https://swarm.ptsecurity.com/fuzzing-...In this article web application security researcher, Igor Sak-Sakovskiy reveals a novel technique for finding sanitization issues that could lead to XSS attacks. 2.Anti-Patterns in Cybersecurity Management-htt ...

00:03:03

ZAPping, AWS, and DevSecOps! Oh My!

17 Mar 2022

ZAPping the OWASP Top 10 This document gives an overview of the automation and manual components provided by OWASP Zed Attack Proxy (ZAP) that are recommended for testing each of the OWASP Top Ten Project 2021 risks. AWS Is the Internet's Biggest Single Point of Failure In December, seve ...

00:03:31

Container Security, Securing our Software Future, Threat Modeling Medical Devices and more

2 Mar 2022

Exploring Container Security: A Storage Vulnerability Deep Dive - https://security.googleblog.com/2021/...Recently, the GKE Security team discovered a high severity vulnerability that allowed workloads to have access to parts of the host file system outside the boundaries of the mounted volume. ...

00:03:06

Exact Dependencies, Insecure Design, How To Learn Stuff Quickly and more

17 Feb 2022

How to Learn Stuff Quickly: https://www.joshwcomeau.com/blog/how-...Learning how to learn is a crucial skill of the security professional and developerNever Update Anything: https://blog.kronis.dev/articles/neve..."In my eyes, it could be pretty nice to have a framework version that's ...

00:03:06