Hacking the Juice Shop
Hands-on guide to setting up and using OWASP Juice Shop for Capture The Flag events. Learn to host your own security awareness competitions and improve hacking skills.
How to Review Code for Security Issues
Learn to identify and prevent common security vulnerabilities during code reviews. Discover eight essential questions to ask and practice spotting issues in a real pull request example.
GitHub Actions - Vulnerabilities, Attacks, and Counter-measures
Explore GitHub Actions vulnerabilities, attacks, and countermeasures. Learn about runner risks, potential misuse by attackers, and security measures to protect your CI/CD pipeline.
Lost and Found in Translation - An Intro to ML Assisted Decompilation and Deobfuscation
Explore ML-assisted decompilation and deobfuscation, covering large language models, neural machine translation, and their applications in reverse engineering and security auditing.
Cyber Security vs. Statistics - Fighting False Positives to Automate Your Security Operations
Strategies for automating security operations by correlating detections and leveraging statistical methods to reduce false positives and enhance incident response effectiveness.
Hyper Speed! When Big Data Blooms
Explore high-speed data processing techniques using Bloom Filters to handle massive volumes of JSON payloads efficiently, as implemented by Report URI for global client telemetry.
NOPASSWD - Building a Passwordless Cloud Infrastructure
Explore passwordless infrastructure for enhanced security. Learn FIDO standards, design options, and implementation strategies. Discover how to improve your team's security posture regardless of size.
Introducing the OWASP Top 10 for Kubernetes
Explore Kubernetes security risks, including workload configurations, supply chain vulnerabilities, and RBAC issues. Learn mitigation strategies and best practices for securing containerized infrastructure.
Return Oriented Programming, an Introduction
Explore Return Oriented Programming (ROP) exploitation technique, its mechanics, and practical examples for executing code in non-executable stack contexts.
Turbo Eureka
Exploring how Stacc extended DevOps principles to achieve ISO27001 certification, merging security, regulations, and compliance into an engaging project for financial software development.
RBAC to the Future - Untangling Authorization in Kubernetes
Explore Kubernetes RBAC: understand its workings, design effective strategies, and implement least privilege configurations for enhanced security and efficient management.
OAuth and the Long Way to Proof of Possession
Explore the evolution of OAuth 2.0's proof of possession, from its omission to current implementation methods. Learn about sender constraining and its importance in modern security practices.
The Insecurity of OAuth 2.0 in Frontends
Explore XSS threats in OAuth 2.0 frontends, assess real-world attacker capabilities, and learn effective defense strategies for securing your applications against advanced attacks.
A Mortal's Guide to Making a Pig Run Faster
Practical techniques for everyday developers to optimize code performance, using real-world examples and exploring the impact of changes on execution speed.
Coding in the Cloud with GitHub Codespaces
Explore GitHub Codespaces: a cloud-based development environment. Learn setup, features, and productivity tips for coding on-the-go or at your desk, enhancing your workflow efficiency.
Securing Your .NET Application Software Supply-Chain
Hands-on guide to securing .NET application supply chains, covering source code access, third-party libraries, build servers, and implementing SLSA guidance and SBOM concepts.
You Shall Not Password - Modern Authentication for Web Apps
Explore modern web authentication methods beyond passwords, including SSO, 2FA, OAuth, and more. Learn their benefits, limitations, and how to enhance user security in web applications.
Mayday! Software Lessons from Aviation Disasters
Explore aviation disaster investigations to gain insights for software engineering. Learn practical methods to enhance safety, scrutiny, and continuous improvement in an increasingly connected world.
OAuth and Proof of Possession - The Long Way Round
Explore OAuth's evolution, focusing on proof of possession mechanisms, token binding, and mutual TLS. Learn about industry developments and practical implementations for enhanced security.
You Keep Using That Word - Asynchronous and Interprocess Comms
Explore the complexities of asynchronous communication in distributed systems, debunking misconceptions and examining various interpretations to enhance understanding of inter-process communication.
Frontend Architectures - The Next Generations
Explore emerging frontend architectures, tools, and patterns like Qwik, Astro, Edge Functions, and Solid.js. Gain insights into their technical workings and practical applications for modern web development.