What I Learnt About Automating Security
Explore automation strategies for comprehensive cybersecurity, covering infrastructure, threat protection, cloud security, and proactive measures to address the growing skills gap in the industry.
What Happens if I Change This URI - Oooooh
Explore broken access control vulnerabilities, their impact, prevention methods, and efficient testing techniques in web applications.
Attacking Through the Software Supply Chain
Comprehensive exploration of software supply chain attacks, featuring real-world examples and practical solutions to minimize vulnerabilities and protect against emerging threats.
Building a Sustainable Security Requirements Process with the ASVS
Learn to integrate security requirements early in development using OWASP ASVS. Discover strategies for buy-in, prioritization, and maintaining a sustainable security process tailored to your organization's needs.
Hacking the Juice Shop
Hands-on guide to setting up and using OWASP Juice Shop for Capture The Flag events. Learn to host your own security awareness competitions and improve hacking skills.
GitHub Actions - Vulnerabilities, Attacks, and Counter-measures
Explore GitHub Actions vulnerabilities, attacks, and countermeasures. Learn about runner risks, potential misuse by attackers, and security measures to protect your CI/CD pipeline.
Lost and Found in Translation - An Intro to ML Assisted Decompilation and Deobfuscation
Explore ML-assisted decompilation and deobfuscation, covering large language models, neural machine translation, and their applications in reverse engineering and security auditing.
Cyber Security vs. Statistics - Fighting False Positives to Automate Your Security Operations
Strategies for automating security operations by correlating detections and leveraging statistical methods to reduce false positives and enhance incident response effectiveness.
NOPASSWD - Building a Passwordless Cloud Infrastructure
Explore passwordless infrastructure for enhanced security. Learn FIDO standards, design options, and implementation strategies. Discover how to improve your team's security posture regardless of size.
Introducing the OWASP Top 10 for Kubernetes
Explore Kubernetes security risks, including workload configurations, supply chain vulnerabilities, and RBAC issues. Learn mitigation strategies and best practices for securing containerized infrastructure.
Return Oriented Programming, an Introduction
Explore Return Oriented Programming (ROP) exploitation technique, its mechanics, and practical examples for executing code in non-executable stack contexts.
Turbo Eureka
Exploring how Stacc extended DevOps principles to achieve ISO27001 certification, merging security, regulations, and compliance into an engaging project for financial software development.
The Insecurity of OAuth 2.0 in Frontends
Explore XSS threats in OAuth 2.0 frontends, assess real-world attacker capabilities, and learn effective defense strategies for securing your applications against advanced attacks.
Securing Your .NET Application Software Supply-Chain
Hands-on guide to securing .NET application supply chains, covering source code access, third-party libraries, build servers, and implementing SLSA guidance and SBOM concepts.
You Shall Not Password - Modern Authentication for Web Apps
Explore modern web authentication methods beyond passwords, including SSO, 2FA, OAuth, and more. Learn their benefits, limitations, and how to enhance user security in web applications.
OAuth and Proof of Possession - The Long Way Round
Explore OAuth's evolution, focusing on proof of possession mechanisms, token binding, and mutual TLS. Learn about industry developments and practical implementations for enhanced security.
Security Tooling in Your DevOps Pipeline
Explore strategies for integrating security tools and automation into CI/CD pipelines, including vulnerability scanning, static analysis, and dynamic testing to enhance DevOps agility.
Keep Your Nose Out of It - Denying Yourself Access to Production
Explore secure practices for managing production environments without direct access, ensuring data privacy and system integrity while maintaining agility and release efficiency.
Measuring DevSecOps - Building Metrics to Understand Effectiveness and Success
Explore essential DevSecOps metrics, learn to track and visualize security KPIs, and discover how to measure effectiveness in your development pipeline using Azure DevOps and supportive tools.
From DevOps to DevSecOps
Explore how Threat Modeling can transform DevOps into DevSecOps, enhancing security, documentation, and team engagement in engineering projects from the start.
Reducing Third-Party Security Risk in .NET Core Applications
Explore strategies to mitigate security risks from third-party dependencies in .NET Core, including compartmentalization and API review, to enhance application safety and reduce vulnerabilities.