Hybrid Cloud and Multi-Cluster Service Connectivity
Explore cloud-agnostic solutions for connecting Kubernetes clusters across hybrid environments, enabling service discovery, security, and inter-cluster communication for enhanced multi-cloud deployments.
Cloud Impact on Enterprise Security - Hack the Cloud, Hack the Company
Explore how cloud services can be exploited in enterprise security breaches. Learn penetration testing methods and real-world attack scenarios to better protect your organization's critical systems and data.
Game of Hacks - The Mother of All Honeypots
Explore real-time hacker adaptations to web app security measures through an interactive honeypot experiment. Learn valuable insights for strengthening enterprise applications against evolving threats.
Storing Secrets in the Cloud and Data Center: Strategies and Tools
Explore strategies for securely storing and managing credentials in cloud and data center environments, covering tools, technologies, and best practices for developers and operational teams.
Ad Hoc Mutable Infrastructure for Security Management - Cloud Service Security
Explore ad hoc mutable infrastructure for enhanced cloud security management, focusing on active directory identity management and automated threat mitigation techniques.
Legacy Java Vulnerabilities - Ignore at Your Own Risk
Explore legacy Java vulnerabilities, their persistence, and mitigation strategies. Learn about security risks, update challenges, and alternative approaches for protecting enterprise applications.
Going Bananas for Cloud Security - Auditing AWS Deployments with Security Monkey
Explore AWS security auditing with security_monkey, a tool for tracking changes, auditing configurations, and understanding interconnectivity across AWS accounts. Learn cloud security best practices and efficient monitoring techniques.
Collective Detection of Harmful Requests
Explore collective detection techniques for identifying harmful web requests, enhancing application security through shared threat intelligence and collaborative defense strategies.
WebRTC Security - How Secure Is P2P Browser Communication?
Explore the security implications of peer-to-peer browser communication through WebRTC, examining potential vulnerabilities and best practices for secure implementation.
Security and Insecurity of HTTP Headers
Explore HTTP header security and vulnerabilities with Dirk Wetter. Learn about potential risks and best practices for implementing secure headers in web applications.
Client-side Security with the Security Header Injection Module (SHIM)
Learn about client-side security headers and a new open-source tool for ASP.NET to mitigate vulnerabilities by setting security headers in web applications.
Top 10 Security Best Practices for Securing Microservices
Comprehensive guide to securing microservices, covering TLS, authentication, authorization, DDoS protection, monitoring, encryption, and more. Essential for developers and architects building scalable, secure APIs.
Fixing Mobile Application Security - OWASP Mobile Security Testing Guide
Introduction to OWASP Mobile Security Testing Guide and Mobile Application Security Verification Standard, addressing challenges in mobile app security testing and best practices for secure development.
Fixing Mobile Application Security - The OWASP Mobile Project
Explore OWASP's Mobile Application Verification Standard and Security Testing Guide, addressing key mobile app security challenges and best practices for secure data storage, communication, and API usage.
Needle: Finding Issues within iOS Applications
Discover Needle, an open-source framework for streamlined iOS app security assessments. Learn about its modular architecture, capabilities, and how it simplifies vulnerability detection in iOS applications.
Dynamic Security Group Recommendations with Grouper and Dredge
Explore Netflix's innovative approach to AWS security group management using Grouper and Dredge, enhancing developer insights and ensuring least privilege network access.
Collaborative Project Updates: ODP, CNCF, OpenSwitch and CII
Collaborative project updates on ODP, CNCF, OpenSwitch, and CII, featuring insights from industry leaders on open-source initiatives, cloud computing, and infrastructure security advancements.
HTTP Desync Attacks - Smashing Into The Cell Next Door
Explore HTTP desync attacks and their impact on web security, learning techniques to exploit vulnerabilities and breach neighboring systems.
Attacking AWS: The Full Cyber Kill Chain
Comprehensive exploration of AWS vulnerabilities and attack strategies, covering the entire cyber kill chain for enhanced cloud security awareness.
NOSQL Web Application Vulnerabilities and Mitigation
Explore NOSQL database vulnerabilities, including injection methods and CSRF, and learn mitigation strategies for enhanced security in web applications.
How the Latest MASVS and MSTG Specs Enhance Mobile Penetration Testing
Explore mobile security challenges, attack surfaces, and best practices using OWASP guidelines. Learn to leverage tools and frameworks for effective mobile app security testing and policy development.