A Stratagem on Strategy - Rolling Testing into Product Testing
Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.
The State of 0-Day in-the-Wild Exploitation
Comprehensive analysis of 0-day exploits from 2020, offering insights on vulnerabilities, exploitation methods, and strategies to enhance cybersecurity and protect users from unknown threats.
How to Become an OpenStreetMap Pro
Enhance your OpenStreetMap skills with advanced tools, techniques, and ecosystem knowledge. Learn from years of mapping experience and improve your contributions.
Pen Testing for Humans
Learn essential penetration testing techniques, focusing on human vulnerabilities and social engineering in cybersecurity. Explore real-world scenarios and strategies to strengthen organizational security.
Making Invisible Things Visible - Tracking Down Known Vulnerabilities
Insights on software supply chain practices, revealing vulnerabilities in open source components and strategies for improving application security in high-performance development organizations.
A DevOps View of AppSec
Explore DevOps history and its impact on AppSec, charting a path for DevSecOps success through standardization, automation, and Agile principles.
No More Monkey Business - Quality Assurance in Penetration Testing
Explore quality assurance in penetration testing, addressing declining standards and providing guidance for improving security assessment practices and maintaining excellence in the field.
Security Vulnerabilities Decomposition - Another Way to Look at Vulnerabilities
Explore security vulnerabilities decomposition, focusing on SQL injection, secure data handling, and design patterns for payment gateways and single sign-on. Learn practical security controls for secure development.
Autonomous Testing and the Future of Software Development
Explore the evolution of software testing, from manual to automated to autonomous, and its impact on development practices and quality assurance.
Ask the Expert - Microsoft Dynamics 365 Supply Chain Management for Distribution
Explore agile supply chain management with Microsoft Dynamics 365, featuring mobile scanning, IoT intelligence, machine learning, and mixed reality for enhanced distribution and manufacturing efficiency.
Browser Testing with Docker
Discover how to set up and manage a Selenium Grid using Docker for efficient browser testing, overcoming common challenges and optimizing your integration testing workflow.
Final Fantasy VII Remake - Automating Quality Assurance and the Tools for the Future
Explore Square Enix's innovative replay system for Final Fantasy VII Remake, revolutionizing game QA with automation and cost-effective tools for future projects.
Horizon Zero Dawn - A QA Open World Case Study
Explore Guerrilla Games' QA strategies for Horizon Zero Dawn, including test automation, team management, and overcoming challenges in open-world game development.
Cyber Insurance - What Makes a Good Fit for You
Explore cybersecurity insurance essentials, including policy components, data elements for risk assessment, and key security controls. Learn to determine appropriate coverage and understand industry standards.
Measuring and Optimizing Tail Latency
Explore techniques for measuring and optimizing tail latency in data centers, focusing on innovative tools, methodologies, and approaches to enhance server efficiency and user experience.
Scaling Validation and Quality of Streaming Data Products at Twitter
Explore Twitter's data quality engineering, focusing on scaling validation, stress testing, and innovative tools for maintaining high-quality streaming data products in a distributed architecture.
TDD and the Terminator - An Introduction to Test Driven Development
Explore Test Driven Development through reprogramming a Terminator, covering SOLID principles, architecture, and practical examples to create maintainable applications.
MitM Attack by Name Collision - Cause Analysis and Vulnerability Assessment in the New gTLD Era
Explore MitM attacks via name collision, analyzing causes and vulnerabilities in the new gTLD era. Learn about WPAD query leakage, attack surface characterization, and potential remediation strategies.
All of Our ML Ideas Are Bad - and We Should Feel Bad
Explores limitations of Machine Learning in production engineering, debunking common misconceptions and discussing potential feasible applications for SREs.
Operation SemiChimera
Análisis detallado de ataques APT a la industria de semiconductores en Taiwán, enfocándose en Operation SemiChimera. Explora técnicas, tácticas y motivaciones de los atacantes, ofreciendo insights para mejorar la ciberseguridad del sector.
From Cockroaches to Marble Floors - What Happens When You Turn On the Lights?
Practical tools and methodologies to transform software security posture by eliminating false distinctions between security bugs and other defects, improving product quality and aligning teams.