Collaborate Disseminate
From time to time, I’m getting asked to recommend books, articles, blog posts or conference talks related to AWS lambda security, serverless security, application security, and security testing. I decided to put my list of recommendations in… Continue reading Recommended Reading: Serverless Security, Application Security and Other Serverless Related Topics
Hardware-based Root of Trust, Small Trusted Computing Base, React v16.4.2, GitHub shows best practices for account security and recoverability, and the cost of JavaScript, and Food for Thought! Full Show NotesFollow us on Twitter: https://www.twitter.c… Continue reading Resources, Bugs, Breaches, and Learning Tools – Application Security Weekly #27
An essential part in building an information security (InfoSec) professionals’ expertise is played by hands-on experience and years of activity. However, a solid theoretical foundation is also…
Go on to the site to read the full article
The pos… Continue reading The Top 15 Must-Have Books in InfoSec
Spinners built into games of chance like roulette or tabletop board games stop on a random number after being given a good spin. There is no trick, but they eventually rest because of friction, no matter how hard your siblings wind up for a game-winning turn. What if the spinning continued forever and there was no programming because there was no controller? [Ludic Science] shows us his method of making a perpetual spinner with nothing fancier than a scrapped hard disk drive motor and a transformer. His video can also be seen below the break.
Fair warning: this involves mains …read more
Added to the AMD section of the Meltdown/Spectre resource page, which for administrative reasons has now been moved here. [16th March 2018] Not Meltdown/Spectre, but allegedly similar issues: Richi Jennings for Tech Beacon: AMD CPU PSP holes… Continue reading 16th March 2018 resources updates
Specific Ransomware Families and Types The Register: Cavalry riding to the rescue of DDOS-deluged memcached users – “Attacks tapering, as experts argue over ‘kill switch’” ESET: New DDoS attack method breaks record aga… Continue reading 12th March 2018 resources updates
Specific Ransomware Families and Types Bruce Schneier: New DDoS Reflection-Attack Variant SecurityWeek: Memcached DDoS Attack ‘Kill Switch’ Found ZDnet: Memcached DDoS: This ‘kill switch’ can stop attacks dead in their trac… Continue reading 8th March 2018 resources updates
Updates to Cryptocurrency/Crypto-mining News and Resources ESET: Cryptojacking: the result of the “cryptocurrency rush” Kaspersky: Mining is the new black Commentary from John Leyden for The Register: CryptoLurker hacker crew skulk abo… Continue reading March 5th 2018 resources update
Update to Ransomware Recovery and Prevention For Tripwire, Paul Norris writes about How PCI/DSS Compliance Can Protect Your Systems against New Ransomware Threats. His take on the history of ransomware is a little wobbly, and I’m not su… Continue reading March 5th 2018 resources update
Updates to Specific Ransomware Families and Types: Kieren McCarthy for The Register: It’s begun: ‘First’ IPv6 denial-of-service attack puts IT bods on notice Brian Krebs: Powerful New DDoS Method Adds Extortion “Attack… Continue reading March 3rd 2018 resources update