Tag: Security and privacy
-
Worst nightmare cyberattack: The untold story of the SolarWinds hack
Posted on April 16, 2021, Level beginner Resource Length long
The routine software update may be one of the most familiar and least understood parts of our digital lives. By Dina Temple Raston.
Tags security-and-privacy leadership-and-career software-engineering business-and-emerging-tech cloud-and-infrastructure
-
Malicious PDFs: Revealing the techniques behind the attacks
Posted on April 9, 2021, Level beginner Resource Length medium
Most of us are no strangers to phishing attempts, and over the years we've kept you informed about the latest tricks used by attackers in the epidemic of phishing and spear-phishing campaigns that plague, in particular, email users. This is an older but useful article by Phil Stokes.
Tags security-and-privacy leadership-and-career cloud-and-infrastructure
-
In-depth dive into security features of Intel/Windows platform secure boot process
Posted on April 7, 2021, Level advanced Resource Length long
This blog post is an in-depth dive into the security features of the Intel/Windows platform boot process. In this post I'll explain the startup process through security focused lenses, next post we'll dive into several known attacks and how they were handled by Intel and Microsoft. By Igor Bogdanov.
Tags security-and-privacy leadership-and-career cloud-and-infrastructure miscellaneous software-engineering
-
Study reveals the state of mobile application security
Posted on March 28, 2021, Level beginner Resource Length medium
The Synopsys Cybersecurity Research Center (CyRC) analyzed more than 3,000 popular Android applications to assess the state of mobile app security during the COVID-19 pandemic. By @securitymagazine.com.
Tags security-and-privacy frontend-and-mobile architecture-and-apis cloud-and-infrastructure leadership-and-career product-and-design
-
How to mitigate Low-Code security risks
Posted on March 25, 2021, Level beginner Resource Length long
Gartner predicts that by the end of 2025, over 65% of development projects will use low-code builders. The field of low-code continues to expand. But what security implications does low-code introduce? By Bill Doerrfel.
Tags security-and-privacy cloud-and-infrastructure leadership-and-career software-engineering architecture-and-apis devops-and-ci-cd
-
Browser attack allows tracking users online with JavaScript disabled
Posted on March 11, 2021, Level beginner Resource Length short
Researchers have discovered a new side-channel that they say can be reliably exploited to leak information from web browsers that could then be leveraged to track users even when JavaScript is completely disabled. By Ravie Lakshmanan.
Tags security-and-privacy frontend-and-mobile miscellaneous
-
How to build a serverless real-time credit card fraud detection solution
Posted on March 7, 2021, Level intermediate Resource Length medium
As businesses continue to shift toward online credit card payments, there is a rising need to have an effective fraud detection solution capable of real-time, actionable alerts. By Polong Lin and Pavan Kattamuri.
Tags architecture-and-apis cloud-and-infrastructure security-and-privacy
-
How to protect sensitive data for its entire lifecycle in AWS
Posted on February 28, 2021, Level intermediate Resource Length long
Many Amazon Web Services (AWS) customer workflows require ingesting sensitive and regulated data such as Payments Card Industry (PCI) data, personally identifiable information (PII), and protected health information (PHI). In this post, I'll show you a method designed to protect sensitive data for its entire lifecycle in AWS. By Raj Jain.
Tags security-and-privacy frontend-and-mobile leadership-and-career product-and-design architecture-and-apis
-
Security logging in cloud environments - AWS
Posted on February 26, 2021, Level intermediate Resource Length long
If you had to architect a multi-account security logging strategy, where should you start? This blog, part of the "Continuous Visibility into Ephemeral Cloud Environments" series, will describe a design for a state of the art multi-account security-related logging platform in AWS. By Marco Lancini.
Tags cloud-and-infrastructure security-and-privacy devops-and-ci-cd
-
Authenticating Vuepress apps with Auth0
Posted on February 25, 2021, Level intermediate Resource Length short
Learn how to create your first VuePress site and add Authentication with Auth0. By Fikayo Adepoju.
Tags frontend-and-mobile backend-development product-and-design security-and-privacy
-
Realizing the full potential of DevSecOps
Posted on February 10, 2021, Level beginner Resource Length medium
An article about four strategies to achieve a true DevSecOps culture. For federal agencies, achieving mission success increasingly hinges on modernizing legacy systems and transforming operations. By Phoebe Nerdahl @Atlassian.com.
Tags devops-and-ci-cd leadership-and-career cloud-and-infrastructure security-and-privacy product-and-design
-
CSO's ultimate guide to security and privacy laws, regulations, and compliance
Posted on February 8, 2021, Level beginner Resource Length long
This handy directory provides summaries and links to the full text of each security or privacy law and regulation. By csoonline.com.
Tags leadership-and-career miscellaneous security-and-privacy cloud-and-infrastructure