- Top 10 web hacking techniques of 2020
( https://portswigger.net/research/top-10-web-hacking-techniques-of-2020 )
While the OWASP Top 10 is more high level, this list gives you the down and dirty for how attackers are using the web to break applications.
- What your DevOps team needs to know: 4 lessons from exploited vulnerabilities
( https://techbeacon.com/security/what-your-devops-team-needs-know-4-lessons-exploited-vulnerabilities )
Learn from security past to prevent vulnerabilities in security future.
- Security Chaos Engineering: How to Security Differently
( https://www.verica.io/blog/security-chaos-engineering-how-to-security-differently/ )
Security chaos engineering is a discipline that can have a large impact on improving your security posture and culture.
- Introducing sigstore: Easy Code Signing & Verification for Supply Chain Integrity
( https://security.googleblog.com/2021/03/introducing-sigstore-easy-code-signing.html )
Code signing reduces or even eliminates many classes of software supply chain vulns.
- Nuclei: Fast and customizable vulnerability scanner based on simple YAML based DSL
( https://github.com/projectdiscovery/nuclei/ )
Nuclei is a new tool for security engineers, developers, pen testers, and bug bounty hunters to consider adding to their arsenal.