3rd edition of Ross Anderson’s Security Engineering now freely available for download | Light Blue Touchpaper
https://alecmuffett.com/article/110651
#RossAnderson #SecurityEngineering
https://alecmuffett.com/article/110651
#RossAnderson #SecurityEngineering
3rd edition of Ross Anderson’s Security Engineering now freely available for download | Light Blue Touchpaper
Thanks, Ross. We miss you.
alecmuffett.com
November 15, 2024 at 8:10 AM
3rd edition of Ross Anderson’s Security Engineering now freely available for download | Light Blue Touchpaper
https://alecmuffett.com/article/110651
#RossAnderson #SecurityEngineering
https://alecmuffett.com/article/110651
#RossAnderson #SecurityEngineering
We've been quiet for a few months. Heads down, building
Today Hacker Sidekick is moving from the browser to the desktop
Real security work needs direct access to local tools, files and infrastructure. Not a chat tab 🧵
hackersidekick.com?utm_source=b...
#securityengineering #agenticAI
Today Hacker Sidekick is moving from the browser to the desktop
Real security work needs direct access to local tools, files and infrastructure. Not a chat tab 🧵
hackersidekick.com?utm_source=b...
#securityengineering #agenticAI
April 23, 2026 at 9:00 PM
We've been quiet for a few months. Heads down, building
Today Hacker Sidekick is moving from the browser to the desktop
Real security work needs direct access to local tools, files and infrastructure. Not a chat tab 🧵
hackersidekick.com?utm_source=b...
#securityengineering #agenticAI
Today Hacker Sidekick is moving from the browser to the desktop
Real security work needs direct access to local tools, files and infrastructure. Not a chat tab 🧵
hackersidekick.com?utm_source=b...
#securityengineering #agenticAI
Akamai’s white paper on the OWASP Top 10 API Security Risks.
#Cybersecurity #APISecurity #OWASP #OWASPTop10 #ApplicationSecurity #AppSec #CloudSecurity #DevSecOps #SoftwareDevelopment #ZeroTrust #API #AI #LLM #SecurityEngineering
www.akamai.com/resources/wh...
#Cybersecurity #APISecurity #OWASP #OWASPTop10 #ApplicationSecurity #AppSec #CloudSecurity #DevSecOps #SoftwareDevelopment #ZeroTrust #API #AI #LLM #SecurityEngineering
www.akamai.com/resources/wh...
www.akamai.com
August 11, 2026 at 1:53 PM
Akamai’s white paper on the OWASP Top 10 API Security Risks.
#Cybersecurity #APISecurity #OWASP #OWASPTop10 #ApplicationSecurity #AppSec #CloudSecurity #DevSecOps #SoftwareDevelopment #ZeroTrust #API #AI #LLM #SecurityEngineering
www.akamai.com/resources/wh...
#Cybersecurity #APISecurity #OWASP #OWASPTop10 #ApplicationSecurity #AppSec #CloudSecurity #DevSecOps #SoftwareDevelopment #ZeroTrust #API #AI #LLM #SecurityEngineering
www.akamai.com/resources/wh...
One dashboard is not one security control. OAuth, device identity, secure boot, video integrity, retention, and admin roles still need separate evidence. #Cisco #Meraki #Axis #PhysicalSecurity #SecurityEngineering #NetEng
September 22, 2026 at 3:11 AM
One dashboard is not one security control. OAuth, device identity, secure boot, video integrity, retention, and admin roles still need separate evidence. #Cisco #Meraki #Axis #PhysicalSecurity #SecurityEngineering #NetEng
Learning in public for reaaal!
Another golang project, now we're building security tooling in public. Just started this new project, i'll be posting on it more here!
#securityengineering #learninginpublic
Another golang project, now we're building security tooling in public. Just started this new project, i'll be posting on it more here!
#securityengineering #learninginpublic
April 25, 2025 at 10:35 AM
Learning in public for reaaal!
Another golang project, now we're building security tooling in public. Just started this new project, i'll be posting on it more here!
#securityengineering #learninginpublic
Another golang project, now we're building security tooling in public. Just started this new project, i'll be posting on it more here!
#securityengineering #learninginpublic
Most Java input validation assumes ASCII-era rules.
Unicode breaks that assumption.
A deep dive into Unicode security:
• invisible characters
• homograph attacks
• BiDi overrides
• production-grade defenses in Quarkus
buff.ly/4sTgaBx
#Java #Quarkus #Unicode #SecurityEngineering #BackendDev
Unicode breaks that assumption.
A deep dive into Unicode security:
• invisible characters
• homograph attacks
• BiDi overrides
• production-grade defenses in Quarkus
buff.ly/4sTgaBx
#Java #Quarkus #Unicode #SecurityEngineering #BackendDev
February 8, 2026 at 7:15 AM
Most Java input validation assumes ASCII-era rules.
Unicode breaks that assumption.
A deep dive into Unicode security:
• invisible characters
• homograph attacks
• BiDi overrides
• production-grade defenses in Quarkus
buff.ly/4sTgaBx
#Java #Quarkus #Unicode #SecurityEngineering #BackendDev
Unicode breaks that assumption.
A deep dive into Unicode security:
• invisible characters
• homograph attacks
• BiDi overrides
• production-grade defenses in Quarkus
buff.ly/4sTgaBx
#Java #Quarkus #Unicode #SecurityEngineering #BackendDev
Finding bugs gets CVEs.
Fixing bugs gets a “thanks.”
Preventing them by design? Nobody knows your name.
Security engineering deserves some hype too.
#CyberSecurity #CVE #SecurityEngineering
Fixing bugs gets a “thanks.”
Preventing them by design? Nobody knows your name.
Security engineering deserves some hype too.
#CyberSecurity #CVE #SecurityEngineering
July 24, 2026 at 10:19 AM
Finding bugs gets CVEs.
Fixing bugs gets a “thanks.”
Preventing them by design? Nobody knows your name.
Security engineering deserves some hype too.
#CyberSecurity #CVE #SecurityEngineering
Fixing bugs gets a “thanks.”
Preventing them by design? Nobody knows your name.
Security engineering deserves some hype too.
#CyberSecurity #CVE #SecurityEngineering
Application Security Engineer @ Oneleet.
Shape the security judgment layer to turn noisy findings into actionable insights.
🔧 Go, Python, TypeScript, open‑source security tools, LLMs
📍 Remote (US)
💰 $160K‑$220K
aihackerjobs.com/company/onel...
#AppSec #SecurityEngineering #Startup #TechJobs
Shape the security judgment layer to turn noisy findings into actionable insights.
🔧 Go, Python, TypeScript, open‑source security tools, LLMs
📍 Remote (US)
💰 $160K‑$220K
aihackerjobs.com/company/onel...
#AppSec #SecurityEngineering #Startup #TechJobs
June 19, 2026 at 4:39 PM
Application Security Engineer @ Oneleet.
Shape the security judgment layer to turn noisy findings into actionable insights.
🔧 Go, Python, TypeScript, open‑source security tools, LLMs
📍 Remote (US)
💰 $160K‑$220K
aihackerjobs.com/company/onel...
#AppSec #SecurityEngineering #Startup #TechJobs
Shape the security judgment layer to turn noisy findings into actionable insights.
🔧 Go, Python, TypeScript, open‑source security tools, LLMs
📍 Remote (US)
💰 $160K‑$220K
aihackerjobs.com/company/onel...
#AppSec #SecurityEngineering #Startup #TechJobs
Kom och jobba med mig!
@assuredab.bsky.social söker nytt blod. Bland annat en säljansvarig för #securityengineering #allthecybers #cra #nis2 #dora #sdlc
www.assured.se/sv/jobb/ledi...
@assuredab.bsky.social söker nytt blod. Bland annat en säljansvarig för #securityengineering #allthecybers #cra #nis2 #dora #sdlc
www.assured.se/sv/jobb/ledi...
Ledig tjänst: Säljansvarig Security Engineering
Vi söker en teknisk konsultsäljare som vill ta ett större ansvar och vara med och bygga upp ett växande affärsområde inom utvecklingsnära säkerhet.
www.assured.se
January 8, 2026 at 8:34 AM
Kom och jobba med mig!
@assuredab.bsky.social söker nytt blod. Bland annat en säljansvarig för #securityengineering #allthecybers #cra #nis2 #dora #sdlc
www.assured.se/sv/jobb/ledi...
@assuredab.bsky.social söker nytt blod. Bland annat en säljansvarig för #securityengineering #allthecybers #cra #nis2 #dora #sdlc
www.assured.se/sv/jobb/ledi...
Hackers, check this one out.
github.com/Iankulani/cy...
#CyberDefense #CyberDefence #CyberThreats #ThreatIntelligence #CyberSecurityAwareness #InformationSecurity #SecurityEngineering #SecurityResearch #GitHub #GitHubProjects #GitHubTrending #OpenSource
github.com/Iankulani/cy...
#CyberDefense #CyberDefence #CyberThreats #ThreatIntelligence #CyberSecurityAwareness #InformationSecurity #SecurityEngineering #SecurityResearch #GitHub #GitHubProjects #GitHubTrending #OpenSource
August 29, 2026 at 8:40 PM
Re-posting for reach is appreciated - thank you!
#QualityEngineering #Testing #SecurityChampion #SecurityEngineering #AppSec #DevSecOps #MobileDevelopment #WebDevelopment #OpenToWork #JobSearch
#QualityEngineering #Testing #SecurityChampion #SecurityEngineering #AppSec #DevSecOps #MobileDevelopment #WebDevelopment #OpenToWork #JobSearch
October 24, 2024 at 2:14 PM
Re-posting for reach is appreciated - thank you!
#QualityEngineering #Testing #SecurityChampion #SecurityEngineering #AppSec #DevSecOps #MobileDevelopment #WebDevelopment #OpenToWork #JobSearch
#QualityEngineering #Testing #SecurityChampion #SecurityEngineering #AppSec #DevSecOps #MobileDevelopment #WebDevelopment #OpenToWork #JobSearch
🔐SSH and shell-free
🧱Immutable by default
🔁Trusted Boot out of the box
Because we believe security starts at the foundation. Here's what makes Talos Linux different.
🔗 www.siderolabs.com/blog/masteri...
#Kubernetes #TalosLinux #DevSecOps #CloudNative #SecurityEngineering
🧱Immutable by default
🔁Trusted Boot out of the box
Because we believe security starts at the foundation. Here's what makes Talos Linux different.
🔗 www.siderolabs.com/blog/masteri...
#Kubernetes #TalosLinux #DevSecOps #CloudNative #SecurityEngineering
Mastering Security in Your Kubernetes Infrastructure with Omni and Talos Linux - Sidero Labs
The complexity of Kubernetes infrastructures can allow for blind spots that open the door to bad actors. Talos Linux and Omni change that.
www.siderolabs.com
July 29, 2025 at 2:51 PM
🔐SSH and shell-free
🧱Immutable by default
🔁Trusted Boot out of the box
Because we believe security starts at the foundation. Here's what makes Talos Linux different.
🔗 www.siderolabs.com/blog/masteri...
#Kubernetes #TalosLinux #DevSecOps #CloudNative #SecurityEngineering
🧱Immutable by default
🔁Trusted Boot out of the box
Because we believe security starts at the foundation. Here's what makes Talos Linux different.
🔗 www.siderolabs.com/blog/masteri...
#Kubernetes #TalosLinux #DevSecOps #CloudNative #SecurityEngineering
🌟 Hiring Alert! 🌟 Join us as a Business Intelligence Engineer in our Global Security Org. Team in Bengaluru. Excel in a dynamic, impactful environment! #JobOpening #BengaluruJobs #SecurityEngineering educativ.net/jobs/job/325...
February 23, 2025 at 7:16 PM
🌟 Hiring Alert! 🌟 Join us as a Business Intelligence Engineer in our Global Security Org. Team in Bengaluru. Excel in a dynamic, impactful environment! #JobOpening #BengaluruJobs #SecurityEngineering educativ.net/jobs/job/325...
Finished domain 3 on my #CISSP journey. Easily the most dense section, but fun too. Domain 4 is up my alley so I’m feeling pretty good. #securityengineering
#networksecurity
#networksecurity
November 12, 2024 at 11:38 PM
Finished domain 3 on my #CISSP journey. Easily the most dense section, but fun too. Domain 4 is up my alley so I’m feeling pretty good. #securityengineering
#networksecurity
#networksecurity
The LinkedIn Bot That Tried to Pass the Turing Test (and Failed Spectacularly)
zerotohero.dev/inbox/the-li...
#AI #AgenticAI #Identity #ZeroTrust #SecurityEngineering #SignalVsNoise #SocialEngineering #BotDetection #AISafety
zerotohero.dev/inbox/the-li...
#AI #AgenticAI #Identity #ZeroTrust #SecurityEngineering #SignalVsNoise #SocialEngineering #BotDetection #AISafety
The LinkedIn Bot That Tried to Pass the Turing Test (and Failed Spectacularly)
zerotohero.dev
March 26, 2026 at 9:13 PM
The LinkedIn Bot That Tried to Pass the Turing Test (and Failed Spectacularly)
zerotohero.dev/inbox/the-li...
#AI #AgenticAI #Identity #ZeroTrust #SecurityEngineering #SignalVsNoise #SocialEngineering #BotDetection #AISafety
zerotohero.dev/inbox/the-li...
#AI #AgenticAI #Identity #ZeroTrust #SecurityEngineering #SignalVsNoise #SocialEngineering #BotDetection #AISafety
🔒 We're hiring a Virtualization Security Engineer Manager in Irving, TX (Hybrid role)! Lead the charge in securing our digital landscape. 🌐 #TechJobs #IrvingJobs #SecurityEngineering #HybridWork educativ.net/jobs/job/308...
January 29, 2025 at 7:26 AM
🔒 We're hiring a Virtualization Security Engineer Manager in Irving, TX (Hybrid role)! Lead the charge in securing our digital landscape. 🌐 #TechJobs #IrvingJobs #SecurityEngineering #HybridWork educativ.net/jobs/job/308...
Blast radius matters.
But most teams reduce it by narrowing perimeters—not by shifting control to where the risk actually is.
Want real resilience?
Push your controls closer to the data and decisions.
#SecurityEngineering #DataCentricSecurity
But most teams reduce it by narrowing perimeters—not by shifting control to where the risk actually is.
Want real resilience?
Push your controls closer to the data and decisions.
#SecurityEngineering #DataCentricSecurity
June 12, 2025 at 1:43 PM
Blast radius matters.
But most teams reduce it by narrowing perimeters—not by shifting control to where the risk actually is.
Want real resilience?
Push your controls closer to the data and decisions.
#SecurityEngineering #DataCentricSecurity
But most teams reduce it by narrowing perimeters—not by shifting control to where the risk actually is.
Want real resilience?
Push your controls closer to the data and decisions.
#SecurityEngineering #DataCentricSecurity
💼 Senior Security Engineer @ Gauntlet.
Secure billions of on‑chain DeFi assets with AI‑powered automation now.
🔧Python, TypeScript, Claude, AI/LLM, EDR/SIEM
📍Remote - US, Canada
💰$180K–$210K
aihackerjobs.com/company/gaun...
#SecurityEngineering #DeFi #AI #Remote #Crypto
Secure billions of on‑chain DeFi assets with AI‑powered automation now.
🔧Python, TypeScript, Claude, AI/LLM, EDR/SIEM
📍Remote - US, Canada
💰$180K–$210K
aihackerjobs.com/company/gaun...
#SecurityEngineering #DeFi #AI #Remote #Crypto
July 16, 2026 at 4:41 PM
💼 Senior Security Engineer @ Gauntlet.
Secure billions of on‑chain DeFi assets with AI‑powered automation now.
🔧Python, TypeScript, Claude, AI/LLM, EDR/SIEM
📍Remote - US, Canada
💰$180K–$210K
aihackerjobs.com/company/gaun...
#SecurityEngineering #DeFi #AI #Remote #Crypto
Secure billions of on‑chain DeFi assets with AI‑powered automation now.
🔧Python, TypeScript, Claude, AI/LLM, EDR/SIEM
📍Remote - US, Canada
💰$180K–$210K
aihackerjobs.com/company/gaun...
#SecurityEngineering #DeFi #AI #Remote #Crypto
In a new blog, Proofpoint threat research engineers disclosed their detailed discovery of Amatera Stealer, a newly rebranded and upgraded malware-as-a-service (MaaS) version of the ACR Stealer.
Read the blog: brnw.ch/21wTvpI.
#securityengineering #detectionengineering #securitycontrols
Read the blog: brnw.ch/21wTvpI.
#securityengineering #detectionengineering #securitycontrols
Amatera Stealer: Rebranded ACR Stealer With Improved Evasion, Sophistication | Proofpoint US
Key takeaways Proofpoint identified a new, rebranded stealer based on ACR Stealer called Amatera Stealer. It is delivered via web injects featuring sophisticated attack
brnw.ch
June 18, 2025 at 4:33 PM
In a new blog, Proofpoint threat research engineers disclosed their detailed discovery of Amatera Stealer, a newly rebranded and upgraded malware-as-a-service (MaaS) version of the ACR Stealer.
Read the blog: brnw.ch/21wTvpI.
#securityengineering #detectionengineering #securitycontrols
Read the blog: brnw.ch/21wTvpI.
#securityengineering #detectionengineering #securitycontrols
Link: manishrawat21.substack.com
#Cybersecurity #ThreatHunting #SOCanalyst #SecurityEngineering #DetectionDesk
#Cybersecurity #ThreatHunting #SOCanalyst #SecurityEngineering #DetectionDesk
Detection Desk | Manish Rawat | Substack
Threat detection analysis and hunting walkthroughs from a SOC analyst building in public. Real datasets, real SPL, real findings. Click to read Detection Desk, by Manish Rawat, a Substack publication....
manishrawat21.substack.com
April 22, 2026 at 6:46 AM
Meta confirms 20,000+ Instagram accounts compromised April-June 2026 via AI chatbot account recovery bug email verification
#cybersecurity #meta #instagram #aivulnerability #securityengineering
radarkilat.com/en/article/m...
#cybersecurity #meta #instagram #aivulnerability #securityengineering
radarkilat.com/en/article/m...
June 6, 2026 at 10:56 PM
Meta confirms 20,000+ Instagram accounts compromised April-June 2026 via AI chatbot account recovery bug email verification
#cybersecurity #meta #instagram #aivulnerability #securityengineering
radarkilat.com/en/article/m...
#cybersecurity #meta #instagram #aivulnerability #securityengineering
radarkilat.com/en/article/m...
While Ron Woerner's Canon review was of the 2008 2nd edition, Dr. Anderson has since released a 3rd edition just a few years ago.
🛍️ If interested in purchasing the book, please consider using our affiliate link: amzn.to/47NiFa4
#CybersecurityBooks #SecurityEngineering
🛍️ If interested in purchasing the book, please consider using our affiliate link: amzn.to/47NiFa4
#CybersecurityBooks #SecurityEngineering
November 15, 2025 at 12:15 AM
While Ron Woerner's Canon review was of the 2008 2nd edition, Dr. Anderson has since released a 3rd edition just a few years ago.
🛍️ If interested in purchasing the book, please consider using our affiliate link: amzn.to/47NiFa4
#CybersecurityBooks #SecurityEngineering
🛍️ If interested in purchasing the book, please consider using our affiliate link: amzn.to/47NiFa4
#CybersecurityBooks #SecurityEngineering
If you manage open-source dependencies, this incident is a wake-up call. The real lessons are strategic: maintenance, ownership, and understanding the blast radius of every component you ship.
Read more: buff.ly/LSA5qfq
#ApplicationSecurity #HAProxy #VulnerabilityManagement #SecurityEngineering 🧵6/6
Read more: buff.ly/LSA5qfq
#ApplicationSecurity #HAProxy #VulnerabilityManagement #SecurityEngineering 🧵6/6
November 21, 2025 at 4:42 PM
If you manage open-source dependencies, this incident is a wake-up call. The real lessons are strategic: maintenance, ownership, and understanding the blast radius of every component you ship.
Read more: buff.ly/LSA5qfq
#ApplicationSecurity #HAProxy #VulnerabilityManagement #SecurityEngineering 🧵6/6
Read more: buff.ly/LSA5qfq
#ApplicationSecurity #HAProxy #VulnerabilityManagement #SecurityEngineering 🧵6/6
Cogito Ergo Sum - A Bit of Security for February 24, 2025
Can we use the body as an analogy for cybersecurity? Listen to this - youtu.be/uocWIaYlxWI
#cybersecuritytips #securityengineering #securityanalogy #cybertrust #BitofSec
Can we use the body as an analogy for cybersecurity? Listen to this - youtu.be/uocWIaYlxWI
#cybersecuritytips #securityengineering #securityanalogy #cybertrust #BitofSec
Cogito Ergo Sum
YouTube video by A Bit of Security, by William J. Malik
youtu.be
February 24, 2025 at 8:54 PM
Cogito Ergo Sum - A Bit of Security for February 24, 2025
Can we use the body as an analogy for cybersecurity? Listen to this - youtu.be/uocWIaYlxWI
#cybersecuritytips #securityengineering #securityanalogy #cybertrust #BitofSec
Can we use the body as an analogy for cybersecurity? Listen to this - youtu.be/uocWIaYlxWI
#cybersecuritytips #securityengineering #securityanalogy #cybertrust #BitofSec
More about her can be found at about.me (about.me/NazneenRupaw...).
Her Tags: #AppSec #SecurityEngineering #ThreatInformedVulnerabilityManagement #WomenInTech #SecurityCulture #ThoughtLeadership
Her Tags: #AppSec #SecurityEngineering #ThreatInformedVulnerabilityManagement #WomenInTech #SecurityCulture #ThoughtLeadership
about.me | your personal homepage
Create a free, one-page website in minutes with about.me. Showcase your work, links, and story on a personal homepage that's all about you.
about.me
August 18, 2026 at 9:36 AM
More about her can be found at about.me (about.me/NazneenRupaw...).
Her Tags: #AppSec #SecurityEngineering #ThreatInformedVulnerabilityManagement #WomenInTech #SecurityCulture #ThoughtLeadership
Her Tags: #AppSec #SecurityEngineering #ThreatInformedVulnerabilityManagement #WomenInTech #SecurityCulture #ThoughtLeadership