Best of NetSPI: Top Cybersecurity Blogs, Resources, Webinars, and Podcasts of 2021

A starter collection of virtualization security resources: hardening guides for Hyper-V, VMware vSphere, and Xen, plus references from DISA STIG, CSA, SANS, and CIS.

NetSPI agents recap DEF CON 32: six zero-days found in ATM disk encryption software, General Paul Nakasone on US cyber strategy, and proactive security lessons from talks and workshops.

NetSPI's year-in-review celebrates 2023 milestones, including a new headquarters, surpassing 500 team members, and key product and community moments, reflecting on a year of growth across the company.

The 2023 OWASP API Security Top 10 keeps BOLA and Broken Authentication on top while adding SSRF, unrestricted resource consumption, and unsafe API consumption; industry pros react.

API security remains underprioritized as usage surges; the 2023 OWASP API Security Top 10 still leads with BOLA and broken authentication, and manual testing is needed where scanners fall short.

Podcast talk on shift-left application security: moving tests earlier saves time and money but strains teams, and contextual pentesting with better asset prioritization eases AppSec friction.