A Faster Way to Identify High Risk Windows Assets

A recent spate of data breaches has highlighted the fact that, even in 2011, many organizations still have not managed to grasp the concepts of vulnerability management.

A Project Zero essay arguing exploit mitigations are essential since not all security bugs can be found, recounting contributions to Flash and vendor mitigation work.

Part 3 of the red teaming series: joint red/blue debriefs, blameless post-mortems, and shared processes turn exercise findings into lasting security improvements.

NetSPI partners share strategies for external attack surface visibility, noting how cloud adoption, remote work, and shadow IT make continuous automated asset discovery essential.

Spreadsheets and fragmented point tools can't keep pace with today's expanding external attack surface. The article explains why manual asset inventories break down and what modern ASM requires.

A curated list of 17 resources for aspiring defensive AppSec engineers, spanning security fundamentals, web application basics, hands-on practice, continuing education, and professional organizations.