Secure All Software - Issue #10 Rootkits, Serverless and the NPM package that walked away with all your passwords

Links

Software developers are increasingly being targeted by supply chain attacks. Popularization of package managers and their integration into the development pipelines has made this ecosystem an interesting target for various threat actors.

Lessons learned in moving from vendor to defender. You walk into an organization and suddenly instead of focusing on the newest threat you are shoved into a boat that has thousands of leaks.

What is application security? A talk by @7hunderSon helping people to ease into the mystic worlds of security, jargon and easy wins.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Your complete guide for privilege escalation. It is hard to prevent privileged escalation. It is easier when you know how they work.

This is the first of a three parts series discussing the ways of securing serverless applications. This rather new topic in the community is getting more and more interesting.

Tools and Tech

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

What is up?

BSides Charleston is a 501(c)3 organization led computer security conference that was started in 2012 and has been held in Charleston, SC. Since its existence BSides Charleston has been attracting security professionals from all over the Lowcountry area for this one day event.

Want to share something?

Did you write a great post? Built a useful too or have something else to share? Please share it with me andy@occamslabs.com or on Twitter @pxlpnk

More at: https://SecureAllSoftware.dev