Best of Cybersecurity — 2024

  1. 1
    Article
    Avatar of freecodecampfreeCodeCamp·2y

    Learn Linux for Beginners: From Basics to Advanced Techniques [Full Book]

    Learning Linux offers valuable skills in the tech industry, aiding efficiency and career transitions into fields like DevOps, Cybersecurity, and Cloud Computing. This comprehensive handbook covers basics like the Linux command line to advanced topics such as shell scripting and system administration. Examples use Ubuntu 22.04.2 LTS, but the information is broadly applicable across distributions. Key sections include an introduction to Linux, setting up your environment, and managing files, all geared toward empowering new and experienced users alike.

  2. 2
    Video
    Avatar of fireshipFireship·1y

    The horrors of software bugs

    Software bugs, sometimes deemed as features, can have significant and often dire consequences. Historical examples include Civilization's Gandhi bug, the 2008 Zune freeze due to a leap year miscalculation, and the Pentium FDIV bug of 1994 impacting floating-point division. Other notable bugs caused the 2019 iPhone FaceTime eavesdropping glitch, Chase ATM's check fraud loophole in 2024, and several critical failures in aerospace and military software systems. Learning from these bugs emphasizes the critical importance of robust testing and error handling in software development.

  3. 3
    Video
    Avatar of fireshipFireship·2y

    Some bad code just broke a billion Windows machines

  4. 4
    Article
    Avatar of communityCommunity Picks·2y

    CORS: the ultimate guide

    CORS (Cross-Origin Resource Sharing) is a security mechanism that protects users' data from being accessed by malicious websites when different origins interact. AJAX (Asynchronous JavaScript And XML) requests from web browsers are controlled by CORS rules, ensuring data confidentiality and security. This guide explains how CORS policies are configured via HTTP response headers to allow or deny access based on origin and credentials. It also highlights the dangers of misconfigured CORS policies and provides steps to define a secure CORS policy effectively.

  5. 5
    Video
    Avatar of seytonicSeytonic·2y

    How the FBI Hacked the Trump Shooter's Phone

  6. 6
    Article
    Avatar of javarevisitedJavarevisited·2y

    6 Best Cybersecurity Courses for Beginners and Experienced in 2024

    Discover the best cybersecurity courses on Udemy for beginners and experienced individuals in 2024. These courses cover topics like cyber security, ethical hacking, network security, and information security.

  7. 7
    Article
    Avatar of freecodecampfreeCodeCamp·2y

    How to Get Started With Cybersecurity

    Cybersecurity is a vital field that involves protecting individuals and their data on the internet. To start a career in cybersecurity, one must understand basic concepts, research various career paths, choose a specialized field, gain practical knowledge, and network within the community. The post provides a step-by-step guide to becoming a cybersecurity professional, including resources and additional tips to enhance learning and career progression.

  8. 8
    Video
    Avatar of bytebytegoByteByteGo·1y

    How SSH Really Works

    SSH is essential for providing secure remote access over unsecured networks. This video explains how SSH creates a secure tunnel between client and server, focusing on SSH2, which offers improved security features compared to SSH1. Key aspects covered include TCP connection establishment, version and algorithm negotiation, key exchange using the Elliptic Curve Diffie-Hellman method, and public key authentication. Once authenticated, all communication between the client and server is encrypted using a session key. SSH also supports local forwarding for tunneling other network services securely.

  9. 9
    Article
    Avatar of devtoDEV·2y

    7 Common Front End security attacks

    Web applications are becoming more attractive targets for cyber attacks, and front-end security is often neglected. This post discusses seven common front-end attacks and emphasizes the importance of stepping up security practices in front-end development.

  10. 10
    Video
    Avatar of fireshipFireship·2y

    Unhinged ransomware attack targets hospitals

    A ransomware attack targeted hospitals in London, forcing them to shut down services and divert patients. The attack is believed to be the work of Russian hackers, who have been behind many ransomware attacks in the past. Ransomware attacks work by penetrating computer systems, exploring valuable data, encrypting it, and demanding payment in untraceable cryptocurrencies.

  11. 11
    Article
    Avatar of communityCommunity Picks·2y

    I fought a DDoS and lived to tell the tale

    The post recounts the author's experience dealing with a DDoS attack and provides advice on how to protect against such attacks.

  12. 12
    Article
    Avatar of infosecwriteupsInfoSec Write-ups·1y

    Build Your Own Secure VPN

    Learn how to create your own secure and private VPN using Azure Cloud and OpenVPN Access Server. The guide outlines the steps from signing up as a student for free Azure credits to setting up a virtual machine and configuring the VPN server. This enables enhanced data privacy and security, avoiding costs associated with third-party VPN services.

  13. 13
    Article
    Avatar of newstackThe New Stack·2y

    5 JavaScript Security Best Practices for 2024

    JavaScript applications face numerous cyber threats in 2024, including cross-site scripting (XSS), man-in-the-middle (MitM) attacks, and denial of service (DoS) attacks. Key security best practices include securing APIs, implementing Content Security Policies (CSP), input sanitization, and performing regular security audits. Tools like Snyk, ZAP by OWASP, and the Cypress Testing Framework are essential for maintaining robust security in JavaScript development.

  14. 14
    Article
    Avatar of netguruNetguru·2y

    14 Top Software Developer Skills for 2024: The Complete Guide

    Discover the top software developer skills for 2024, including mastering core programming languages, data structures and algorithms, version control systems, IDE proficiency, database management, SDLC knowledge, cloud computing competency, cybersecurity awareness, soft skills, machine learning and AI fundamentals, CI/CD practices, mobile development skills, DevOps practices, and emerging technologies.

  15. 15
    Article
    Avatar of awegoAwesome Go·2y

    How I sent 500 million HTTP requests to 2.5 million hosts

    An individual leveraged Go's simplicity and concurrency to send 500 million HTTP/1.1 requests to 2.5 million hosts for an ethical hacking use case. By utilizing Kubernetes for horizontal scaling and optimizing both code and libraries, they achieved this massive scale efficiently. Key optimizations included pre-resolving DNS, hand-crafting HTTP requests, and using the fasthttp library.

  16. 16
    Video
    Avatar of fireshipFireship·2y

    The Internet's most broken protocol

    The Border Gateway Protocol (BGP), a critical component of the Internet, has been at fault for several major outages and security breaches, as it was designed without stringent modern security measures. To mitigate these issues, a new solution involving the Resource Public Key Infrastructure (RPKI) is being implemented to cryptographically sign route announcements, though adoption is varied globally.

  17. 17
    Article
    Avatar of hnHacker News·2y

    What You Get After Running an SSH Honeypot for 30 Days

    This post discusses the results of running an SSH honeypot for 30 days, including the number of login attempts and information about the attackers' tactics.

  18. 18
    Video
    Avatar of davidbombalDavid Bombal·2y

    Hacking networks with Python (FREE CCNA 200-301 Course 2024)

    The post is part of a CCNA course focused on practical demonstrations using real equipment like Cisco switches and Kali Linux. It covers the concepts of root guard and BPDU guard, showing how these features can protect a network's spanning tree topology. The author uses a Python script to simulate network attacks and demonstrates how to secure the network using these tools. The post highlights the availability of free and paid training materials on Cisco U, where readers can practice along with the demonstrations.

  19. 19
    Article
    Avatar of newstackThe New Stack·2y

    Most Dangerous JavaScript Vulnerabilities To Watch For in 2025

    JavaScript remains a top programming language but is vulnerable to various security threats. These include advanced XSS attacks, CSRF, server-side JS injection, formjacking, prototype pollution, IDOR, and supply chain attacks. To mitigate these risks, developers need to implement secure coding practices, including correct input validation, use of security tokens, and regular integrity checks.

  20. 20
    Article
    Avatar of semaphoreSemaphore·2y

    API Security Best Practices: Protecting Your Data in Transit

    APIs are essential for modern web development, making them prime targets for cyberattacks. Securing APIs involves best practices such as encrypting communication via HTTPS, authenticating endpoints, using API gateways, enforcing fine-grained access control, and implementing rate limiting. Regular audits, penetration tests, and the use of security tools like linters, SCA, and SAST tools are also crucial. Following established security standards, such as those from OWASP, can further fortify API security.

  21. 21
    Article
    Avatar of systemweaknessSystem Weakness·2y

    How Hackers Exploit Vulnerabilities with Nmap and Searchsploit: Step-by-Step Guide!

    Learn how to use Nmap for OS detection and vulnerability scanning, and how to employ Searchsploit to find corresponding exploits. This guide walks through the commands and outputs for effectively identifying and exploiting vulnerabilities in target systems, enhancing your penetration testing skills.

  22. 22
    Article
    Avatar of systemweaknessSystem Weakness·1y

    Turning Your Server into a High-Security Server with a Free WAF

    SafeLine WAF is a powerful web application firewall designed to protect servers from various cyber attacks. It offers dynamic protection, low false positives, and is easy to install with one-click setup. The configuration includes setting up a dedicated server, applying for SSL certificates, and configuring domain bindings to ensure secure traffic filtering. SafeLine WAF also supports dynamic encryption for high-security needs, making it an effective solution for safeguarding web applications.

  23. 23
    Video
    Avatar of an0n_aliAn0n Ali·2y

    20 Browser Extensions for HACKERS & OSINT!

  24. 24
    Article
    Avatar of freecodecampfreeCodeCamp·1y

    How to Build Your Own Private Hacking Lab with VirtualBox

    Learn how to set up a private hacking lab using VirtualBox to practice ethical hacking safely. The guide covers installing necessary software like VirtualBox and Kali Linux, setting up attacking and target machines, and configuring a host-only network to ensure isolation from the public internet. Finally, it shows basic scanning techniques using Nmap for identifying and understanding the target machine's network configuration.

  25. 25
    Article
    Avatar of misfitsdevelopersMisfits Developers·1y

    Hackers breach Andrew Tate’s online university, leak data on 800,000 users

    Hackers have breached The Real World, an online course founded by controversial influencer Andrew Tate, exposing data on nearly 800,000 users, including 325,000 unique email addresses and chat logs from over 600 servers. The attackers, motivated by hacktivism, criticized the platform's poor security. The breach underscores significant concerns about user privacy and security on such platforms.

See all Cybersecurity archives