cheatsheetseries.owasp.org
Django REST Framework quick security tips
Website with the collection of all the cheat sheets of the project.
Dennys Azevedo
Lessons about Security
The links, tools and tips our engineers and designers share with each other, one “today I learned” at a time.
- lessons shared
- 68
- people sharing
- 19
- database started in
- 2016
Tech Insights· cheatsheetseries.owasp.org
Django REST Framework quick security tips
From cheatsheetseries.owasp.org
Website with the collection of all the cheat sheets of the project.
Shared by
Read on cheatsheetseries.owasp.org- Django
- Owasp
- Python
- Security
leaddev.com
Four pillars to maintain/improve your codebase health
Time for a code health check-up? Here’s a practical framework for improving your codebase.
Dennys Azevedo
Tech Insights· leaddev.com
Four pillars to maintain/improve your codebase health
From leaddev.com
Time for a code health check-up? Here’s a practical framework for improving your codebase.
Shared by
Read on leaddev.com- Automation
- Insights
- Maintainability
- Security
Tech Insights· pypi.org
Drop-in replacement for Python's CSV library that tries to mitigate CSV injection attacks
Shared by
Read on pypi.org- Csv
- Python
- Security
Tech Insights· advancedweb.hu
Cacheable S3 signed URLs:
Shared by
Read on advancedweb.hu- AWS
- Caching
- Performance
- S3
- Security
Tech Insights· darkreading.com
Malicious npm Package Poses as Tailwind Tool
Shared by
Read on darkreading.com- JavaScript
- Npm
- Security
security.stackexchange.com
Why do Invalid Host header errors exist, what are attackers trying to achieve?
Flavio Juvenal
Tech Insights· security.stackexchange.com
Why do Invalid Host header errors exist, what are attackers trying to achieve?
Shared by
Read on security.stackexchange.com- Http
- Security
howhttps.works
How SSL/TLS handshare works... in a comic!
When you browse to a HTTP secure site, your browser and the server where it connects to have a secret handshake. We break this down and bring it into the real world so you can greet your friends with the secret handshake.
Dennys Azevedo
Tech Insights· howhttps.works
How SSL/TLS handshare works... in a comic!
From howhttps.works
When you browse to a HTTP secure site, your browser and the server where it connects to have a secret handshake. We break this down and bring it into the real world so you can greet your friends with the secret handshake.
Shared by
Read on howhttps.works- Https
- Security
- Web
github.com
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, contin...
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.
Flavio Juvenal
Tech Insights· github.com
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, contin...
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.
Shared by
Read on github.com- AWS
- Security
Tech Insights· github.com
django-axes a plugin for keeping track of suspicious login attempts for your Django based website and implementing simple brute-force attack blocking:
Shared by
Read on github.com- Django
- Login
- Security
blog.aquasec.com
Threat Alert: First Python Ransomware Attack Targeting Jupyter Notebooks:
Team Nautilus uncovered and analyzed the first Python-based ransomware attack that targets misconfigured Jupyter Notebooks in the wild and encrypts files.
Rebeca Sarai
Tech Insights· blog.aquasec.com
Threat Alert: First Python Ransomware Attack Targeting Jupyter Notebooks:
From blog.aquasec.com
Team Nautilus uncovered and analyzed the first Python-based ransomware attack that targets misconfigured Jupyter Notebooks in the wild and encrypts files.
Shared by
Read on blog.aquasec.com- Python
- Security
Tech Insights· krebsonsecurity.com
How Phishers Are Slinking Their Links Into LinkedIn:
Shared by
Read on krebsonsecurity.com- Security
justinpombrio.net
A capability-safe language would have minimized the impact of, or even prevented, the log4j vulnerability:
Flavio Juvenal
Tech Insights· justinpombrio.net
A capability-safe language would have minimized the impact of, or even prevented, the log4j vulnerability:
Shared by
Read on justinpombrio.net- Capability
- Safety
- Security
bishopfox.com
Never, Ever, Ever Use Pixelation for Redacting Text
See why you should never use pixelation for redacting text and why it is a surefire way to get your data leaked. Learn from security researcher Dan Petro.
Flavio Juvenal
Tech Insights· bishopfox.com
Never, Ever, Ever Use Pixelation for Redacting Text
From bishopfox.com
See why you should never use pixelation for redacting text and why it is a surefire way to get your data leaked. Learn from security researcher Dan Petro.
Shared by
Read on bishopfox.com- Security
blog.sonarsource.com
10 Unknown Security Pitfalls for Python:
In this blog post, we share 10 security pitfalls for Python developers that we encountered in real-world projects.
Flavio Juvenal
Tech Insights· blog.sonarsource.com
10 Unknown Security Pitfalls for Python:
From blog.sonarsource.com
In this blog post, we share 10 security pitfalls for Python developers that we encountered in real-world projects.
Shared by
Read on blog.sonarsource.com- Python
- Security
Tech Insights· blog.checkpoint.com
"Critical security vulnerabilities on OpenSea’s platform that, if exploited, could have led hackers to hijack user accounts and steal entire crypto wallets of users, by sending malicious NFTs"
Shared by
Read on blog.checkpoint.com- Crypto
- Nfts
- Security
Book a call
Found it useful?
Let’s put it to work.
Tell us about your product and the problem in front of you. We’ll bring what we’ve learned on real projects.
Tell us about your product, and we’ll bring what we’ve learned.
Still prefer the good old email? Contact us
