SecInterviewHub @sec_hub93028

An attacker finds this DMARC on targetcompany[.]com v=DMARC1; p=none; rua=... SPF: ~all (soft fail) DKIM: enabled but not aligned What’s the max realistic damage the attacker can cause?

1 0 5 153 0

View Details

Manning Publications @ManningBooks

15 hours ago

Most security issues don't begin with an attacker. They begin with a trusted input that shouldn't be trusted, permissions that are too broad, an exposed API, or a vulnerability introduced during development. Today's Deal of the Day features four books on building security into your systems from the start: • Software Security for Developers by @laurspilca • Authorization in Action by @windley • Secure APIs by @JoseHaroPeralta • Grokking Web Application Security by Malcom McDonald Explore what else is half off: hubs.la/Q04mmKSk0

0 10 29 2K 18

View Details

SecInterviewHub @sec_hub93028

10 hours ago

@ZackKorman Sliding in that Texas style analogy at the end

1 0 2 134 0

View Details

SecInterviewHub @sec_hub93028

10 hours ago

The infosec community is small, and word spreads.

BlackRoomSec @blackroomsec

11 hours ago

Unless your employer is doing animal sacrifices in the break room, it's not a good idea to be badmouthing them on social media, particularly in this job climate and in *this* particular industry, no matter how "right" you think you are. And, you probably are right? I don't

26 11 115 8K 5

0 0 12 1K 0

View Details

SecInterviewHub @sec_hub93028

10 hours ago

@blackroomsec Completely agree

0 0 2 213 0

View Details

SecInterviewHub @sec_hub93028

11 hours ago

@NickTheRipperX Welcome!

0 0 1 33 0

View Details

SecInterviewHub @sec_hub93028

24 hours ago

People obsessed with cybersecurity, ethical hacking, penetration testing, red teaming, blue teaming, purple teaming, threat hunting, malware analysis, reverse engineering, digital forensics, incident response, network security, endpoint detection and response, cloud security, application security, api security, secure coding, devsecops, zero trust architecture, cryptography, post quantum cryptography, privacy engineering, data protection, osint, social engineering defense, vulnerability research, exploit development, bug bounty hunting, ctf competitions, siem, soc operations, threat intelligence, apt analysis, cyber warfare, digital rights, surveillance resistance, privacy as a human right, hardware security, embedded/iot security, container security, kernel security, low level exploitation, secure systems programming, wireshark, burpsuite, metasploit, kali linux, building and breaking systems at 3 am, overthinking attack surfaces, threat modeling everything, minimalist secure setups, fighting surveillance capitalism, digital ethics, cybersecurity philosophy, dystopian tech literature, privacy first design, and defending the digital world with weird resilient ideas automatically become my friends.

15 11 79 3K 7

View Details

SecInterviewHub @sec_hub93028

11 hours ago

@yeahbutnahbut 👋

0 0 0 48 0

View Details

SecInterviewHub @sec_hub93028

12 hours ago

Suppose you’re using a third party platform that integrates with other third party systems across your company. How do you monitor user activity for suspicious behavior? How do you ensure that the platform’s extensions and integrations are safe to use?