Top Five Security/Hacking Blogs

July 12, 2006

We mentioned these on the last show, but I wanted to make a posting that lists and describes each, in no particular order. I also wanted to say that this is not a list of our favorite blogs, per se, but a listing of blogs we most often pull stories for the show. We try not to talk about the news that everyone else is talking about, and the following resources give us the best material:

http://isc.sans.org/ – Sponsored and run by the SANS Institute, the ISC incident handlers do a fantastic job of summarizing the latest security trends, research, vulnerabilities, and exploits.
http://www.darknet.org.uk/ – Always full of the latest and greatest hacking news, Mr. Darknet reports on new security tools, updates to security tools, and other underground security topics that are interesting to read and usually not mainstream.
http://www.schneier.com/blog/ – What can we say, Bruce’s commentary is spot on, and has been for as long as I can remember. You will often find insightful commentary on stories that you may pass over or just plain miss. Don’t miss the Friday squid blogging either.
http://www.professionalsecuritytesters.org/ – Absolutely one of the best resources for penetration testers. Good news and information with a focus on quality rather than quantity. You will find tool updates and other interesting factoids for penetration testers.
http://www.f-secure.com/weblog/ – This has become one of my favorite blogs in recent months. The F-Secure team does an outstanding job of making some of the best and most interesting security related posts. Their research team rocks, frequently posting about bluetooth security and malware analysis.

Happy reading!
The Security Weekly Crew

Paul Asadoorian

Paul Asadoorian is currently the Principal Security Researcher for Eclypsium, focused on firmware and supply chain security awareness. Paul’s passion for firmware security extends back many years to the WRT54G hacking days and reverse engineering firmware on IoT devices for fun. Paul and his long-time podcast co-host Larry Pesce co-authored the book “WRTG54G Ultimate Hacking” in 2007, which fueled the firmware hacking fire even more. Paul has worked in technology and information security for over 20 years, holding various security and engineering roles in a lottery company, university, ISP, independent penetration tester, and security product companies such as Tenable. In 2005 Paul founded Security Weekly, a weekly podcast dedicated to hacking and information security. In 2020 Security Weekly was acquired by the Cyberrisk Alliance. Paul is still the host of one of the longest-running security podcasts, Paul’s Security Weekly, he enjoys coding in Python & telling everyone he uses Linux.

Content

DevSecOps Scanning Challenges & Tips

Bill BrennerOctober 26, 2021

There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]

Content

It Should Be ‘Cybersecurity Culture Month’

Bill BrennerOctober 19, 2021

It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]