Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Shifting From Reactivity to Proactivity in AppSec with Phil Guimond - Secrets of AppSec Champions

"In Episode 03 of the SAC | Secrets of AppSec Champions podcast titled ""Compromised: Proactive to Reactive,"" hosts Chris Lindsey and guest Phil Guimond tackle the critical distinctions between proactive and reactive security strategies. They emphasize the importance of access logging and visibility in detecting compromises early, pointing out how changes in access logs can signal potential threats. They stress the necessity of implementing secure, tamper-proof log storage and discuss automation solutions like the ""Have I Been Pwned"" API and CAPTCHA to mitigate risks such as account takeovers.

How AI Impacts Reconnaissance and Bug Bounties

Is AI impacting security reconnaissance and bug bounties? Will AI be used by malicious actors in security research? These are just a few questions asked in this interview with NahamSec, in which we discuss AI in the coding and cyber security sector, how it can be used both positively and negatively, how it can impact the job market, and how it can be controlled to better serve the industry. Resources.

How to setup the OTP Verification plugin with Ultimate Member Login Form?

The miniOrange OTP Verification Plugin verifies the authenticity of email addresses and mobile/phone numbers during login and registration. OTP Verification sends a unique one-time password (OTP) to users, ensuring the contact details they provide are genuine and accessible. This effectively prevents fake registrations. In this video, we'll walk you through the step-by-step process of using the miniOrange OTP Verification plugin with the Ultimate Member Login Forms.

Measuring Risk with One Yardstick: Lessons Learned on the Road to RBVM

How should we measure risk? Zebra Technologies has more than a dozen cybersecurity tools, thirty-five teams, and hundreds of people worldwide managing vulnerabilities. They wanted to measure with one yardstick; use a single, risk-based solution that could be customized to meet business criteria.