The hottest Cybersecurity Substack posts right now

And their main takeaways
Category
Top Technology Topics

Issue #40

Infra Weekly Newsletter • 18 implied HN points • 20 Mar 23
🕹 Technology Cybersecurity
  1. Gene Kim explains the making of The Phoenix Project in DevOps.
  2. Consider the importance of defining an AWS Organization Governance Architecture.
  3. Be cautious about potential issues when considering the use of Alpine Linux.

Microsoft Ire, Ripple + Rail, Wallarm API Revenue Protection

The API Changelog • 1 implied HN point • 11 Aug 25
🕹 Technology Cybersecurity
  1. OpenAI launched GPT-5, which is said to improve coding abilities and comes with a new tiered pricing strategy to attract developers.
  2. Wallarm introduced a new API Revenue Protection feature that helps secure revenue-generating APIs by providing real-time financial insights.
  3. Microsoft's new Project Ire is an AI tool for classifying malware, showing promise in improving cybersecurity measures.

About Fight to Repair Weekly

Fight to Repair • 19 implied HN points • 30 Dec 20
🕹 Technology Cybersecurity
  1. Repair journalism is not adequately covering the right to repair, though the topic deserves more attention and focus.
  2. The battle for a digital right to repair encompasses issues beyond just fixing broken devices, touching on areas like environmental sustainability, market consolidation, and digital rights.
  3. The Fight to Repair Weekly newsletter aims to delve deeper into the significant, overarching themes related to the right to repair, bridging the gap in media coverage and exploring the broader implications of repair rights.

The Second Half of Cloud Computing

CyberSecurityMew • 1 HN point • 01 Mar 24
🕹 Technology Cybersecurity
  1. Cloud computing has reshaped enterprise IT, offering flexibility, scalability, and speed in deploying new businesses.
  2. Issues with Personal Computers include costly hardware maintenance, software bloat, security concerns, and challenging updates.
  3. Cloud-native instant workspace is the future of cloud computing on the client side, providing secure, seamless, and device-independent work environments.
Get a weekly roundup of the best Substack posts, by hacker news affinity:

Breaking into Red Teaming: Phase 2

Locks and Leaks • 1 HN point • 27 Feb 24
🕹 Technology Cybersecurity
  1. Become proficient at lockpicking as a physical red teamer to develop valuable skills and connect with relevant communities.
  2. Master social engineering techniques by knowing yourself and using your personality traits to your advantage in engagements.
  3. Enhance your Open-Source Intelligence (OSINT) skills, understand PACS attacks, and learn bypass techniques to excel as a physical red teamer.

We Need More FUD

The Security Industry • 18 implied HN points • 17 Feb 23
🕹 Technology Cybersecurity
  1. CISOs should not adopt the board's language but focus on educating and evoking emotions to get support
  2. Board members often make decisions based on emotions rather than data or risk metrics
  3. Instilling fear through education can be an effective way for CISOs to get the necessary resources

Issue #81

Infra Weekly Newsletter • 9 implied HN points • 07 Feb 24
🕹 Technology Cybersecurity
  1. Some big companies are firing many employees, causing concern in the industry
  2. A well-known Kubernetes company, Weaveworks, is closing down
  3. TikTok's parent company has open-sourced a new tool for Kubernetes Federation

20241110

Curious futures (KGhosh) • 4 implied HN points • 10 Nov 24
🕹 Technology Cybersecurity
  1. The era of traditional bosses is fading. People now want leaders who can guide and mentor them instead.
  2. Cybersecurity is becoming more important as technology evolves. There are new risks like deepfakes and cyberattacks that need attention.
  3. Innovation is happening with technology and the environment. New ideas, like using mushrooms in robotics, show how we can combine nature and tech.

Issue #80

Infra Weekly Newsletter • 9 implied HN points • 29 Jan 24
🕹 Technology Cybersecurity
  1. Read about infrastructure topics and news every week on infraweekly.substack.com
  2. Consider switching from Docker to Podman, especially if your company hasn't paid for Docker Desktop
  3. Learn how to save money on AWS with some basic but useful advice

Issue #79

Infra Weekly Newsletter • 9 implied HN points • 22 Jan 24
🕹 Technology Cybersecurity
  1. Martin Fowler updated the CI article with trunk-based development.
  2. Applying Deming's principles to cybersecurity can improve practices and organizational changes.
  3. Polar language is P-complete, not Turing-complete, which is essential for performance and user-written policies.

Zoominfo Copilot API, Credibur $2.2M, Intruder Autoswagger

The API Changelog • 1 implied HN point • 29 Jul 25
🕹 Technology Cybersecurity
  1. Stripe has bought Orum, a company that helps with real-time payments and managing transactions. This is part of Stripe's plan to get even better at handling payments quickly.
  2. The API Security Unconference is coming up and is all about important talks on keeping APIs safe from new threats. It's a great chance to learn and network with others who care about API security.
  3. Intruder has launched a free tool called Autoswagger that checks APIs for security flaws. This can help businesses protect themselves from common vulnerabilities that hackers exploit.

Cybersecurity Pioneers

The Security Industry • 13 implied HN points • 15 Jul 23
🕹 Technology Cybersecurity
  1. The Security Yearbook 2023 highlights the personal stories of cybersecurity pioneers.
  2. Cybersecurity pioneers like Gil Shwed, Eva Chen, and Kailash Katkar have made significant impacts on the industry.
  3. The industry's history includes key figures like Barry Schrager, Marty Roesch, and other notable contributors.

Samsung + Instacart, Jentic $4M, US Treasury Cyberattack

The API Changelog • 3 implied HN points • 07 Jan 25
🕹 Technology Cybersecurity
  1. A cyberattack targeting the US Treasury shows that hackers linked to the Chinese government are still a threat. This attack involved stealing access keys and highlighted serious security flaws.
  2. Samsung teamed up with Instacart to allow grocery shopping through smart refrigerators starting in 2025. This partnership aims to make food shopping easier and smarter for users.
  3. The AI startup Jentic raised €4 million to grow its team and develop its AI integration platform. The platform aims to help different AI agents communicate and work together more smoothly.

2022 M&A in Cybersecurity

The Security Industry • 15 implied HN points • 02 Apr 23
🕹 Technology Cybersecurity
  1. In 2022, the cybersecurity industry saw 332 acquisitions, with the largest deal being VMware acquired by Broadcom for $60 billion.
  2. Most of the acquisitions in 2022 were strategic, where one vendor acquired another, like Google buying Mandiant.
  3. Special Purpose Acquisition Corps (SPACs) were used for acquiring cybersecurity companies, with notable large deals taking advantage of lower valuations.

The Art of Moving Target Defense

Phoenix Substack • 14 implied HN points • 04 May 23
🕹 Technology Cybersecurity
  1. Traditional defense strategies like firewalls and antivirus are no longer sufficient against sophisticated cyber attacks.
  2. Moving target defense involves knowing your network, understanding enemy tactics, and using deception to confuse attackers.
  3. Implementing a moving target defense strategy can help organizations stay ahead of cyber threats by evolving and adapting their defense tactics.

Women in Cyber

The Security Industry • 15 implied HN points • 08 Mar 23
🕹 Technology Cybersecurity
  1. 72 cybersecurity vendors have female CEOs, making up 2.1% of the total.
  2. The US has the highest number of cybersecurity companies with female CEOs at 44.
  3. There is hope for more female-led cybersecurity vendors in the future.

Autonomous Adaptive Security for the Cloud: The Power of Automated Moving Target Defense

Phoenix Substack • 14 implied HN points • 17 Apr 23
🕹 Technology Cybersecurity
  1. Automated Moving Target Defense (AMTD) is a dynamic security strategy that can protect cloud infrastructure.
  2. AMTD increases system entropy through frequent modifications, creating a more dynamic and unpredictable security environment.
  3. AMTD can adapt quickly to emerging threats by automatically triggering modifications to the attack surface.

The Dark Side of Certificates: Exposing Your Network to Hackers

relaymonkey • 2 HN points • 14 Apr 23
🕹 Technology Cybersecurity
  1. Be cautious of the information exposed in TLS/SSL certificates, as it can significantly expand the attack surface for malicious actors.
  2. Utilizing tools like Simple Hostname Discovery (SHD) can help identify potential security risks in the SAN field of certificates.
  3. Prevent misuse of the SAN field in certificates by using dedicated certificates for each hostname, rotating certificates regularly, and implementing SSL certificate pinning for mobile applications.

Slack AI data exfiltration from private channels via indirect prompt injection

PromptArmor Blog • 4 HN points • 20 Aug 24
🕹 Technology Cybersecurity
  1. There is a serious risk in Slack where attackers can steal sensitive information from private channels. They can do this by tricking the AI into revealing data through malicious instructions.
  2. The inclusion of files and documents into Slack AI's responses has greatly increased the potential for these attacks. Now, attackers could even hide malicious instructions within documents that users upload.
  3. Slack's recent changes have made it easier for attackers to exploit these vulnerabilities without needing direct access to the private channels. It's crucial for organizations to manage and restrict these features to protect sensitive information.

Issue #36

Infra Weekly Newsletter • 13 implied HN points • 21 Feb 23
🕹 Technology Cybersecurity
  1. Nomad 1.5 introduces single sign-on and dynamic node metadata to improve security and accessibility
  2. Guidance provided on creating a secure AWS Organizations management role by reducing attack surface
  3. Explore a break-glass solution with HashiCorp Boundary + Vault for emergency access to critical resources

The Rise of the Field CISO

Software Snack Bites • 6 implied HN points • 09 Mar 24
🕹 Technology Cybersecurity
  1. Field CISOs, with their experience, can help companies stand out in the noise of the security industry by showcasing real-world insights and demonstrating ROI.
  2. The concept of leveraging a Field CISO is similar to Developer Relations in tech and Product Evangelists in SaaS, building expert relationships with potential users to drive sales and engagement.
  3. The role of Field CISOs is crucial in the evolving landscape of cybersecurity filled with complex technologies and acronyms, offering a trusted resource to guide customers through the confusion.

Issue #61

Infra Weekly Newsletter • 9 implied HN points • 04 Sep 23
🕹 Technology Cybersecurity
  1. UK experienced severe air traffic control system fault on August 29
  2. Oracle CloudWorld coming to Las Vegas on September 18-21, 2023
  3. Google introduces GKE Enterprise for managing Kubernetes environments

Memory Unsafety is a Culture Issue

Burning the Midnight Coffee • 6 HN points • 03 Mar 24
🕹 Technology Cybersecurity
  1. Memory unsafety is not just a technical problem, but a cultural issue, requiring a shift in mindset within the software development community.
  2. The convenience factor plays a crucial role in memory safety; even safe languages have pathways to create memory vulnerabilities that may be more convenient to use than safe alternatives.
  3. Prioritizing measures like preventing buffer overflows in languages like C and C++ can have a significant impact on reducing vulnerabilities before focusing on more complex memory management concerns.

Issue #58

Infra Weekly Newsletter • 9 implied HN points • 14 Aug 23
🕹 Technology Cybersecurity
  1. HashiCorp's new license restricts usage and may impact product dependencies.
  2. DevSecOps conferences like ChefConf are upcoming events to look out for.
  3. Concerns about vulnerabilities in data centers highlight the importance of security measures.

Issue #54

Infra Weekly Newsletter • 9 implied HN points • 11 Jul 23
🕹 Technology Cybersecurity
  1. PostgreSQL 16 Beta 2 and New Heroku Postgres Plans announced.
  2. S3 is not a backup solution but can be used to create one.
  3. Importance of protecting confidential virtual machines and understanding confidential computing.

Issue #52

Infra Weekly Newsletter • 9 implied HN points • 26 Jun 23
🕹 Technology Cybersecurity
  1. Compare K3s and MicroK8s for efficient Kubernetes alternatives.
  2. Linux 6.5 adds support for thinly provisioned storage.
  3. Consider running Kubernetes on bare metal for better control and performance.

CDK Dependency Strategies

Making It Up • 1 HN point • 11 Dec 23
🕹 Technology Cybersecurity
  1. Expanding the `props` object is a common method of declaring dependencies in CDK.
  2. Using dynamic references via SecretsManager and ParameterStore helps decouple resources in CDK.
  3. Start with simpler dependency methods and only introduce complexity when needed in your CDK application.

A Brave IT guy

My Home Office Hacks • 5 implied HN points • 26 Feb 24
🕹 Technology Cybersecurity
  1. Consider trying the Brave browser for enhanced security and speed, recommended by an IT professional.
  2. Utilize voice-to-text technology to save time when typing a lot of content, but remember to review and edit due to accuracy issues.
  3. Get featured in My Home Office Hacks by sharing your work-from-home profile and business details.

Jack the Dripper & Zelensky the Ripper: Enterprise-IT-as-a-Service & Digital Mercenaries

Dr. Pippa's Pen & Podcast • 9 implied HN points • 14 Apr 23
🕹 Technology Cybersecurity
  1. Digital footprints can reveal online activities and lead to consequences in the real world.
  2. Outsourcing military IT systems to private contractors can pose risks regarding national security and loyalty.
  3. Young IT specialists may lead double lives, engaging in dark net activities while holding day jobs with access to classified information.

Lỗ hổng chuyển tiền hay là suy nghĩ như một hacker

Thái | Hacker | Kỹ sư tin tặc • 19 implied HN points • 04 Jan 20
🕹 Technology Cybersecurity
  1. When designing an API for money transfers in a mobile banking system, it's crucial to consider user authentication and authorization to prevent fraudulent activities.
  2. In mobile apps, the challenge lies in implementing user authentication without standard mechanisms like HTTP cookies, requiring solutions like OAuth or JWT.
  3. Creating security solutions for mobile banking requires a blend of applied security and product security expertise, emphasizing the importance of identity access management beyond just finding vulnerabilities.

Một chuyến đi Harvard

Thái | Hacker | Kỹ sư tin tặc • 19 implied HN points • 02 Jan 20
🕹 Technology Cybersecurity
  1. Harvard Kennedy School invites high-ranking leaders from Vietnam to discuss national governance policies with Harvard professors and experts annually.
  2. Addressing cybersecurity challenges in Vietnam requires raising awareness about vulnerabilities, such as high-profile breaches in banking and government sectors.
  3. Ongoing cybersecurity incidents in Vietnam point to the need for improved data protection measures and compliance with cybersecurity laws.

Interview with the ETSI Standards Organization That Created TETRA "Backdoor"

Zero Day • 7 HN points • 25 Jul 23
🕹 Technology Cybersecurity
  1. TETRA radio communication technology used by police and critical infrastructure was found to have a backdoor, reducing encryption strength.
  2. Keeping encryption algorithms secret can hinder security, as seen in the TETRA case where a deliberate weakness was discovered.
  3. ETSI created new secret algorithms to address vulnerabilities, but the debate continues on whether secrecy is the best approach for security.

New Start @ www.tailrisk.com

The Refractor • 7 implied HN points • 21 Jul 23
🕹 Technology Cybersecurity
  1. There is a popular consensus that the good economic times in the U.S. ended about 50 years ago.
  2. Progress is like velocity measured over time, and innovation speed is crucial for technological advancement.
  3. Tail risk explores low probability, high impact events across various fields to prevent catastrophic consequences.

Cybersecurity IPOs

The Security Industry • 5 implied HN points • 05 Dec 23
🕹 Technology Cybersecurity
  1. There is speculation that the two-year drought in cybersecurity IPOs may end in 2024.
  2. Some cybersecurity vendors are growing but are being taken private instead of staying public.
  3. Companies with over 1,000 employees and strong growth rates might be ready for IPOs in the cybersecurity sector.