Карьера разработчика. Стафф - круче, чем senior, Таня Рейли, 2025

Российская команда вторая на международной олимпиаде по кибербезопасности International Cybersecurity Olympiad (ICO)!

Соревнование проходило в 2 этапа. На первом этапе, который длился 3 часа, участники решали 7 задач на криптографию, PWN, веб и реверс. Второй этап, который продолжался 5 часов, включал в себя задания по пентесту, стеганографии и форензике.

Российскую команду к соревнованиям готовили эксперты Центрального университета и «Лаборатории Касперского».

Россию на олимпиаде представляли:
🥇Максим Никитин (золото).
🥇Алексей Новиков (золото).
🥇Ильдар Хужиахметов (золото).
🥇Георгий Балашов (серебро).
🥇Егор Заборов (серебро).
🥇Георгий Лагутин (серебро).
🥇Максим Еронин (бронза).
🥇Михаил Селин (бронза).

Следующая олимпиада ICO состоится в 2026 году в Сиднее, Австралия.

Источники:
Хабр + CTFNews

#ctf

Practical Cloud Security Handbook: Secure cloud deployments with AWS, Azure, GCP, and IBM Cloud, Shiv Kumar, 2025

This handbook systematically guides you from cloud security fundamentals, including the shared responsibility model, through various cloud-native architectural patterns and top cloud workloads like IAM, VPC, and containerization. You will gain a deep understanding of core security concepts, such as encryption and protocols, and then explore the practical, multi-cloud configurations for securing storage, network services, and identity access management across AWS, Azure, IBM, and GCP. The book progresses to vital operational security aspects like monitoring, encryption application, and robust testing. It further explores modern approaches like security as code, offering best practices for both cloud-native and non-cloud-native implementations, integrates DevSecOps principles, and concludes with crucial compliance and regulatory considerations.

Upon completing this handbook, you will possess a comprehensive, hands-on understanding of cloud security, enabling you to design, implement, and maintain secure cloud environments and confidently address today's complex cybersecurity challenges.

What you will learn:
- Secure workloads across AWS, Azure, GCP, and IBM.
- Implement Zero Trust security architectures.
- Use infrastructure as code for secure deployments.
- Set up DevSecOps pipelines with Jenkins and GitHub.
- Explore IAM, encryption, and network security controls.
- Detect and respond to security breaches effectively.
- Apply DevSecOps, Zero Trust, and compliance best practices.

#book #SecDevOps

Practical Cloud Security Handbook: Secure cloud deployments with AWS, Azure, GCP, and IBM Cloud, Shiv Kumar, 2025

Container Attack & Defend, Hadess, 2025

𝟯𝟬 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗦𝗲𝗮𝗿𝗰𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝘀 𝗬𝗼𝘂 𝗦𝗵𝗼𝘂𝗹𝗱 𝗞𝗻𝗼𝘄

These tools go beyond Google, providing insights into leaked credentials, vulnerabilities, DNS data, and more.

Here are some key categories of these search engines:
1️⃣ Leaked Credentials: Dehashed, IntelligenceX
2️⃣ DNS & Network Data: Security Trails, DNSDumpster, CRT.sh
3️⃣ Vulnerabilities & Exploits: ExploitDB, Packet Storm, Vulners
4️⃣ Threat Intelligence: Pulsedive, FullHunt, GreyNoise
5️⃣ Devices on the Internet: Shodan, Censys, Netlas, BinaryEdge
6️⃣ Archived Content & Research: WayBackMachine, PublicWWW
7️⃣ Source Code Search: SearchCode, Grep App
8️⃣ Info about Targets: ZoomEye, Hunter.io

Просто Делай! Делай Просто!, Оскар Хартманн, 2019