Learnings

<p>Django REST Framework quick security tips </p>

<p>Four pillars to maintain/improve your codebase health </p>

<p>Drop-in replacement for Python's CSV library that tries to mitigate CSV injection attacks </p>

<p>Cacheable S3 signed URLs: </p>

<p>Malicious npm Package Poses as Tailwind Tool </p>

<p>Why do Invalid Host header errors exist, what are attackers trying to achieve? </p>

<p>How SSL/TLS handshare works... in a comic! </p>

<p>Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks. </p>

<p>django-axes a plugin for keeping track of suspicious login attempts for your Django based website and implementing simple brute-force attack blocking: </p>

<p>Threat Alert: First Python Ransomware Attack Targeting Jupyter Notebooks: </p>

<p>How Phishers Are Slinking Their Links Into LinkedIn: </p>

<p>A capability-safe language would have minimized the impact of, or even prevented, the log4j vulnerability: </p>

<p>Never, Ever, Ever Use Pixelation for Redacting Text </p>

<p>10 Unknown Security Pitfalls for Python: </p>

<p>"Critical security vulnerabilities on OpenSea’s platform that, if exploited, could have led hackers to hijack user accounts and steal entire crypto wallets of users, by sending malicious NFTs" </p>

<p>Content Security Policy Cheat Sheet </p>

<p>A tool for scanning Python environments for known vulnerabilities: </p>

<p>An Overview of Best Practices for Security Headers: </p>

<p>API Security Best Practices MegaGuide: </p>

<p>Top 10 Container Security Best Practices </p>

<p>May HSTS block access to your site when you renew your SSL certificate? </p>

<p>Stop using your work laptop or phone for personal stuff (HN discussion): </p>

<p>Data Breach Investigations Report Highlights: </p>

<p>Why you shouldn't use ENV variables for secret data: </p>