Security Knowledge

Ai Security Security Hub Ai Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
API Security Securing Application Programming Interfaces: authentication, authorization, input validation, rate limiting and monitoring for API abuse.
Application Security Hub Application flaws (injection, auth bypass) feed the CVE pipeline; secure SDLC is the primary control.
Authentication and Authorization Authentication proves who you are; authorization decides what you can do. Core security concepts with common threats, detection and mitigation.
Browser Security Security Hub Browser Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Cloud Native Security Security Hub Cloud Native Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Code Review, SAST and DAST Using code review, static analysis (SAST) and dynamic testing (DAST) to find and fix vulnerabilities in software.
Container Security Security Hub Container Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Cryptography Security Hub Cryptography security: a consolidated hub covering core principles, common threats, detection and mitigation.
Broken Access Control The most common web vulnerability class: missing or flawed authorization letting users access objects, functions or data they should not see.
Database Security Security Hub Database Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
AI-Human Review and Defensive Grounding The discipline of treating AI output as untrusted until human-reviewed and evidence-backed, and designing AI-assisted workflows to preserve human accountability.
Data Security Hub Data theft drives extortion and compliance risk; classification and encryption protect at rest and in transit.
Insecure Deserialization Untrusted data deserialized by an app can become an injection vector: how insecure deserialization leads to arbitrary code execution or bypasses.
Desktop Hardening Security Hub Desktop Hardening security: a consolidated hub covering core principles, common threats, detection and mitigation.
DevSecOps and Shift-Left Security Integrating security into the software delivery lifecycle: shift-left testing, CI/CD pipelines, and developer enablement.
Dns Security Security Hub Dns Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Email Security Security Hub Email Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Endpoint Security Hub Endpoints are the primary execution surface for malware; EDR and hardening raise the cost of compromise.
Hashing Cryptographic hashing: a one-way function used to verify integrity, store password verifiers and fingerprint files. Common use, pitfalls and detection.
HTTP, Sessions and Cookies How the web keeps state (cookies, sessions) over stateless HTTP, and the security properties that protect session integrity and confidentiality.
Identity Mfa Security Hub Identity Mfa security: a consolidated hub covering core principles, common threats, detection and mitigation.
Industrial Ics Security Security Hub Industrial Ics Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Infrastructure as Code (IaC) Security Securing infrastructure defined and deployed as code: misconfigurations, secret handling, policy-as-code and drift.
Insider Threat Security Hub Insider Threat security: a consolidated hub covering core principles, common threats, detection and mitigation.
How to Analyze Indicators of Compromise Which tools to use for which IOC family, how to interpret their output, and how to pivot across indicators during an investigation.
Iot Security Security Hub Iot Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
JSON Web Tokens (JWT) JWT as a stateless token format: structure, signature verification, common vulnerabilities (alg confusion, clock skew, leaked secrets) and mitigation.
Kubernetes Security Security Hub Kubernetes Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Memory Safety Security Hub Memory Safety security: a consolidated hub covering core principles, common threats, detection and mitigation.
Misconfiguration Security Hub Misconfiguration security: a consolidated hub covering core principles, common threats, detection and mitigation.
Mobile Device Security Security Hub Mobile Device Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Network Security Hub Network segmentation, monitoring and zero-trust controls limit lateral movement after initial access.
OAuth 2.0, SAML and SSO How federated identity and single sign-on (SSO) work, common flows (OAuth 2.0 / OIDC / SAML), risk patterns and mitigation.
Patch Management Security Hub Patch Management security: a consolidated hub covering core principles, common threats, detection and mitigation.
Phishing & Social Engineering Hub Phishing remains the top initial-access vector for ransomware and espionage, leveraging email, SMS (smishing) and voice (vishing).
Physical Security Security Hub Physical Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Public Key Infrastructure (PKI) PKI manages certificates and trust for authenticating servers/devices and encrypting data. Concepts, trust-chain failures, detection and mitigation.
Prompt Injection and LLM Security How prompt injection and other LLM attacks work, the risks they pose to AI applications and guardrails, detection and mitigation.
Ransomware Readiness Security Hub Ransomware Readiness security: a consolidated hub covering core principles, common threats, detection and mitigation.
SBOM and Software Supply Chain Security Software Bill of Materials and managing third-party dependencies, provenance and vulnerabilities in the software supply chain.
Secrets Management Hub Exposed secrets (keys, tokens, passwords) are a leading supply-chain and cloud compromise vector.
Secure Coding Security Hub Secure Coding security: a consolidated hub covering core principles, common threats, detection and mitigation.
Security Awareness Hub Humans are both the top risk and the top defense; awareness programs measurably cut phishing losses.
Soc Operations Security Hub Soc Operations security: a consolidated hub covering core principles, common threats, detection and mitigation.
Social Engineering Hub Social engineering abuses human trust rather than technical flaws, often multi-stage with attacker-controlled communication.
Supply Chain Attacks Security Hub Supply Chain Attacks security: a consolidated hub covering core principles, common threats, detection and mitigation.
Threat Detection & Hunting Hub Detection engineering turns raw telemetry into early warning; hunting surfaces attacker behavior automation misses.
Threat Modeling Hub Threat modeling finds design weaknesses before attackers do, prioritizing where defenses matter.
Serverless Security Security Hub Serverless Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Transport Layer Security (TLS) TLS encrypts and authenticates traffic in transit. Core concepts, cipher and version pitfalls, detection and mitigation.
Types of Indicators of Compromise (IOCs) The common categories of indicators of compromise — network, host, file and account signals — and how security teams use them for detection and hunt.
Vulnerability Prioritization Security Hub Vulnerability Prioritization security: a consolidated hub covering core principles, common threats, detection and mitigation.
What is an Indicator of Compromise (IOC)? An indicator of compromise (IOC) is forensic evidence — an IP, domain, URL, hash or other artifact — observed in malware or attack activity. Learn the IOC types, lifecycle and how to use them without treating a lookup as a verdict.
What is Malware? Malware is any software intentionally designed to cause damage or gain unauthorized access. Learn its types, how it spreads, and how to defend.
What is MITRE ATT&CK — The Common Language of Adversary Behavior A plain-language explanation of the MITRE ATT&CK framework: what it is, how tactics, techniques and procedures are organized, why it matters for detection and response, and how to use it in an investigation.
What is Phishing? Phishing is a social engineering attack that tricks people into revealing credentials or installing malware. Learn to recognize and avoid it.
Wireless Security Security Hub Wireless Security security: a consolidated hub covering core principles, common threats, detection and mitigation.
Zero Trust Security Hub Zero Trust security: a consolidated hub covering core principles, common threats, detection and mitigation.