Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
InfoSec Book Club: Whats On Your Fall Reading List?
Newest First  |  Oldest First  |  Threaded View
mhasib
mhasib,
User Rank: Apprentice
9/25/2014 | 8:27:38 PM
Re: Good Reading
The second edition of my book Cybersecurity Leadership: Powering the Modern Organization was released this month. It deals with the people and governance aspects of cybersecurity and provides a leadership model to engage everyone in an organization into a culture of cybersecurity. 
ODA155
ODA155,
User Rank: Ninja
9/22/2014 | 1:59:32 PM
Re: Good Reading
Hi Kelly,

I was just thinking about putting in an order on Amazon for that, but the Audio CD version was not listed, I should check B&N.  But here is something that I was also looking at that should tie-in pretty nicely with your recommendation.

 

@War: The Rise of the Military-Internet Complex Hardcover – November 11, 2014
by Shane Harris

 

 
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
9/16/2014 | 8:35:18 AM
Re: Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of Americas Cyber Dependencies
Thanks for the book recommendation, @PaulH698. The author certainly has the credentials to make a strong case! Among them: Vice Chair of the Board of Trustees of The RAND Corporation, member of the Defense Policy Board and The President's Intelligence Advisory Board, a Director of the Center for a New American Security and from the spring of 2007 through the Presidential election of 2008, Dr. Danzig was a senior advisor to Senator Obama on national security issues and he was the 71st Secretary of the Navy. 

You can find a link to a PDF or Kindle version of Surviving on a Diet of Poisoned Fruit here:

http://www.cnas.org/surviving-diet-poisoned-fruit.

 

 
PaulH698
PaulH698,
User Rank: Apprentice
9/15/2014 | 11:49:14 PM
Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of Americas Cyber Dependencies
It is free. Available in .pdf, kindle and tablet formats. While written from an American viepoint robably the best overview of what democratic nations need to do to preserve the benefits of an open Internet. Google the title in order to find it.

'"Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of America's Cyber Dependencies" by the Honorable Richard Danzig offers key insights about how to improve U.S. national security policymaking to address cyber insecurity. In the report, the author examines existing information technology security weaknesses and provides nine specific recommendations for the U.S. government and others to cope with these insecurities.'
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
9/11/2014 | 11:32:02 AM
Re: Good Reading
I loved The Lowlands, but Cory Doctorow's Homeland sounds intriguing. I'm putting it on my to read list.

Keep your book recommendations coming! They're great. 
Kelly Jackson Higgins
Kelly Jackson Higgins,
User Rank: Strategist
9/11/2014 | 10:47:41 AM
Re: Good Reading
I'm looking forward to reading Kim Zetter's "Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon," which comes out in November. 
theb0x
theb0x,
User Rank: Ninja
9/11/2014 | 10:29:50 AM
Re: Good Reading
A must read: Ghost in the Wires by Kevin Mitnick.
aws0513
aws0513,
User Rank: Ninja
9/11/2014 | 10:22:44 AM
Good Reading
That is quite a good list of books.  Three of them I have already delved.
One book that I treat as a personal reading requirement every year is The Effective Executive by Peter Drucker.

The Effective Executive was first published in 1966, but the content in the book is timeless.  At a short ~200 pages in size, the book is pure sage advice for anyone who is in a leadership or management role.  The concepts in the book are foundational and it is my opinion that anyone who aspires to become a leader in their trade, whatever it may be, read and adopt the concepts and practices it provides.  At approximately $10 USD, the price is very reasonable.

I re-read the book every year as a mental "reset" for my management skills.  It is easy for any of us to get wrapped around the axle on unproductive or less important things.  It is my opinion that The Effective Executive can help anyone in any trade rethink the drink in regards to priorities and resource management.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Creating an Effective Incident Response Plan
Security teams are realizing their organizations will experience a cyber incident at some point. An effective incident response plan that takes into account their specific requirements and has been tested is critical. This issue of Tech Insights also includes: -a look at the newly signed cyber-incident law, -how organizations can apply behavioral psychology to incident response, -and an overview of the Open Cybersecurity Schema Framework.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-35120
PUBLISHED: 2022-12-01
IXPdata EasyInstall 6.6.14725 contains an access control issue.
CVE-2022-43333
PUBLISHED: 2022-12-01
Telenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution (RCE) vulnerability in the component action_export_control.php.
CVE-2022-44211
PUBLISHED: 2022-12-01
In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings.
CVE-2022-44212
PUBLISHED: 2022-12-01
In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel.
CVE-2022-23737
PUBLISHED: 2022-12-01
An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improper privileges to create or delete pages via the API. To exploit this vulnerability, an attacker would need to be added to an organization's repo with write permissions. This vulner...