Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Comments
InfoSec Book Club: What’s On Your Fall Reading List?
Threaded  |  Newest First  |  Oldest First
aws0513
aws0513,
 User Rank: Ninja
9/11/2014 | 10:22:44 AM
Good Reading
That is quite a good list of books.  Three of them I have already delved.
One book that I treat as a personal reading requirement every year is The Effective Executive by Peter Drucker.

The Effective Executive was first published in 1966, but the content in the book is timeless.  At a short ~200 pages in size, the book is pure sage advice for anyone who is in a leadership or management role.  The concepts in the book are foundational and it is my opinion that anyone who aspires to become a leader in their trade, whatever it may be, read and adopt the concepts and practices it provides.  At approximately $10 USD, the price is very reasonable.

I re-read the book every year as a mental "reset" for my management skills.  It is easy for any of us to get wrapped around the axle on unproductive or less important things.  It is my opinion that The Effective Executive can help anyone in any trade rethink the drink in regards to priorities and resource management.
theb0x
theb0x,
 User Rank: Ninja
9/11/2014 | 10:29:50 AM
Re: Good Reading
A must read: Ghost in the Wires by Kevin Mitnick.
Kelly Jackson Higgins
Kelly Jackson Higgins,
 User Rank: Strategist
9/11/2014 | 10:47:41 AM
Re: Good Reading
I'm looking forward to reading Kim Zetter's "Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon," which comes out in November. 
Marilyn Cohodas
Marilyn Cohodas,
 User Rank: Strategist
9/11/2014 | 11:32:02 AM
Re: Good Reading
I loved The Lowlands, but Cory Doctorow's Homeland sounds intriguing. I'm putting it on my to read list.

Keep your book recommendations coming! They're great. 
ODA155
ODA155,
 User Rank: Ninja
9/22/2014 | 1:59:32 PM
Re: Good Reading
Hi Kelly,

I was just thinking about putting in an order on Amazon for that, but the Audio CD version was not listed, I should check B&N.  But here is something that I was also looking at that should tie-in pretty nicely with your recommendation.

 

@War: The Rise of the Military-Internet Complex Hardcover – November 11, 2014
by Shane Harris

 

 
mhasib
mhasib,
 User Rank: Apprentice
9/25/2014 | 8:27:38 PM
Re: Good Reading
The second edition of my book Cybersecurity Leadership: Powering the Modern Organization was released this month. It deals with the people and governance aspects of cybersecurity and provides a leadership model to engage everyone in an organization into a culture of cybersecurity. 
PaulH698
PaulH698,
 User Rank: Apprentice
9/15/2014 | 11:49:14 PM
Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of America’s Cyber Dependencies
It is free. Available in .pdf, kindle and tablet formats. While written from an American viepoint robably the best overview of what democratic nations need to do to preserve the benefits of an open Internet. Google the title in order to find it.

'"Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of America's Cyber Dependencies" by the Honorable Richard Danzig offers key insights about how to improve U.S. national security policymaking to address cyber insecurity. In the report, the author examines existing information technology security weaknesses and provides nine specific recommendations for the U.S. government and others to cope with these insecurities.'
Marilyn Cohodas
Marilyn Cohodas,
 User Rank: Strategist
9/16/2014 | 8:35:18 AM
Re: Surviving on a Diet of Poisoned Fruit: Reducing the National Security Risks of America’s Cyber Dependencies
Thanks for the book recommendation, @PaulH698. The author certainly has the credentials to make a strong case! Among them: Vice Chair of the Board of Trustees of The RAND Corporation, member of the Defense Policy Board and The President's Intelligence Advisory Board, a Director of the Center for a New American Security and from the spring of 2007 through the Presidential election of 2008, Dr. Danzig was a senior advisor to Senator Obama on national security issues and he was the 71st Secretary of the Navy. 

You can find a link to a PDF or Kindle version of Surviving on a Diet of Poisoned Fruit here:

http://www.cnas.org/surviving-diet-poisoned-fruit.

 

 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Promise and Reality of Cloud Security
Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises address the associated security risks. This report - a compilation of cutting-edge Black Hat research, in-depth Omdia analysis, and comprehensive Dark Reading reporting - explores how cloud security is rapidly evolving.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-2094
PUBLISHED: 2023-02-08
The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting
CVE-2022-43761
PUBLISHED: 2023-02-08
Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and changing the system configuration.
CVE-2023-0740
PUBLISHED: 2023-02-08
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.
CVE-2023-0741
PUBLISHED: 2023-02-08
Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.
CVE-2023-0742
PUBLISHED: 2023-02-08
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.