Books

This book covers every topic in the latest CISM exam syllabus, approaching topics from the ISACA perspective. It's 325+ pages organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the CISM exam without wasting time or money.

The book covers every topic in the latest CISSP exam syllabus, organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the exam without wasting time or money.

This book covers every topic in the latest CRISC exam syllabus, approaching topics from the ISACA perspective. It's 350+ pages, organized in a format following the syllabus that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the CRISC exam without wasting time or money.

The book covers every topic in the latest CCSP exam syllabus, with more than 400 pages organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the exam without wasting time or money.

This book covers every topic in the latest CISA exam syllabus, approaching topics from the ISACA perspective. It's 400+ pages, organized in a format following the syllabus that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the CISA exam without wasting time or money.

Hello! I'm Tony Robinson, a senior security analyst and rule writer on the Proofpoint Emerging Threats team. I write rules for the ETOPEN and ETPRO rulesets. My book will teach you about the ins and outs of Suricata, rules and rule writing in general, why the IDS software behaves a certain way, and how to get the most out of your Suricata deployments.

Hello! I'm Tony Robinson, a senior security analyst and rule writer on the Proofpoint Emerging Threats team. I write rules for the ETOPEN and ETPRO rulesets. My book will teach you about the ins and outs of Suricata, rules and rule writing in general, why the IDS software behaves a certain way, and how to get the most out of your Suricata deployments.

Linux is one of the best decisions you can make for your computer — but knowing where to start is the hard part. This guide walks you through everything: choosing a distribution, installing it, and using it confidently every day. It was written by Jay LaCroix of Learn Linux TV, for complete beginners. No prior experience required.

Real attacks don't live in slide decks. They live in the stack, the heap, the kernel. This code-first guide takes practitioners who already know C straight into how modern exploits and malware actually work, pairing every offensive technique with the defense built to stop it. Rigorous, hands-on, and strictly for isolated, legal, ethical lab use.

Master advanced web application security testing with Advanced Web Application Penetration Testing Strategies with Burp Suite. Learn practical techniques to find complex vulnerabilities, improve your workflow and deliver more effective security assessments.

The CISO's field guide to hardening ServiceNow, defending its APIs, and meeting NIS2, DORA, and EU AI Act obligations. Written by a former Principal Security Advisor in ServiceNow's Office of the CISO.

45% of AI-generated code has vulnerabilities. This book covers prompt injection, data leakage, secure coding with AI tools, MCP server hardening, agent sandboxing, supply chain security, and OWASP LLM compliance. 14 chapters with attack demos and defense code.

Secure boot is what separates a trusted device from a compromised one — but the chain of trust from hardware fuses to a verified OS is rarely explained clearly. This illustrated guide walks you through every layer: root of trust, key provisioning, bootloader handoffs, certificate chains, and real-world attack vectors. 8 chapters, all visual, zero fluff.

Learn how to find interesting behaviour and flaws in JavaScript. Reading this book you will find the latest and greatest techniques for hacking JavaScript and generating XSS payloads. Includes ways to construct JavaScript using only +[]()! characters. Never heard of DOM Clobbering? This book has all the details.

Official companion guide to the OWASP Juice Shop. Being a web application with a vast number of intended security vulnerabilities, the OWASP Juice Shop is supposed to be the opposite of a  best practice  or  template application  for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web apps.