Books

ELIZA fooled people in 1966. Here’s how to build an AI agent that doesn’t, and prove it.

SOC 2 doesn’t have to be confusing. This practical handbook walks you through building, documenting and auditing a compliance program from the ground up. Packed with real-world examples, templates and checklists, it gives founders, security teams, engineers and auditors a clear path from first steps to continuous compliance.

Understand and secure Kubernetes from foundational trust boundaries to practical cluster operations. Visual explanations and examples cover identity, workloads, networking, policy, and incident response.

Short Description of the BookSecuring Modern AI Applications is a practical guide to securing LLM-powered applications, RAG systems, AI agents, and modern AI development environments.The book explains AI-specific threats such as prompt injection, data leakage, RAG poisoning, insecure tool use, agent abuse, and AI supply-chain risks while also covering traditional application security, privacy, governance, secure development, monitoring, testing, and red teaming.Designed for developers, AI engineers, cybersecurity professionals, architects, and technology leaders, the book focuses on practical principles that remain useful as AI technologies continue to evolve.Build AI. Secure AI. Govern AI.

Security is no longer something you add after a system is built. It must be designed from the beginning.Security by Design explores how modern digital systems can be built to reduce risk, limit unauthorized access, protect sensitive data, detect threats, contain failures, and recover from attacks.From secure architecture and cybersecurity foundations to privacy, cloud security, DevSecOps, AI security, and digital resilience, this book provides a practical foundation for building systems that remain secure in an increasingly connected and AI-powered world.

From one laptop to real users: APIs, workers, SLOs, traces, shadow scoring, rollbacks, cost, routing, security and incidents, drawn and built in Python.

Threat Hunting starts with a question, not an alert.You do not need to already be a Threat Hunter to start thinking like one.CYBER HUNTER Project is a practical guide designed both for people taking their first steps into Threat Hunting and for cybersecurity professionals who want to sharpen the way they hunt, investigate and build detections.The book starts with the foundations: what Threat Hunting really is, how a hunter thinks, how to build a hypothesis, what evidence to look for, and how Threat Hunting differs from Threat Detection. From there, it moves progressively into real hunting investigations, showing how those ideas work against actual security telemetry.If you are starting from zero, CYBER HUNTER Project gives you a structured path into the field without assuming that you already know how to hunt.If you already work in a SOC, Incident Response, Detection Engineering, Threat Intelligence or Cybersecurity, it gives you new hunting ideas, investigation techniques and practical examples that you can adapt to your own environment.And if you are already a Threat Hunter, the goal is to help you go further: challenge assumptions, build stronger hypotheses, correlate evidence differently, discover new hunting opportunities and turn successful investigations into reusable detections.Across Email, Endpoints, Networks, Threat Intelligence, Identity, Software and Cloud Applications, CYBER HUNTER Project takes you through practical scenarios involving phishing, ransomware behaviour, suspicious authentication, network activity, threat intelligence feeds, cloud collaboration, device code authentication and many other hunting opportunities.Inside of the book, you will find:• Threat Hunting fundamentals explained from the ground up • A practical approach to building Hunt Hypotheses • Real, self-contained Threat Hunting investigations • Evidence-driven investigation strategies • Detection Opportunities derived from successful hunts • Detection Libraries with additional hunting ideas • Companion KQL queries for Microsoft Defender XDR and Microsoft Sentinel • MITRE ATT&CK mappings and reference material • Practical Threat Intelligence and IOC/IOA analysis • Ideas you can adapt to build your own huntsThe companion queries use KQL and Microsoft security telemetry, but the hunting methodology is intentionally vendor-neutral. The objective is not to memorize queries. It is to understand why a hunt works, what evidence makes it valuable, and how to reproduce that thinking on your own platform.Start with the fundamentals. Learn through real hunts. Build your own hypotheses. Improve the way you investigate.Whether this is your first Threat Hunting book or you already hunt threats every day, this project is designed to become a practical reference you can keep beside you and return to whenever you need your next hunting idea.The logic is the point, not the dialect.

AI agents introduce new security risks that traditional approaches often fail to address. This handbook shows you how to identify threats, build effective sandboxes and enforce least-privilege access. With practical examples and production-ready implementations, it gives you the tools to build AI systems that are secure by design.

Across every chapter in this book, we'll look at real software, break it down and put it back together again so we can use it. We'll encounter a stripped binary, a scrambled algorithm, an undocumented file format, a mobile app protecting its backend, a web client, a hardened sample that fights back, and a live protocol whose secrets only exist while it's running. We're not stopping at one clever trick either. We'll get the job done to a standard that's verifiable and someone else can trust.

Ready to take your infrastructure skills to the next level? Mastering Pulumi shows you how to build, deploy and manage real-world infrastructure across multiple clouds using familiar programming languages. From your first project to complex enterprise platforms, discover practical techniques and proven patterns to make infrastructure more reliable, secure and easier to maintain.

Ready to take Supabase beyond the basics? Learn how to build real-world applications from the ground up, with secure database design, multi-tenant architecture and performance tuning at every stage. Packed with practical code and lessons from production engineering, this book shows you how to build applications that are ready for the demands of the real world.

Master the art of securing Industrial IoT with NIST Lightweight Cryptography. This practical guide walks you through building a complete, zero-trust cyber-physical system—from ASCON-encrypted C99 firmware on the ESP32 to secure Modbus bridging and PLC integration—without sacrificing battery life or deterministic performance.

Patching vulnerabilities is only part of the job. Beyond the Patch explores how software weaknesses arise, how attackers find and exploit them and what it takes to stop them before they become real threats. From code-level analysis to practical defense strategies, this book offers the knowledge and tools to build more secure software and stay ahead of evolving attacks.

Industrial systems and smart buildings are increasingly connected, creating new opportunities for cyberattacks. This book explores the threats, vulnerabilities and security challenges facing modern infrastructure, with practical guidance on protecting industrial networks and building automation systems using proven architectures, established standards and lessons drawn from real-world incidents.