#cybercanon — Public Fediverse posts

🗞️ 𝕹𝖊𝖜𝖘𝖑𝖊𝖙𝖙𝖊𝖗 𝕴𝖓𝖈𝖔𝖒𝖎𝖓𝖌 🗞️

Be sure to subscribe to the #CyberCanon #Newsletter to be informed of our latest reviews, Hall of Fame book highlights, and more. In this edition, we give a special shout-out to our friends at #TheCyberNest.🪹

https://cybercanon.substack.com/p/cybercanon-april-2026-part-2

#CybersecurityBooks

🛡️ 𝗧𝗼𝗱𝗮𝘆'𝘀 𝗥𝗲𝘃𝗶𝗲𝘄! 🧱

This week, our #CyberCanon Committee provides you with Debra Baker's 𝘼 𝘾𝙄𝙎𝙊 𝙂𝙪𝙞𝙙𝙚 𝙩𝙤 𝘾𝙮𝙗𝙚𝙧 𝙍𝙚𝙨𝙞𝙡𝙞𝙚𝙣𝙘𝙚.

Read Jack Freund, Ph.D.'s assessment 👉 https://cybercanon.org/a-ciso-guide-to-cyber-resilience/

#CybersecurityBooks #CISO #CyberResilience

✍️ 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽𝗽𝗲𝗱 🪖

We have back-to-back reviews from Larry Pesce. Today, Larry offers his insights on Chris Miller's widely well-regarded book, 𝘾𝙝𝙞𝙥 𝙒𝙖𝙧, from a cyber pro's perspective:

📝 You'll want to read this review https://cybercanon.org/chip-war-the-quest-to-dominate-the-worlds-most-critical-technology/

🛍️ Reminder: Our review pages contain links to purchase via Amazon or your local bookstore via Bookshop(dot)org. Doing so supports the #CyberCanon, a 100% volunteer-run nonprofit. 🙏

#CybersecurityBooks | @haxorthematrix

Heads up - only a few days remain for this fantastic Wiley #CybersecurityBooks Humble Bundle.

👉https://www.humblebundle.com/books/cybersecurity-wiley-books-2025

Five are in the #CyberCanon library:

𝙎𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙀𝙣𝙜𝙞𝙣𝙚𝙚𝙧𝙞𝙣𝙜: https://cybercanon.org/security-engineering/
𝙎𝙚𝙘𝙧𝙚𝙩𝙨 𝙖𝙣𝙙 𝙇𝙞𝙚𝙨: https://cybercanon.org/secrets-and-lies-digital-security-in-a-networked-world/
𝙏𝙧𝙞𝙗𝙚 𝙤𝙛 𝙃𝙖𝙘𝙠𝙚𝙧𝙨: https://cybercanon.org/tribe-of-hackers/
𝙃𝙤𝙬 𝙄 𝙍𝙤𝙗 𝘽𝙖𝙣𝙠𝙨: https://cybercanon.org/how-i-rob-banks-and-other-such-places/
𝙏𝙝𝙚 𝙇𝙖𝙣𝙜𝙪𝙖𝙜𝙚 𝙤𝙛 𝘿𝙚𝙘𝙚𝙥𝙩𝙞𝙤𝙣: https://cybercanon.org/the-language-of-deception-weaponizing-next-generation-ai/

🎯𝗧𝗼𝗱𝗮𝘆 𝗶𝗻 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗛𝗶𝘀𝘁𝗼𝗿𝘆: 𝗧𝗵𝗲 𝗧𝗮𝗿𝗴𝗲𝘁 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵, 𝗗𝗲𝗰𝗲𝗺𝗯𝗲𝗿 𝟭𝟵, 𝟮𝟬𝟭𝟯

It started quietly, days before the holiday rush. Shoppers were filling stores, credit cards were swiping nonstop, and behind the scenes, a small foothold inside Target’s network was about to become one of the most infamous breaches in retail history.

💀 Attackers slipped in through a third-party HVAC vendor
🪲 Malware moved silently across point-of-sale systems
💳 40 million payment cards skimmed
🔏 70 million customers' data exposed

While many are (sadly) becoming numb to breach news nowadays, this disclosure, announced 12 years ago today, shook the industry. Boardrooms across the globe were confronted with the fact that cybersecurity wasn’t just an IT problem, but a critical business-wide issue.

The incident is covered very nicely in this Huntress article: https://www.huntress.com/threat-library/data-breach/target-data-breach

Many books in the #CyberCanon address themes related to the breach. Here are two recos to get you started:

𝙉𝙖𝙫𝙞𝙜𝙖𝙩𝙞𝙣𝙜 𝙩𝙝𝙚 𝘿𝙞𝙜𝙞𝙩𝙖𝙡 𝘼𝙜𝙚 discusses cyber risk at the board/executive level and uses high-profile cases to illustrate governance, risk oversight, and leadership implications. Our review📝: https://cybercanon.org/navigating-the-digital-age-the-definitive-cybersecurity-guide-for-directors-and-officers/

𝙏𝙝𝙚 𝘾𝙄𝙎𝙊 𝙋𝙡𝙖𝙮𝙗𝙤𝙤𝙠 is your go-to for structured guidance on integrating 3rd party risk into enterprise security strategy. Our review📝: https://cybercanon.org/the-ciso-playbook/

#CybersecurityBooks #CybersecurityHistory #DataBreach

🗓️𝗡𝗼𝘃𝗲𝗺𝗯𝗲𝗿 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄 𝗥𝗲𝗰𝗮𝗽!📚

It's already a couple of weeks into December, but we'd be remiss not to share our monthly review recap for November...

🧠 𝙐𝙣𝙙𝙚𝙧𝙨𝙩𝙖𝙣𝙙 𝙩𝙝𝙚 𝘾𝙮𝙗𝙚𝙧 𝘼𝙩𝙩𝙖𝙘𝙠𝙚𝙧 𝙈𝙞𝙣𝙙𝙨𝙚𝙩: https://cybercanon.org/understand-the-cyber-attacker-mindset-build-a-strategic-security-programme-to-counteract-threats/

🔏 𝘾𝙧𝙮𝙥𝙩𝙤 𝘿𝙞𝙘𝙩𝙞𝙤𝙣𝙖𝙧𝙮: https://cybercanon.org/crypto-dictionary-500-tasty-tidbits-for-the-curious-cryptographer/

👂 𝙇𝙞𝙨𝙩𝙚𝙣𝙞𝙣𝙜 𝙄𝙣: https://cybercanon.org/listening-in-cybersecurity-in-an-insecure-age/

🕵️‍♂️ 𝙇𝙖𝙯𝙖𝙧𝙪𝙨 𝙃𝙚𝙞𝙨𝙩: https://cybercanon.org/the-lazarus-heist-from-hollywood-to-high-finance-inside-north-koreas-global-cyber-war/

Each review page on our site now includes affiliate links to purchase the books (and other Amazon purchases), which provides a small portion of the proceeds to the Canon. 🙏

Authors: Sarah Armstrong-Smith, Jean-Philippe (JP) Aumasson (@veorq), Susan Landau, and Geoff White

Reviewers: Kevin Magee, Sandip Dholakia (@iSandipD), Jeny Teheran, and Jeff Schiemann

#CyberCanon #CybersecurityBooks

🛍️ #CyberMonday is in full swing. Here is a reminder on how you can contribute to the Canon. We have something special for you: the #CyberCanon is now an Amazon affiliate!

Here’s what that means:
1. Every book review on https://CyberCanon.org contains a link that takes you directly to Amazon to purchase the book of your choice.
2. Each time you use one of these links, a % of your purchase will be contributed back to the CyberCanon.
3. This benefit applies to anything you buy on Amazon within the following 24 hours, not just books.

📚 Books make fantastic gifts for family, friends, colleagues, and teammates, really, everyone. Support us by beginning your Amazon shopping on https://CyberCanon.org and help continue our mission to curate cybersecurity content for the greater good of the cyber community.

#CybersecurityBooks #Giving #CyberMonday

🗓️𝗢𝗰𝘁𝗼𝗯𝗲𝗿 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄 𝗥𝗲𝗰𝗮𝗽!📚

In case you missed any of our reviews for the month of October, we are here for you...

🧑‍💼 𝙏𝙝𝙚 𝙏𝙧𝙖𝙣𝙨𝙛𝙤𝙧𝙢𝙖𝙩𝙞𝙤𝙣𝙖𝙡 𝙇𝙚𝙖𝙙𝙚𝙧: https://tinyurl.com/94z7ujsu

🔏 𝘿𝙞𝙛𝙛𝙚𝙧𝙚𝙣𝙩𝙞𝙖𝙡 𝙋𝙧𝙞𝙫𝙖𝙘𝙮: https://tinyurl.com/2s3jk4cn

🤖 𝘼𝙄-𝘿𝙧𝙞𝙫𝙚𝙣 𝘾𝙮𝙗𝙚𝙧𝙨𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙖𝙣𝙙 𝙏𝙝𝙧𝙚𝙖𝙩 𝙄𝙣𝙩𝙚𝙡𝙡𝙞𝙜𝙚𝙣𝙘𝙚: https://tinyurl.com/4k263a9c

🧠 𝙐𝙣𝙠𝙣𝙤𝙬𝙖𝙗𝙡𝙚 𝙈𝙞𝙣𝙙𝙨: https://tinyurl.com/yc4r5r4r

#CyberCanon #CybersecurityBooks

📅𝗧𝗼𝗱𝗮𝘆 𝗶𝗻 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗛𝗶𝘀𝘁𝗼𝗿𝘆!

On November 2, 1988, the Morris Worm became the first major computer virus to spread across the Internet. What began as a graduate student’s “experiment” quickly spiraled out of control, taking down much of the early Internet and costing millions in cleanup. It also gave rise to one of cybersecurity’s most important realizations: even well-intentioned code can cause catastrophic damage in a connected world.

To learn more, 𝙁𝙖𝙣𝙘𝙮 𝘽𝙚𝙖𝙧 𝙂𝙤𝙚𝙨 𝙋𝙝𝙞𝙨𝙝𝙞𝙣𝙜 by Scott Shapiro, a #CyberCanonHoFCandidate, covers the #MorrisWorm as one of its five infamous hacks. See our review ➡️ https://tinyurl.com/r2b3zc2u

💥And as a bonus, many may not be aware that 𝙏𝙝𝙚 𝘾𝙪𝙘𝙠𝙤𝙤'𝙨 𝙀𝙜𝙜 also contains an interesting perspective on the Morris Worm. A year after astronomer Cliff Stoll's spy tracking journey, he was one of many admins around the country who were investigating the Morris Worm live as it was spreading through the night. Cliff writes about this experience in the book's epilogue, where he discovers that the author of the worm was actually the son of NSA's Chief Scientist, Robert Morris, whom Cliff worked with in relation to his international hacker sleuthing a year earlier.

#CyberCanonHoF review ➡️ https://tinyurl.com/3rywf7zw

#CyberCanon #CybersecurityHistory #CybersecurityBooks

🎃It's Halloween. But forget ghost stories, the scariest stories are true.

In 𝙎𝙖𝙣𝙙𝙬𝙤𝙧𝙢, @agreenberg unravels a real-life cyber-thriller. A Russian hacking unit unleashes chaos around the world, turning code into a weapon and critical infrastructure into targets. No jump scares. Just power grids going dark, global companies paralyzed, and governments scrambling in the shadows.

At #CyberCanon, we honor books that reveal how close the digital and physical worlds really are and how fragile our sense of safety can be when the next exploit lurks unseen.

💀 https://tinyurl.com/mu9aht95

#Cybersecurity #CybersecurityBooks #CyberCanonHoF #Halloween

📢 𝗧𝗵𝗲 𝗖𝘆𝗯𝗲𝗿𝗡𝗲𝘀𝘁 𝘅 𝗖𝘆𝗯𝗲𝗿𝗖𝗮𝗻𝗼𝗻 𝗣𝗮𝗿𝘁𝗻𝗲𝗿𝘀𝗵𝗶𝗽 🤝

#Cybersecurity has no shortage of noise. What professionals need is 𝘀𝗶𝗴𝗻𝗮𝗹.

That’s why we’re excited to announce a new #partnership:

📚 #CyberCanon curates timeless, peer-reviewed cybersecurity books every professional should know.

🪺#TheCyberNest empowers security #leaders with trusted peer insights and paid opportunities to share their #expertise through research and advisory engagements.

Together, we bring forward the most trusted, peer-validated #knowledge to guide today’s most important security decisions.

Follow along as we roll out initiatives designed to give practitioners the clarity and confidence they need in an ever-changing landscape.

🗓️REMINDER🗓️

Thursday, 9/25, our very own Rick Howard will be presenting at
Bitwarden's #OpenSourceSecuritySummit along side Rinki Sethi and Andy Greenberg.

It's free, it's virtual, and it's only 2 hours, so no excuses. ☺️

👉 https://bitwarden.com/open-source-security-summit/

Andy is a rare 2X #CyberCanon Hall of Fame winner for his books Sandworm and Tracers in the Dark.

𝙎𝙖𝙣𝙙𝙬𝙤𝙧𝙢 review: tinyurl.com/mu9aht95

𝙏𝙧𝙖𝙘𝙚𝙧𝙨 𝙞𝙣 𝙩𝙝𝙚 𝘿𝙖𝙧𝙠 review: tinyurl.com/3xw76xxp

@bitwarden
@agreenberg
#CyberCanonHoF #Cybersecurity #CybersecurityBooks

Have you heard about this new thing called #AI?!

(Yes, fairly weak attempt at humor, but give us a break, we're busy over reading and writing over here!)

This week's book may not be well known (yet), but Andrew Chrostowski thinks that needs to change and is recommending it for the #CyberCanon Hall of Fame 🏦.

Read why 𝘼𝙧𝙩𝙞𝙛𝙞𝙘𝙞𝙖𝙡 𝙄𝙣𝙩𝙚𝙡𝙡𝙞𝙜𝙚𝙣𝙘𝙚 𝙖𝙣𝙙 𝙈𝙖𝙘𝙝𝙞𝙣𝙚 𝙇𝙚𝙖𝙧𝙣𝙞𝙣𝙜 𝙁𝙤𝙪𝙣𝙙𝙖𝙩𝙞𝙤𝙣𝙨: 𝙇𝙚𝙖𝙧𝙣𝙞𝙣𝙜 𝙁𝙧𝙤𝙢 𝙀𝙭𝙥𝙚𝙧𝙞𝙚𝙣𝙘𝙚 by Andrew Lowe and Steve Lawless is a #CyberCanonHoF candidate 👉 tinyurl.com/326sztx9

Publisher: BCS, The Chartered Institute for IT

#CyberSecurityBooks #CyberSecurity

🌊 𝗡𝗲𝘄 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄(𝘀)! 🌊

This week, not 1, but 2️⃣ #CyberCanon Committee Members review 𝙏𝙝𝙚 𝘾𝙤𝙢𝙞𝙣𝙜 𝙒𝙖𝙫𝙚 by Mustafa Suleyman with Michael Bhaskar.

This book is widely known, but to what extent does it offer meaningful value to cybersecurity professionals? 🤔

This is exactly what Jessica Buerger and Susan Hansche help determine in their insightful reviews 👉 https://tinyurl.com/49x3aetp

🛒 If our efforts assist in your decision to purchase, please use our affiliate link to support the Canon 👉 https://amzn.to/45SrpL9

#CybersecurityBooks #AICybersecurity #AI #QuantumComputing

🚨📖 𝗡𝗲𝘄 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽! 📖🚨

This week Joanna Grama submits her review of Jessica Barker’s 𝙃𝙖𝙘𝙠𝙚𝙙: 𝙏𝙝𝙚 𝙎𝙚𝙘𝙧𝙚𝙩𝙨 𝘽𝙚𝙝𝙞𝙣𝙙 𝘾𝙮𝙗𝙚𝙧 𝘼𝙩𝙩𝙖𝙘𝙠𝙨.

"𝘏𝘢𝘤𝘬𝘦𝘥 𝘰𝘧𝘧𝘦𝘳𝘴 𝘢 𝘴𝘵𝘰𝘳𝘺𝘵𝘦𝘭𝘭𝘪𝘯𝘨 𝘵𝘰𝘱𝘪𝘤-𝘣𝘢𝘴𝘦𝘥 𝘵𝘰𝘶𝘳 𝘵𝘩𝘳𝘰𝘶𝘨𝘩 𝘵𝘩𝘦 𝘸𝘰𝘳𝘭𝘥 𝘰𝘧 𝘩𝘢𝘤𝘬𝘪𝘯𝘨. 𝘛𝘩𝘦 𝘣𝘰𝘰𝘬’𝘴 𝘨𝘳𝘦𝘢𝘵𝘦𝘴𝘵 𝘴𝘵𝘳𝘦𝘯𝘨𝘵𝘩 𝘭𝘪𝘦𝘴 𝘪𝘯 𝘪𝘵𝘴 𝘢𝘤𝘤𝘦𝘴𝘴𝘪𝘣𝘪𝘭𝘪𝘵𝘺. 𝘉𝘢𝘳𝘬𝘦𝘳 𝘥𝘰𝘦𝘴 𝘢 𝘴𝘰𝘭𝘪𝘥 𝘫𝘰𝘣 𝘰𝘧 𝘦𝘹𝘱𝘭𝘢𝘪𝘯𝘪𝘯𝘨 𝘤𝘰𝘮𝘱𝘭𝘦𝘹 𝘤𝘺𝘣𝘦𝘳𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘪𝘯𝘤𝘪𝘥𝘦𝘯𝘵𝘴 𝘪𝘯 𝘱𝘭𝘢𝘪𝘯 𝘭𝘢𝘯𝘨𝘶𝘢𝘨𝘦, 𝘮𝘢𝘬𝘪𝘯𝘨 𝘵𝘩𝘪𝘴 𝘢 𝘸𝘰𝘳𝘵𝘩𝘸𝘩𝘪𝘭𝘦 𝘳𝘦𝘢𝘥 𝘧𝘰𝘳 𝘨𝘦𝘯𝘦𝘳𝘢𝘭 𝘢𝘶𝘥𝘪𝘦𝘯𝘤𝘦𝘴 𝘰𝘳 𝘤𝘺𝘣𝘦𝘳𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘯𝘦𝘸𝘤𝘰𝘮𝘦𝘳𝘴 𝘸𝘪𝘴𝘩𝘪𝘯𝘨 𝘵𝘰 𝘭𝘦𝘢𝘳𝘯 𝘮𝘰𝘳𝘦 𝘢𝘣𝘰𝘶𝘵 𝘵𝘩𝘦 𝘩𝘪𝘴𝘵𝘰𝘳𝘺 𝘰𝘧 𝘩𝘢𝘤𝘬𝘪𝘯𝘨."

📝 Be sure to read the full review 👉 https://tinyurl.com/mryyszv5

🛒 If Jessica's book interests you, consider purchasing here for under $11! 👉 https://amzn.to/4n5W6DC

#CyberCanon #Cybersecurity #CybersecurityBooks #Hacking

💥📘 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗮𝘆!

This week, Stephanie Pirman provides a Hall of Fame recommendation for Matt Hand's 𝙀𝙫𝙖𝙙𝙞𝙣𝙜 𝙀𝘿𝙍: 𝙏𝙝𝙚 𝘿𝙚𝙛𝙞𝙣𝙞𝙩𝙞𝙫𝙚 𝙂𝙪𝙞𝙙𝙚 𝙩𝙤 𝘿𝙚𝙛𝙚𝙖𝙩𝙞𝙣𝙜 𝙀𝙣𝙙𝙥𝙤𝙞𝙣𝙩 𝘿𝙚𝙩𝙚𝙘𝙩𝙞𝙤𝙣 𝙎𝙮𝙨𝙩𝙚𝙢𝙨 from @nostarch.

Evading EDR provides "𝘢 𝘤𝘰𝘮𝘱𝘳𝘦𝘩𝘦𝘯𝘴𝘪𝘷𝘦 𝘰𝘷𝘦𝘳𝘷𝘪𝘦𝘸 𝘰𝘧 𝘌𝘋𝘙𝘴 𝘧𝘳𝘰𝘮 𝘵𝘩𝘳𝘦𝘦 𝘤𝘰𝘳𝘦 𝘱𝘦𝘳𝘴𝘱𝘦𝘤𝘵𝘪𝘷𝘦𝘴: 𝘩𝘰𝘸 𝘌𝘋𝘙 𝘸𝘰𝘳𝘬𝘴, 𝘩𝘰𝘸 𝘢𝘯 𝘢𝘵𝘵𝘢𝘤𝘬𝘦𝘳 𝘤𝘢𝘯 𝘦𝘷𝘢𝘥𝘦 𝘌𝘋𝘙, 𝘢𝘯𝘥 𝘸𝘩𝘢𝘵 𝘥𝘦𝘧𝘦𝘯𝘥𝘦𝘳𝘴 𝘤𝘢𝘯 𝘥𝘰 𝘢𝘣𝘰𝘶𝘵 𝘪𝘵. 𝘌𝘋𝘙 𝘪𝘵𝘴𝘦𝘭𝘧 𝘪𝘴 𝘦𝘹𝘵𝘳𝘦𝘮𝘦𝘭𝘺 𝘵𝘦𝘤𝘩𝘯𝘪𝘤𝘢𝘭; 𝘵𝘩𝘶𝘴, 𝘵𝘩𝘪𝘴 𝘣𝘰𝘰𝘬 𝘪𝘴 𝘢𝘭𝘴𝘰 𝘦𝘹𝘵𝘳𝘦𝘮𝘦𝘭𝘺 𝘵𝘦𝘤𝘩𝘯𝘪𝘤𝘢𝘭[...] 𝘖𝘯𝘦 𝘰𝘧 𝘵𝘩𝘦 𝘴𝘵𝘳𝘰𝘯𝘨𝘦𝘴𝘵 𝘱𝘰𝘪𝘯𝘵𝘴 𝘰𝘧 “𝘌𝘷𝘢𝘥𝘪𝘯𝘨 𝘌𝘋𝘙” 𝘪𝘴 𝘩𝘰𝘸 𝘔𝘢𝘵𝘵 𝘏𝘢𝘯𝘥 𝘥𝘪𝘴𝘵𝘪𝘭𝘭𝘴 𝘵𝘩𝘦𝘴𝘦 𝘤𝘰𝘮𝘱𝘭𝘦𝘹 𝘵𝘦𝘤𝘩𝘯𝘪𝘤𝘢𝘭 𝘵𝘰𝘱𝘪𝘤𝘴 𝘪𝘯𝘵𝘰 𝘥𝘪𝘨𝘦𝘴𝘵𝘪𝘣𝘭𝘦 𝘱𝘳𝘰𝘴𝘦."

Full review 👉https://tinyurl.com/2xrx9vtj

---
🚨 If Matt's book interests you, please consider purchasing here 👉 https://amzn.to/4m1vLpC

For the first time, the #CyberCanon has Amazon Affiliate links to purchase titles in the Canon library! Same cost to you, but a few 💵 goes to the Canon to help keep us up and running. 🙏

#CyberCanonHoFCandidate #Cybersecurity #CybersecurityBooks #EDR

At #DEFCON, we spent time talking with Kurtis Minder and Jon DiMaggio, industry leaders in cyber threat intelligence. Both are authors of books on the Canon's list to review. We came away quite impressed, especially by their immense passion for fighting cyber crime.

Jon also led a boisterous session with John Fokker in front of a packed crowd of hundreds just moments after Jon released Volume 7 of Analyst1's Ransomware Diaries. Definitely a highlight of the week!

Read more about this story and others from #HackerSummerCamp in our August Newsletter 👉 https://tinyurl.com/canon-aug25-nl

#CyberCanon #CybersecurityBooks #CTI #Ransomware #REvil

Our August Newsletter 🗞️ is now live featuring #CyberCanon Hall of Fame winners, candidates, and cyber author-focused recaps from #BlackHat and #defcon.

Definitely worth taking a peek 👉 https://tinyurl.com/canon-aug25-nl

#CyberSecurityBooks #CyberCanonHoF #HackerSummerCamp #BHUSA

🚨📚 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗮𝘆! 📚🚨

This week, Edwin Shuttleworth provides a review for Michal Zalewski's 𝙎𝙞𝙡𝙚𝙣𝙘𝙚 𝙤𝙣 𝙩𝙝𝙚 𝙒𝙞𝙧𝙚: 𝘼 𝙁𝙞𝙚𝙡𝙙 𝙂𝙪𝙞𝙙𝙚 𝙩𝙤 𝙋𝙖𝙨𝙨𝙞𝙫𝙚 𝙍𝙚𝙘𝙤𝙣𝙣𝙖𝙞𝙨𝙨𝙖𝙣𝙘𝙚 𝙖𝙣𝙙 𝙄𝙣𝙙𝙞𝙧𝙚𝙘𝙩 𝘼𝙩𝙩𝙖𝙘𝙠𝙨. This 2005 book from @nostarch is still well worth the read today.

From Edwin's review: "[I] highly recommend it to practitioners who have an appreciation for historical context, those looking for inspiration from the past, and anyone working with embedded devices where some of these problems are occasionally still present."

Full review 👉https://tinyurl.com/323ytuwk

#Cybersecurity #CybersecurityBooks #CyberCanon

📆 𝗔𝘂𝗴𝘂𝘀𝘁 𝗥𝗲𝘃𝗶𝗲𝘄 𝗖𝗼𝗺𝗺𝗶𝘁𝘁𝗲𝗲 𝗠𝗲𝗲𝘁𝗶𝗻𝗴 𝗛𝗶𝗴𝗵𝗹𝗶𝗴𝗵𝘁𝘀 📆

We had our monthly review committee meeting this week and the Canon keeps getting better! Here are some quick highlights:

🅒 Stephanie Pirman and Joanna Grama led very engaged discussions of their detailed reviews.
🅒 Trying out new Hall of Fame scoring criteria
🅒 Welcomed 4 new committee members
🅒 50 new reviews are currently staged with more arriving weekly!

#CyberCanon #CyberCanonHoF #CybersecurityBooks #EDR #cyberespionage

🔎 📖 𝗡𝗲𝘄 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄! 📖 🔍

“𝙃𝙤𝙬 𝙄 𝙍𝙤𝙗 𝘽𝙖𝙣𝙠𝙨 is an engaging, fast-paced read that offers a firsthand look into the world of physical penetration testing. Equal parts storytelling, security insight and personal reflection, the book aims to inform and entertain.”

- - Walt Powell, #CyberCanon Committee Member, in this week’s book review

“The man laid in a ditch all night just to time the rotation of a high-tech door. Who does that? Each chapter is a new entry in the ‘you’ve got to be kidding me’ genre of security testing.”

See much more of Walt’s review of 🤡 FC aka Freakyclown (@_freakyclown_ ) very fun and thought provoking book 👉 https://tinyurl.com/58m6becn

🚨📖 𝗡𝗲𝘄 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽! 📖🚨

This week, Steve Winterfeld provides us with some great insights on “𝘿𝙖𝙧𝙠 𝙒𝙞𝙧𝙚: 𝙏𝙝𝙚 𝙄𝙣𝙘𝙧𝙚𝙙𝙞𝙗𝙡𝙚 𝙏𝙧𝙪𝙚 𝙎𝙩𝙤𝙧𝙮 𝙤𝙛 𝙩𝙝𝙚 𝙇𝙖𝙧𝙜𝙚𝙨𝙩 𝙎𝙩𝙞𝙣𝙜 𝙊𝙥𝙚𝙧𝙖𝙩𝙞𝙤𝙣 𝙀𝙫𝙚𝙧”
by Joseph Cox ( @josephcox )

In Steve's words, the book is "a true crime thriller that tells the story of the FBI’s Operation Trojan Shield from 2018 to 2021. As cybersecurity professionals study the cyber criminal ecosystem, there are times we need to take a look at the broader criminal economy. The use of cellphones to facilitate secure criminal operations is a great example. Studying this activity allows us to see where it can intersect with protecting our own organizations. I strongly recommend this niche book to provide a more well-rounded understanding of hackers and criminals in general."

Full review 👉 https://tinyurl.com/48r3nzek

#CyberCanon #CybersecurityBooks #CyberCrime

🐲 📚 𝗜𝘁'𝘀 𝗕𝗼𝗼𝗸 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗮𝘆! 📚🐲

"Chris Hughes and Nikki Robinson provide a valuable contribution to our profession with 𝘌𝘧𝘧𝘦𝘤𝘵𝘪𝘷𝘦 𝘝𝘶𝘭𝘯𝘦𝘳𝘢𝘣𝘪𝘭𝘪𝘵𝘺 𝘔𝘢𝘯𝘢𝘨𝘦𝘮𝘦𝘯𝘵: 𝘔𝘢𝘯𝘢𝘨𝘪𝘯𝘨 𝘙𝘪𝘴𝘬 𝘪𝘯 𝘵𝘩𝘦 𝘝𝘶𝘭𝘯𝘦𝘳𝘢𝘣𝘭𝘦 𝘋𝘪𝘨𝘪𝘵𝘢𝘭 𝘌𝘤𝘰𝘴𝘺𝘴𝘵𝘦𝘮. The book offers an approachable overview of one of our industry’s most challenging domains – vulnerability management."

-- #CyberCanon Review Committee Member Matt Stamper

Full Review 👉 https://tinyurl.com/36dw34an

#Cybersecurity #VulnerabilityManagement #CybersecurityBooks

📖 🔎 Book Review Day!

You're likely consumed with the AI hype train 🤖 🚄, but do know the history of what led to today's world of AI bots and agents?

University of Oxford's Ashall Professor of the Foundations of Artificial Intelligence, Michael Wooldridge, certainly does! He has written over 500 papers and 9 books on the topic.

👉Check out Rick Howard's review of 𝘈 𝘉𝘳𝘪𝘦𝘧 𝘏𝘪𝘴𝘵𝘰𝘳𝘺 𝘰𝘧 𝘈𝘳𝘵𝘪𝘧𝘪𝘤𝘪𝘢𝘭 𝘐𝘯𝘵𝘦𝘭𝘭𝘪𝘨𝘦𝘯𝘤𝘦: 𝘞𝘩𝘢𝘵 𝘐𝘵 𝘐𝘴, 𝘞𝘩𝘦𝘳𝘦 𝘞𝘦 𝘈𝘳𝘦, 𝘢𝘯𝘥 𝘞𝘩𝘦𝘳𝘦 𝘞𝘦 𝘈𝘳𝘦 𝘎𝘰𝘪𝘯𝘨.

tinyurl.com/2dkzax3z

@raceBannon99 | #CyberCanon #Cybersecurity #CybersecurityBooks #AI #History

Kim Zetter's (@kimzetter) 2014 book 𝘊𝘰𝘶𝘯𝘵𝘥𝘰𝘸𝘯 𝘵𝘰 𝘡𝘦𝘳𝘰 𝘋𝘢𝘺 was one of the first inducted into the Cybersecurity Canon Hall of Fame 🏆. The book unpacks the story of #Stuxnet and was a first of its kind to turn a real-world cyber espionage operation 🕵‍♀️ into a gripping thriller of a book.

Last week, Kim joined #CyberCanon President Rick Howard at the 𝘞𝘦𝘥𝘯𝘦𝘴𝘥𝘢𝘺 𝘞𝘦𝘦 𝘋𝘳𝘢𝘮 gathering for a candid discussion and Q&A with an eager group of about 40 cybersecurity leaders.

This event was coordinated before the recent Operation Midnight Hammer attack, which made the timing for this Stuxnet conversation impeccable. Many members attributed this to the uncanny foresight of Wee Dram host J. Carlos Vega, CISSP. 😄

Book review 👉 https://tinyurl.com/mubj2z4n

#CyberCanonHoF #Cybersecurity #CybersecurityBooks #CyberEspionage

"If there’s one book I’ve consistently recommended to those peering into the cybersecurity industry from the outside, it’s Jessica Barker's 'Confident Cyber Security.' I do so not just because it simplifies the complex but because it respects the reader’s intelligence while dismantling the harmful myths that gatekeep our field."
-- Kevin Magee, Cybersecurity Canon Review Committee Member

New week, new book review to check out. And this one is getting a Hall of Fame nomination...

https://tinyurl.com/4brjsfpd

#CybersecurityBooks #SecuirtyAwareness #CyberCanon #CyberCanonHoFCandidate

🚨📖 New Book Review Drop! 📖🚨

Investments Unlimited: A Novel About DevOps, Security, Audit Compliance, and Thriving in the Digital Age

https://tinyurl.com/cybercanon252406

“Throughout the book, the authors successfully model real-world challenges in ways that resonate. Whether it’s resistance from entrenched managers, knowledge silos, or the stress of an audit gone wrong, readers will find themselves nodding along with the scenarios.“ - Matthew Sharp, #CyberCanon Review Committee member

Investments Unlimited is authored by a team of 9 leaders in the industry:
Helen Beal, Bill Bensing, Jason Cox, Michael Edenzon, Tapabrata "Topo" Pal, Caleb Queern, John Rzeszotarski, Andrés Vega, and John Willis. Whether you're in Cybersecurity, Governance, or DevOps, this @itrevolution book is worth your time.

🔍 Check out Matthew's review and let us know your thoughts. Have you read it? Are you going to check it out? Tag someone who think may appreciate it.

#CyberCanon #Cybersecurity #Books #DevOps #Compliance #BookReview

📝 The #CyberCanon Newsletter Has Landed! 🗞️

We’re excited to announce the launch of our #Substack newsletter. It's your front-row seat to the best writing in #cybersecurity.

Subscribe if you want:
• Fresh reviews of must-read cybersecurity books
• Updates to our Hall of Fame collection (yes, books have an HoF - ours)
• Curated insights from our Committee that represents leaders across industry, academia, and government

Whether you’re building a security program, mentoring the next generation, or just love a good book… we’ve got something for you.

🔗 https://substack.com/@cybercanon

"I experienced tremendous technical and cultural challenges during our implementation and only wish that we had a book like this to navigate us."

💥It's Tuesday-review-day here at the #CyberCanon.💥

A new review by committee member @iSandipD Dholakia has been added to the Canon library. This is one you may not have heard of, but you definitely should consider adding it to your bookshelves as Sandip is recommending it for the Hall of Fame!

"Cybersecurity Readiness: A Holistic and High-Performance Approach" by Dr. Dave Chatterjee, Ph.D. is a must-read book to combat modern-day cyber threats. The Duke Professor and podcast host has written a comprehensive guide to understanding and implementing effective cybersecurity measures to detect, protect and respond to cyberattacks in organizations. See the review link in the comments.

Check out the full review here: https://cybercanon.org/cybersecurity-readiness-a-holistic-and-high-performance-approach/

#CybersecurityBooks #CyberCanonHoFCandidate

📚 Books: The Original OSINT 🔍

Over the weekend, a member of our team attended the Layer 8 Conference, an OSINT and Social Engineering focused event.

Dr. Brian Nussbaum’s interesting talk was right up our alley regarding OSINT National History referencing various books from the Canon review library such as "Spies, Lies, and Algorithms" and "Tracers in the Dark". We learned after his talk that the University at Albany professor is a big fan of ours and provides #CyberCanon as a resource for his students. 🙌

There were also sessions by well respected #OSINT industry experts and authors Rae Baker and Cynthia Hetherington.  Rae even had a book signing for her book "Deep Dive", which is an upcoming addition to the Canon library.

The main take-away of the day is the OSINT/SE community is incredibly strong with a heightened focus on ethics and helping others. This vibe was lead by organizer, Patrick Laverty, and clearly evident through the great group of presenters including Alethe Denis, Ritu Gill, Micah Hoffman, Griffin Glynn, Josh Hoff, Becky Gaylord, Rebecca Markwick, and many more. Great day and strongly recommend joining the 2026 edition.

#cybersecuritybooks #socialengineering #layer8con