Troy Hunt

MAY 16, 2018

Just a tad over 5 years ago, I released my first ever Pluralsight course - OWASP Top 10 Web Application Security Risks for ASP.NET. Developers have a huge appetite for OWASP content and I'm very happy to now give them even more Top 10 goodness in the course I'm announcing here - Play by Play: OWASP Top 10 2017.

InfoSec 121

InfoSec Risk 121

Troy Hunt

AUGUST 6, 2018

Earlier this year, I spent some time in San Fran with friend and Bugcrowd founder Casey Ellis where we recorded a Pluralsight "Play by Play" titled Bug Bounties for Companies. This course covers many of the issues folks considering getting involved in bug bounties often ask: How do they find bounties?

114

114

Troy Hunt

MAY 3, 2018

Recently, I teamed up with good mate and fellow Pluralsight author Aaron Powell who spends his life writing JS things. So that's the course in a nutshell, "Play by Play: JavaScript Security" is now live! It's easily consumable content and we reckon it came out great!

122

122

Troy Hunt

DECEMBER 28, 2017

Regular readers will know I create a lot of Pluralsight courses. It's now 5 years ago I started writing my first one which incidentally, is still my highest rated course every month (apparently the OWASP Top 10 as it relates to ASP.NET is still a big thing).

121

121

Troy Hunt

DECEMBER 22, 2018

This week I'm talking about my new (free!) Pluralsight course, yet more data breaches, some really wacky Spotify attitudes towards passwords, a cool new Report URI feature we're looking for beta testers on and introducing an all new sponsor - strongDM. strongDM are an all new sponsor!

Data breaches 130

Data breaches Passwords Software 130

Troy Hunt

AUGUST 9, 2018

But there's also a few new Pluralsight courses in "Play by Play" format which completes the publication cycle for everything I've recorded to date bar the next in the quarterly series of Creating a Security-centric Culture. The Bug Bounties for Researches course is now live! it's Casey Ellis and I on Pluralsight).

Data breaches 112

Data breaches 112

Troy Hunt

OCTOBER 5, 2018

It's another "business as usual" week; past events, upcoming events, major security news, someone forgetting to renew a certificate and a new Pluralsight course.

140

140

Troy Hunt

JANUARY 27, 2018

Plus, of course, the actual infosec stuff from the week namely my new Pluralsight course on creating a security-centric culture. This is the first of a brand new Pluralsight series on creating a security-centric culture (totally free too, get into it!). References.

InfoSec 116

InfoSec Password Management Passwords 116

Troy Hunt

MAY 17, 2018

NDC will be back on the Gold Coast next yet, plus of course it will be in Oslo in a few weeks' time then Sydney in September where we'll both do it all again. Also this week, 2 new Pluralsight courses! This week, we talk a lot about EV certs. Let's be pro-evidence and push for solid research and facts. References.

128

128

Troy Hunt

OCTOBER 20, 2017

Beyond that, this week I have a new Pluralsight course out on the emerging threats in IoT and I've published a massive blog post on the "Happy Path" to HTTPS, all in 6 (sometimes) simple steps. It's a new Pluralsight course! iTunes podcast | Google Play Music podcast | RSS podcast.

IoT 119

IoT Data breaches 119

Troy Hunt

DECEMBER 15, 2017

As for this week, there's a bunch of stuff around a new Pluralsight course, my dismay with Face ID and a bit of taking a UK bank to task. Plus travelled to Sydney and then Melbourne to speak at a couple of events so that's a pretty good week IMHO. That last one actually had a good end result too so I'm pretty happy about that

Banking 112

Banking 112

Troy Hunt

MAY 4, 2018

It's a (new) weekly update! On the blog front, there's now CSP and Upgrade-Insecure-Requests support in Microsoft Edge, I find 86% of passwords in a recent data breach were already Pwned Passwords and there's a new Pluralsight course on JavaScript security. It's a new Pluralsight course! References.

Passwords 110

Passwords Data breaches 110

Troy Hunt

JULY 20, 2018

We're putting these out for free every few months and right after wrapping up this week's update, I recorded the next Pluralsight one and that's now gone off to them for editing. This week, I'm still on HTTPS. There's links to that discussion and the nasty comments Scott copped on my blog below.

117

117

Troy Hunt

MARCH 30, 2018

04:00 - Pluralsight course. 07:00 - New HIBP breach. As I say in the video, I'm really happy with the feedback so far and I've "liked" a bunch of the responses so check out my Twitter profile to see what people are saying about the partnership. 09:50 - Security scammer. 20:00 - Date formats. 27:20 - Aussie telcos.

Data breaches 120

Data breaches Passwords 120

Troy Hunt

DECEMBER 28, 2017

So that's it for this week, next week will be a whole new year and we'll be heading back towards business as usual. Happy New Year folks! It's (another) new Pluralsight course! It's (another) new Pluralsight course! iTunes podcast | Google Play Music podcast | RSS podcast. References.

135

135

Troy Hunt

MAY 25, 2018

In other news, Pwned Passwords is going nuts, there's some awesome cyber comments from The Daily Mail (yep, that's right), I'm doing a bunch of re-engineering work on HIBP, there's the ViewFines data breach and a brand new Pluralsight course on bug bounties. Watch this course! References.

Data breaches 111

Data breaches Passwords Banking Engineering 111

Troy Hunt

MARCH 17, 2018

But other than that, it was a fantastic week recording Pluralsight courses and meeting with some really cool tech companies which I talk about in the update. New #Pluralsight Play by Play hitting the library soon! Second @pluralsight Play by Play done, this one with @caseyjohnellis of @Bugcrowd fame ??

Risk 117

Risk 117

Troy Hunt

APRIL 20, 2018

But be that as it may, there's a bunch of other stuff to talk about this week including 3 new blog posts. I pushed out a new Pluralsight course on "Modern Web Security Patterns" (these "play by play" courses are great for easy listening). Is enumerating resources on a website hacking? (I

Mobile 109

Mobile Media Hacking 109

Troy Hunt

DECEMBER 11, 2017

As many followers know, I run a workshop titled Hack Yourself First where I spend a couple of days with folks running through all sorts of common security issues and, of course, how to fix them. Anyway, the point is that things are rapidly changing and there's always new things to talk about. True story.

Encryption 117

Encryption Hacking 117

Security Boulevard

AUGUST 2, 2021

I started at Explorance as a software developer, developing new features for our main product. Is there any tool, resource, forum/meet-up, or course you’d recommend for developers looking to break into the security world? . How have you grown from a software developer into a DevSecOps engineer? How did you acquire those skills? .

Engineering 70

Engineering Software Security Awareness Risk 70

Veracode Security

AUGUST 2, 2021

How did you acquire those skills? I started at Explorance as a software developer, developing new features for our main product. Further, I keep up-to-date with the latest trends on HackerNews ([link] course, nothing beats getting your hands dirty by scanning several applications with Veracode and mitigating the flaws.

Engineering 59

Engineering Software Security Awareness Risk 59

Troy Hunt

AUGUST 7, 2018

Only a few weeks ago, I wrote about a new GDPR course with John Elliott. We've been getting fantastic feedback on that course and I love the way John has been able to explain GDPR in a way that's actually practical and makes sense! In my experience, that's a bit of a rare talent in GDPR land.

Banking 125

Banking 125

IT Security Guru

JANUARY 12, 2021

There are tons of college programs that can teach you the fundamentals of IT security, give you the specialization you want, and help you save time and effort in learning new things on your own. You can explore your options through online education platforms such as PluralSight , Cybrary , and PentesterAcademy.

Cybersecurity 88

Cybersecurity Government IoT Penetration Testing 88

Troy Hunt

JANUARY 1, 2018

Let's start with the raw numbers: The total breaches went from 178 to 259 (one new breach every 4.5 million new records every day). new subscriber per day in the last 4 weeks. Pluralsight. This was a bit of a transitional year for me in terms of Pluralsight. I only recorded one "traditional" course (i.e.

Hacking 118

Hacking Encryption 118

Troy Hunt

JANUARY 24, 2018

This is something that's been on my mind for a while, but it really hit me back in September when I was over in Salt Lake City for Pluralsight's LIVE conference. I hope you enjoy watching this and the others yet to come, Creating a Security-centric Culture is now live on Pluralsight !

Education 177

Education CISO Encryption Passwords 177

Troy Hunt

FEBRUARY 4, 2024

The penny dropped as I read into it: Spoutible emerged in the wake of Elon taking over Twitter, which left a bunch of folks unhappy with their new social overlord so they sought out alternate platforms. Pluralsight author. Microsoft Regional Director. Online security, technology and “The Cloud” Australian.",

Passwords 363

Passwords Accountability Backups Data breaches 363

Troy Hunt

APRIL 6, 2021

He also started the online training service Tekpub which he later sold to Pluralsight , a company I've had a very long and very close affinity with. Over the course of this year, Rob, Charlotte and I have been working to bring the book to life. So, we picked up the book idea again.

Media 286

Media InfoSec 286

Troy Hunt

MARCH 29, 2018

Of course, we all know that but it's interesting to look back on that post all these years later and realise that unfortunately, nothing has really changed. I want to talk about why that is, what's changed and what the new partnership looks like. The strength of most passwords is terrible. Oh wow - look at this!

Password Management 266

Password Management Passwords Data breaches Retail 266

Troy Hunt

DECEMBER 30, 2018

It was only after reflecting on the responses to the following tweet that I decided to sit down and finally wrap up this post: New family car! Of course, success at that level is exceptionally rare, but my point is that in this industry more than any other I can think of, we can create amazing things from very humble beginnings.

Technology 279

Technology Education Marketing Insurance 279

Troy Hunt

JULY 24, 2020

First it was my trusty Electro-Voice RE320 from 5 years ago that saw me through so many Pluralsight courses, webcasts, interviews, etc. Along with other issues, it’s new machine time which I’ll order today. Moving forward, last month I started suffering a series of equipment failures. No sign of life whatsoever. Suggestions?

IoT 363

IoT Retail Manufacturing Data breaches 363