Books

Constant learning is a requirement for cybersecurity professionals.

Books to Help Cybersecurity Pros Be Better

Here are books and links recommended by professionals to continue a professional’s education.

CVE-2022-2405 – The WP Popup Builder WordPress plugin through 1.2.8 does not have authorisation and CSRF c …26 September 2022
CVE-2022-40402 – Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booki …26 September 2022
CVE-2022-2903 – The Ninja Forms Contact Form WordPress plugin before 3.6.13 unserialises the content of an …26 September 2022
CVE-2022-40403 – Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id pa …26 September 2022
CVE-2022-41347 – An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Su …26 September 2022
CVE-2022-2926 – The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, …26 September 2022

Testa 3.5.1 Online Test Management System – Reflected Cross-Site Scripting (XSS)23 September 2022
Aero CMS v0.0.1 – SQLi23 September 2022
WordPress Plugin 3dady real-time web stats 1.0 – Stored Cross Site Scripting (XSS)23 September 2022
WordPress Plugin WP-UserOnline 2.88.0 – Stored Cross Site Scripting (XSS)23 September 2022
Teleport v10.1.1 – Remote Code Execution (RCE)23 September 2022
Feehi CMS 2.1.1 – Remote Code Execution (RCE) (Authenticated)23 September 2022

NullMixer: oodles of Trojans in a single dropper26 September 2022
Mass email campaign with a pinch of targeted spam23 September 2022
External attack surface and ongoing cybercriminal activity in APAC region19 September 2022
Self-spreading stealer attacks gamers via YouTube15 September 2022
Threat landscape for industrial automation systems for H1 202212 September 2022
Good game, well played: an overview of gaming-related cyberthreats in 20226 September 2022