Books

The book covers every topic in the latest CISSP exam syllabus, organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the exam without wasting time or money.

This book covers every topic in the latest CISM exam syllabus, approaching topics from the ISACA perspective. It's 325+ pages organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the CISM exam without wasting time or money.

How to put AI agents in production without ending up in the news. A field guide to bounded AI autonomy, MCP security, and AgentSecOps.

This book covers every topic in the latest CISA exam syllabus, approaching topics from the ISACA perspective. It's 400+ pages, organized in a format following the syllabus that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the CISA exam without wasting time or money.

The book covers every topic in the latest CCSP exam syllabus, with more than 400 pages organized in a format that makes it easy to drill down on specific exam domains and concepts at-a-glance, making it an essential exam resource for anyone who aims to prepare for the exam without wasting time or money.

Linux is one of the best decisions you can make for your computer — but knowing where to start is the hard part. This guide walks you through everything: choosing a distribution, installing it, and using it confidently every day. It was written by Jay LaCroix of Learn Linux TV, for complete beginners. No prior experience required.

This isn't a book to put on a shelf. It's meant to be used, tested, and adapted as you build your networking skills. In this new edition, I've been working on making the teaching flow better and making technical stuff clearer without overwhelming you. You'll get the basics down, like how C++ works well with TCP/IP and how sockets are the foundation for communication. Then, I'll show you how to build real client-server apps, set up IP addressing, and use protocols like HTTP, FTP, SMTP, IMAP, and DNS directly through C++ code. Each example is practical and you can actually implement it. It shows you not just how something works, but why it matters in real networking scenarios.

You don't need a massive budget or a team of consultants to build a security program that actually works. Building an Agile Security Program gives startup founders and CTOs a step-by-step, NIST-aligned playbook with 300+ prioritized tasks, runnable automation code, and the practitioner voice of someone who's done it a hundred times.

Transform your data center into a powerful private cloud with this comprehensive guide to Red Hat's enterprise stack. Learn how to deploy OpenShift for container orchestration, integrate OpenStack for VM workloads, and implement Ceph for unified storage—all on a single lab host. Through 10 hands-on chapters, you'll build a production-ready hybrid cloud from scratch, complete with security hardening, performance optimization, and GitOps automation, backed by real-world case studies and battle-tested configurations.

Modern cybersecurity demands tools that are fast, reliable, and capable of operating close to the hardware. BlackHat Zig explores how Zig's unique blend of performance, safety, explicit memory control, and compile-time metaprogramming makes it an excellent language for security research and development. From reverse engineering and exploit development to network tooling, malware analysis, kernel instrumentation, and defensive security engineering, this book demonstrates how Zig can be used to build practical security tools across the offensive and defensive spectrum. Packed with real-world examples, hands-on projects, and production-quality code, BlackHat Zig provides a deep dive into both the language and the techniques used by modern security professionals. Whether you're a developer looking to expand into security or a researcher searching for a powerful new toolset, this book offers a practical path into the world of cybersecurity through the lens of Zig.

Security engineering is about building systems that continue to work when things go wrong. This book brings together the principles, tools, and practical techniques used to design secure applications, infrastructure, and operations at scale. From threat modeling and cryptography to cloud security, incident response, and compliance, it provides a clear path through the concepts and decisions that matter most. Along the way, you'll learn from real breaches, hands-on examples, and proven frameworks used by security teams around the world.

What if your next exploit development workflow had an AI-powered copilot? AI-Assisted Exploit Development explores how large language models are transforming vulnerability research, reverse engineering, and offensive security. From accelerating binary analysis in IDA Pro, Ghidra, and Binary Ninja to enhancing web application testing, fuzzing, debugging, and proof-of-concept exploit creation, this hands-on guide demonstrates how security professionals can leverage AI to work faster and more effectively. Through practical examples, real-world case studies, and offensive security exercises, readers will learn where AI excels, where human expertise remains essential, and how to safely integrate AI assistance into modern exploit development pipelines.

Official companion guide to the OWASP Juice Shop. Being a web application with a vast number of intended security vulnerabilities, the OWASP Juice Shop is supposed to be the opposite of a  best practice  or  template application  for web developers: It is an awareness, training, demonstration and exercise tool for security risks in modern web apps.

Go beyond abstractions and master the core technical realities of modern cybersecurity. Deconstruct advanced network evasion and EDR bypass techniques, dissect sophisticated post-exploitation and cloud attack vectors, and analyze cryptographic failures and malware at their roots. This deep dive into internals equips practitioners with the crucial understanding needed to elevate both offensive and defensive capabilities against today's threats.

The premise of this book is to provide students a hands-on, go-to resource for building a secure, customizable lab environment in order to enable their own specific pursuits.