--- title: Best Cybersecurity posts of 2023 | daily.dev description: The most upvoted Cybersecurity posts of 2023, curated by the daily.dev community. canonical: https://daily.dev/tags/cyber/best-of/2023 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/cyber/best-of/2023 og:type: website og:site_name: daily.dev og:title: Best Cybersecurity posts of 2023 | daily.dev og:description: The most upvoted Cybersecurity posts of 2023, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Cybersecurity — 2023 1. 1 [](/posts/github-opens-copilot-chat-to-all-developers-h4e2i4ds8 "GitHub opens Copilot Chat to all developers") Article Developer Tech · 3y GitHub opens Copilot Chat to all developers Copilot Chat was launched for ‘Business’ users in July. The AI assistant is capable of assisting developers in their preferred natural language and promises to reduce repetitive tasks. The tool empowers developers to learn and build in the language that feels most natural. 215 22 2. 2 [](/posts/top-10-secure-coding-practices-z5j-qhonu "Top 10 Secure Coding Practices") Article DZone · 4y Top 10 Secure Coding Practices This guide will share the top ten secure coding practices that every developer should know. Security breaches rose 20.5% in 2021 as cybercriminals became more sophisticated during the global pandemic. We'll cover the most common forms of cyber attacks that you need to be aware of as a developer. 66 4 3. 3 [](/posts/web-fundamentals-jwt-attacks-gfkjyxw3y "Web Fundamentals | JWT Attacks") Article System Weakness · 3y Web Fundamentals | JWT Attacks Learn about JWTs, the impact of JWT attacks, and accepting arbitrary signatures. 44 1 4. 4 [](/posts/the-life-of-kevin-mitnick-the-world-s-most-famous-hacker-kk4dbjmkk "The Life of Kevin Mitnick: The World’s Most Famous Hacker") Article Codemotion · 3y The Life of Kevin Mitnick: The World’s Most Famous Hacker Kevin Mitnick was born on the 6th of August, 1963 in Van Nuys, California. Mitnick’s first hack was in 1979 when he broke into a computer at the University of Southern California (USC) Mitnick used a software vulnerability to gain access and continue his subterfuge in private. 41 4 5. 5 [](/posts/hackers-tools-must-have-tools-for-every-ethical-hacker-ho0i1j13t "Hackers Tools: Must-Have Tools for Every Ethical Hacker") Article DEV · 3y Hackers Tools: Must-Have Tools for Every Ethical Hacker Ethical hacking is a crucial practice in ensuring the security of computer systems and networks. Having the right tools at your disposal is essential for effective, ethical hacking. 38 1 6. 6 [](/posts/free-tech-programs-that-can-help-you-land-roles-bizy68dob "Free tech programs that can help you land roles") Article Medium · 3y Free tech programs that can help you land roles Free tech programs that can help you land roles are now providing free training and programs to encourage more people to pursue careers in cybersecurity. Grace: I want to emphasize that I am not against paid programs and materials, and I encourage individuals to take advantage of them if they can. 37 4 7. 7 [](/posts/owasp-api-security-top-10-secure-your-apis-uxrbtxfne "OWASP API Security Top 10 – Secure Your APIs") Article freeCodeCamp · 3y OWASP API Security Top 10 – Secure Your APIs The OWASP API Security Top 10 is a standard reference guide highlighting the most critical web API vulnerabilities. We just published a course on the freeCodeCamp.org YouTube channel that will teach you about each security risk and techniques to fortify your APIs against potential threats. 35 8. 8 [](/posts/i-used-gpt-3-to-find-213-security-vulnerabilities-in-a-single-codebase-iyricyqgu "I Used GPT-3 to Find 213 Security Vulnerabilities in a Single Codebase") Article Better Programming · 4y I Used GPT-3 to Find 213 Security Vulnerabilities in a Single Codebase GPT-3 used to find 213 security vulnerabilities in a codebase, outperforming a commercial tool that found only 99 vulnerabilities. 32 1 9. 9 [](/posts/front-end-security-threats-and-countermeasures-gbflkdutu "Front End Security: Threats and Countermeasures") Article asayer · 3y Front End Security: Threats and Countermeasures Front-end security is crucial for protecting user data, ensuring user authentication, and establishing secure communication. Common threats include Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and Clickjacking. Preventive measures include implementing Content Security Policy (CSP), input sanitization, CSRF tokens, frame-busting scripts, and HTTPS with valid SSL/TLS certificates. 28 10. 10 [](/posts/cybersecurity-in-go-szmf4mc8p "Cybersecurity in Go") Article ITNEXT · 3y Cybersecurity in Go Cybersecurity in Go. Secure Your Application with 10 Golang Snippets. These functions are helpful whether you are developing a secure client-server app, an encrypted file system or a web app with SSL/TLS. Utilizing these functions can kickstart your project and guarantee that your systems are reliable and safe. 23 3 11. 11 [](/posts/google-to-force-block-ad-blockers-time-to-get-firefox--mjpxnposg "Google to Force-Block Ad Blockers — Time to Get Firefox?") Article Security Boulevard · 3y Google to Force-Block Ad Blockers — Time to Get Firefox? Google is planning to disable Manifest V2 Chrome extensions and roll out Manifest V3, which has raised concerns about the impact on ad blockers. Firefox and Safari are the only major browsers unaffected by these changes. 22 5 12. 12 [](/posts/creating-a-undetectable-backdoor-for-windows-using-villain-pethdsb8o "Creating a undetectable Backdoor for Windows using — Villain") Article System Weakness · 3y Creating a undetectable Backdoor for Windows using — Villain Learn how to create an undetectable backdoor for Windows using Villain, a C2 framework written in Python. The post provides step-by-step instructions to generate the backdoor and bypass Windows Defender. It emphasizes that the information is for educational purposes only and does not condone illegal activities. 22 13. 13 [](/posts/3-tier-cloud-architecture-design-2dbkwxavp "3 Tier Cloud Architecture Design") Article Community Picks · 4y 3 Tier Cloud Architecture Design Learn about the 3-tier cloud architecture, including the presentation layer, application layer, and database. Understand how to make the architecture highly available and scalable. 21 14. 14 [](/posts/a-comprehensive-guide-to-the-dangers-of-regular-expressions-in-javascript-8cp5zvszm "A comprehensive guide to the dangers of Regular Expressions in JavaScript") Article Community Picks · 3y A comprehensive guide to the dangers of Regular Expressions in JavaScript Learn about regular expression denial of service vulnerabilities and the dangers they pose. Discover how backtracking in regular expressions can cause performance issues and explore methods to solve these issues. 19 15. 15 [](/posts/netspionage-network-forensics-utility-cvpzzzv-p "netspionage: Network Forensics Utility") Article System Weakness · 4y netspionage: Network Forensics Utility netspionage is a CLI (command line interface) utility developed using Python for network forensics and network reconnaissance. It scans and monitors network activity, obtains information about devices connected to the network, and detects attacks targeting the network. 19 16. 16 [](/posts/securing-the-frontend-a-practical-guide-for-developers-4zyj7bazp "Securing the Frontend: A Practical Guide for Developers") Article System Weakness · 3y Securing the Frontend: A Practical Guide for Developers Balancing frontend development and cybersecurity is crucial for creating a secure digital ecosystem. Understanding and mitigating threats like XSS and CSRF is essential. Best practices include secure coding, input validation, Content Security Policy (CSP), monitoring, and updates. Integrating security into the user experience involves clear communication, streamlined authentication, progressive information disclosure, user education, and customization. Real-world case studies from Google, GitHub, Facebook, Stripe, and Slack show successful security implementations. Developers are encouraged to prioritize security from the beginning and continue learning and evolving in the ever-changing threat landscape. 18 17. 17 [](/posts/google-dorking-vital-for-cybersecurity-pdgqthnu4 "Google Dorking: Vital for Cybersecurity") Article Community Picks · 3y Google Dorking: Vital for Cybersecurity Mastering Google Dorking is essential for cybersecurity professionals as it can uncover hidden information and security loopholes within websites and applications. It is used for identifying vulnerabilities, enhancing penetration testing, and staying ahead of attackers. Google Dorking plays a crucial role in OSINT by allowing experts to rapidly locate targeted information, identify vulnerabilities, and perform competitor analysis. Basic and advanced dorks are used for different purposes, and it is important to use Google Dorking ethically and legally. The Google Hacking Database (GHDB) is a valuable resource for cybersecurity professionals for finding sensitive information. Mastering Google Dorking is necessary for safeguarding digital assets and improving cybersecurity practices. 17 2 18. 18 [](/posts/little-bug-big-impact-25k-bounty-k7zvqtuzi "Little bug, Big impact. 25k bounty") Article Medium · 4y Little bug, Big impact. 25k bounty An ethical hacker discovers sensitive data stored in the front-end of a web application, highlighting the importance of avoiding secrets in JavaScript code and using secure storage. JavaScript source mapping and the SourceMapper tool are discussed. 15 1 19. 19 [](/posts/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps-zzgjm2xsc "Google Cloud mitigated largest DDoS attack, peaking above 398 million rps") Article Community Picks · 3y Google Cloud mitigated largest DDoS attack, peaking above 398 million rps Google mitigated the largest DDoS attack to date, peaking above 398 million requests per second (rps). The attack used a novel technique called HTTP/2 Rapid Reset based on stream multiplexing. Google coordinated with industry partners to understand the attack mechanics and collaborated on mitigations. The attack vulnerability has been designated as CVE-2023-44487 with a CVSS score of 7.5\. Any enterprise or individual serving an HTTP-based workload may be at risk and should apply relevant patches or verify server vulnerability. 14 20. 20 [](/posts/15-essential-tools-for-hackers-supercharge-your-penetration-testing-toolkit--kusenftag "15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit!") Article InfoSec Write-ups · 3y 15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit! 15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit! We’ll explore 15 indispensable tools that will enhance your skills as a hacker and provide maximum value for your efforts. These tools are essential for anyone seeking to secure their systems effectively. 14 21. 21 [](/posts/google-s-new-cybersecurity-professional-certificate-explained-vewlqftvr "Google's New Cybersecurity Professional Certificate Explained") Article freeCodeCamp · 3y Google's New Cybersecurity Professional Certificate Explained Google has released a new professional certificate in Cybersecurity. The Grow with Google program is for people interested in "training, tools and resources to grow skills, careers, or businesses" It follows five other successful entry-level certificate programs in IT Support, Data Analytics, Digital Marketing & E-commerce, Project Management and UX Design. 14 22. 22 [](/posts/ethical-hacking-ngpcypgmz "Ethical Hacking") Article System Weakness · 4y Ethical Hacking Ethical hacking, also known as ‘white hat’ hacking, is the practice of using hacking techniques for the purpose of identifying and resolving security vulnerabilities in computer systems and networks. Ethical hackers play a crucial role in keeping our digital world safe, says Imila Maheshan. 14 23. 23 [](/posts/open-source-software-security-handbook-best-practices-for-securing-your-projects-osidgl4oi "Open Source Software Security Handbook – Best Practices for Securing Your Projects") Article freeCodeCamp · 4y Open Source Software Security Handbook – Best Practices for Securing Your Projects Learn about common attacks against open source software, the impact of supply chain attacks, and the importance of web application security. 12 24. 24 [](/posts/api-security-for-pci-compliance-dss-4-0--yj9ubfc1u "API Security for PCI Compliance (DSS 4.0)") Article freeCodeCamp · 3y API Security for PCI Compliance (DSS 4.0) Learn about API security and PCI DSS 4.0 requirements in this crash course on the freeCodeCamp.org YouTube channel. Understand the importance of API security for businesses dealing with payment information. 11 25. 25 [](/posts/hacking-htmx-applications-7sih7bm0h "Hacking htmx applications") Article InfoSec Write-ups · 3y Hacking htmx applications The article discusses the concept of htmx applications, their differences from other web applications, and the potential XSS vulnerabilities. It also explains various attributes in htmx that can be targeted for XSS attacks and ways to control the behavior of htmx applications. 11 3 [See all Cybersecurity archives](/tags/cyber/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/cyber/best-of/2023#page","url":"https://daily.dev/tags/cyber/best-of/2023","name":"Best Cybersecurity Posts of 2023","description":"The most upvoted Cybersecurity posts of 2023, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/cyber/best-of/2023#items","numberOfItems":25,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/github-opens-copilot-chat-to-all-developers-h4e2i4ds8","name":"GitHub opens Copilot Chat to all developers"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/top-10-secure-coding-practices-z5j-qhonu","name":"Top 10 Secure Coding Practices"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/web-fundamentals-jwt-attacks-gfkjyxw3y","name":"Web Fundamentals | JWT Attacks"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/the-life-of-kevin-mitnick-the-world-s-most-famous-hacker-kk4dbjmkk","name":"The Life of Kevin Mitnick: The World’s Most Famous Hacker"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/hackers-tools-must-have-tools-for-every-ethical-hacker-ho0i1j13t","name":"Hackers Tools: Must-Have Tools for Every Ethical Hacker"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/free-tech-programs-that-can-help-you-land-roles-bizy68dob","name":"Free tech programs that can help you land roles"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/owasp-api-security-top-10-secure-your-apis-uxrbtxfne","name":"OWASP API Security Top 10 – Secure Your APIs"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/i-used-gpt-3-to-find-213-security-vulnerabilities-in-a-single-codebase-iyricyqgu","name":"I Used GPT-3 to Find 213 Security Vulnerabilities in a Single Codebase"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/front-end-security-threats-and-countermeasures-gbflkdutu","name":"Front End Security: Threats and Countermeasures"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/cybersecurity-in-go-szmf4mc8p","name":"Cybersecurity in Go"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/google-to-force-block-ad-blockers-time-to-get-firefox--mjpxnposg","name":"Google to Force-Block Ad Blockers — Time to Get Firefox?"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/creating-a-undetectable-backdoor-for-windows-using-villain-pethdsb8o","name":"Creating a undetectable Backdoor for Windows using — Villain"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/3-tier-cloud-architecture-design-2dbkwxavp","name":"3 Tier Cloud Architecture Design"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/a-comprehensive-guide-to-the-dangers-of-regular-expressions-in-javascript-8cp5zvszm","name":"A comprehensive guide to the dangers of Regular Expressions in JavaScript"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/netspionage-network-forensics-utility-cvpzzzv-p","name":"netspionage: Network Forensics Utility"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/securing-the-frontend-a-practical-guide-for-developers-4zyj7bazp","name":"Securing the Frontend: A Practical Guide for Developers"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/google-dorking-vital-for-cybersecurity-pdgqthnu4","name":"Google Dorking: Vital for Cybersecurity"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/little-bug-big-impact-25k-bounty-k7zvqtuzi","name":"Little bug, Big impact. 25k bounty"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps-zzgjm2xsc","name":"Google Cloud mitigated largest DDoS attack, peaking above 398 million rps"},{"@type":"ListItem","position":20,"url":"https://daily.dev/posts/15-essential-tools-for-hackers-supercharge-your-penetration-testing-toolkit--kusenftag","name":"15 Essential Tools for Hackers: Supercharge Your Penetration Testing Toolkit!"},{"@type":"ListItem","position":21,"url":"https://daily.dev/posts/google-s-new-cybersecurity-professional-certificate-explained-vewlqftvr","name":"Google's New Cybersecurity Professional Certificate Explained"},{"@type":"ListItem","position":22,"url":"https://daily.dev/posts/ethical-hacking-ngpcypgmz","name":"Ethical Hacking"},{"@type":"ListItem","position":23,"url":"https://daily.dev/posts/open-source-software-security-handbook-best-practices-for-securing-your-projects-osidgl4oi","name":"Open Source Software Security Handbook – Best Practices for Securing Your Projects"},{"@type":"ListItem","position":24,"url":"https://daily.dev/posts/api-security-for-pci-compliance-dss-4-0--yj9ubfc1u","name":"API Security for PCI Compliance (DSS 4.0)"},{"@type":"ListItem","position":25,"url":"https://daily.dev/posts/hacking-htmx-applications-7sih7bm0h","name":"Hacking htmx applications"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Cybersecurity","item":"https://daily.dev/tags/cyber"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/cyber/best-of"},{"@type":"ListItem","position":5,"name":"2023"}]}]} ```