Tech Unplugged

A software vulnerability analysis course, outlining the curriculum and assessment methods. The course emphasizes secure software engineering principles, integrating security practices throughout the entire software development lifecycle. Topics include threat modeling, secure design, secure coding practices, and secure deployment. The course will use tools like Microsoft Threat Modeling Tool and T...

The This podcast introduces MiniRAG, a novel Retrieval-Augmented Generation (RAG) system designed for Small Language Models (SLMs) in resource-constrained environments. MiniRAG utilizes a semantic-aware heterogeneous graph indexing mechanism and a lightweight topology-enhanced retrieval approach to overcome the limitations of SLMs. It outperforms existing lightweight RAG systems while using signif...

A security research team discovered AWS IAM username enumeration vulnerabilities within the AWS Web Console. One vulnerability, CVE-2025-0693, involved timing attacks, while the other related to MFA user login flows. The timing attack allowed attackers to identify valid usernames by measuring the server response time. The research team collaborated with AWS to address these issues, with AWS patchi...

This podcast investigates how to optimize manual software testing processes, which remain important despite the rise of automation. The authors conducted a survey of 38 testing professionals across 16 companies to understand current practices and challenges. Based on the survey, the paper synthesizes guidelines for implementing optimization techniques from automated testing to manual testing. Thes...

QA Training Hub provides an online Tosca Test Automation course with hands-on experience using Banking/Insurance/e-Commerce projects. The program aims to bridge the gap between demand and supply of software testing professionals, offering best-in-class, affordable training. The course covers numerous modules , including error handling, recovery scenarios, regular expressions, data-driven framework...

This comprehensive handbook explores web application security, focusing on practical techniques for identifying and exploiting vulnerabilities. It covers a wide spectrum of attacks, including injection flaws, authentication and session management weaknesses, and client-side vulnerabilities like cross-site scripting. The text emphasizes hands-on methods, providing steps to detect and exploit securi...

This podcast introduces Cassandra, a decentralized storage system designed for managing large datasets across commodity servers. Cassandra prioritizes high availability and fault tolerance, running efficiently on infrastructure with frequent failures. It utilizes a simple data model that gives users dynamic control over data layout. Developed by Facebook to address the needs of Inbox Search, Cassa...

This podcast introduces Kafka, a distributed messaging system developed for high-volume log data collection and delivery with low latency. Kafka combines features of log aggregators and messaging systems, offering scalability and high throughput while allowing real-time log event consumption. It addresses the challenges of processing the large volumes of log data generated by modern internet appli...

This document provides an overview of Selenium , a widely adopted open-source tool for automating the testing of web applications . It traces Selenium's history and evolution , from its initial versions to the development of WebDriver and Grid for distributed testing. The text outlines Selenium's architecture and key components , such as IDE, WebDriver, and Grid, explaining their functionalities i...

Artificial intelligence (AI) and machine learning (ML) are transforming observability practices by enhancing the ability of IT to understand complex systems, predict issues, and automate responses. AIOps, the application of AI to IT operations, helps organizations improve system performance, availability, and reliability by reducing downtime and accelerating issue resolution. Key AIOps use cases i...

This podcast provides a compilation of frequently asked questions and answers related to Amazon Web Services (AWS). It covers a wide range of topics including VPC configuration, EC2 instance management, S3 storage, and database services like RDS and DynamoDB. The questions address key concepts such as auto-scaling, load balancing, and network connectivity. Additionally, the document explores vario...

AWS Lambda, a popular serverless computing service, faces several potential hacking threats if not adequately secured. These risks include configuration mistakes leading to public exposure or overly permissive IAM roles, as well as code vulnerabilities like command and SQL injection. Attackers might exploit event-data injection by manipulating data or utilizing cross-site scripting. To mitigate th...

These sources describe a security vulnerability involving publicly accessible Amazon S3 buckets and the exploitation of S3 bucket versioning. An attacker can enumerate S3 buckets without credentials, find older versions of files, and recover deleted files due to misconfigurations. The vulnerability is demonstrated through a scenario where a security team assesses a company's infrastructure. They d...

The AI Risk Management Framework (RMF) Playbook offers a comprehensive guide for organizations to govern, map, measure, and manage risks associated with artificial intelligence systems. It emphasizes establishing clear policies and processes, understanding legal and regulatory requirements, and documenting potential impacts. The playbook focuses on transparency, accountability, and continuous moni...