// What to read next
What to read after The Cyber Effect
Where to go after The Cyber Effect, picked from our catalog. The next step up from beginner level, weighted toward the topics this book covers.
01 · 2011
A Bug Hunter's Diary
Tobias Klein walks through seven real vulnerabilities he found and exploited, in the form of personal lab notes, what he tried, what failed, and what eventually shipped to vendors.
Intermediate4/5Tobias Klein02 · 2021
How to Hack Like a Ghost
A narrated, real-time breach of a fictional data-driven political consulting firm's AWS and Kubernetes environment, written by a working penetration tester who presents at Black Hat and DEF CON.
Intermediate4/5Sparc Flow03 · 2017
American Kingpin
A propulsive account of how Ross Ulbricht built the Silk Road dark-web drug empire as Dread Pirate Roberts, and how a handful of investigators across rival agencies finally unmasked him.
Beginner5/5Nick Bilton04 · 2011
Kingpin
Kevin Poulsen's reconstruction of Max Butler's career — from white-hat consultant to running CardersMarket, the carding forum that consolidated the early-2000s underground — and the FBI investigation that finally took him down.
Beginner5/5Kevin Poulsen05 · 2019
Sandworm
Long-form journalism on the GRU's hacking operations, the best non-technical book on what state-level cyber actually looks like.
Beginner5/5Andy Greenberg06 · 1999
The Code Book
A narrative history of cryptography from Caesar ciphers to public-key, told through the people and the wars that turned on broken codes. Still the best on-ramp to why crypto matters.
Beginner5/5Simon Singh07 · 1989
The Cuckoo's Egg
Clifford Stoll's first-person account of investigating a 75-cent accounting discrepancy at LBNL that turned into a year-long pursuit of a KGB-paid intruder across early-internet networks.
Beginner5/5Clifford Stoll08 · 2020
The Hacker and the State
Ben Buchanan's argument that state-on-state cyber operations are not deterrence-shaped (like nuclear) but signaling-shaped: countries use cyber to shape the environment, not to threaten escalation. Builds the case from declassified incidents.
Beginner5/5Ben Buchanan