Seclog - #108

g3n3r4l11

1. WorstFit: Unveiling Hidden Transformers in Windows ANSI! (blog.orange.tw)

   hidden transformers in Windows ANSI are unveiled.

2. Exploitation Walkthrough and Techniques - Ivanti Connect Secure RCE (CVE-2025-0282) (labs.watchtowr.com)

   A detailed exploitation walkthrough for Ivanti Connect Secure RCE.

3. Top 10 web hacking techniques of 2024: nominations open (portswigger.net)

   Nominate the top web hacking techniques of the year.

4. DoubleClickjacking: A New Era of UI Redressing (paulosyibelo.com)

   Understand the evolution of UI redressing with DoubleClickjacking.

5. How We Cracked a 512-Bit DKIM Key for Less Than $8 in the Cloud (dmarcchecker.app)

   a 512-bit DKIM key was cracked using cloud resources.

6. 2025 Cloud Security Predictions for CISOs & Engineers (wiz.io)

   Predictions for cloud security in 2025.

7. Proton Services Status - Technical difficulties (status.proton.me)

   Updates on Proton's technical issues.

8. Gaining Access to Anyone's Browser Without Them Even Visiting a Website (kibty.town)

   A deep dive into a unique exploitation technique.

9. Capturing the Flags of the Internet (bughunters.google.com)

   Learn how to find zero-days in OSS and write scanners.

10. Argo Workflows - Uncovering the Hidden Misconfigurations (evasec.io)

    Analysis of misconfigurations in Argo Workflows.

11. Fearsome File Formats (media.ccc.de)

    Insights into malicious file formats and their exploitation. Watch Here

y0utube1

1. Russian cyber-spies attack Ukraine (youtube.com)

   A report on cyber espionage activities targeting Ukraine. Watch Here

g1thub3

1. k3nundrum/hashcrack-ai (github.com)

   Bowing to the AI overlords with this hash cracking tool. Explore on GitHub

2. step-security/secure-repo (github.com)

   Orchestrating GitHub Actions Security. Explore on GitHub

3. ngalongc/salesforce-vulnerability-scanner (github.com)

   A scanner targeting Salesforce Lightning for academic purposes. Explore on GitHub