ROSECURIFY
Subscribe
~/ seclog/ #109

Seclog - #109

20 curated links

g3n3r4l16

  1. Tetris in a PDF (th0mas.nl)

    A fascinating way to play Tetris right inside a PDF document.

  2. Exploiting Number Parsers in JavaScript (logicalhunter.me)

    in JavaScript number parsers.

  3. Gitxray: a Security X-Ray for GitHub Repositories (blog.kulkan.com)

    Insights into Gitxray's repository scanning capabilities.

  4. Labs and Semgrep Rules (blog.doyensec.com)

    Diving into unsafe unpacking and secure coding with Semgrep.

  5. AWS re:Invent 2024: Security Recap (aws.amazon.com)

    Key takeaways from AWS’s security, identity, and compliance updates.

  6. Fast Unauthenticated Role Scanning (blog.ryanjarv.sh)

    Techniques for identifying unauthenticated roles.

  7. Deep Dive - AWS Organization Policies (Part 1) (naman16.github.io)

    Analyzing AWS Organization Policies in detail.

  8. 2024 CVE Data Review (jerrygamblin.com)

    Comprehensive review of CVE data from 2024.

  9. OSV - Open Source Vulnerabilities (osv.dev)

    A review of 2024's open-source vulnerability landscape.

  10. How Google Does It: Modernizing Threat Detection (cloud.google.com)

    Learn Google's approach to advanced threat detection.

  11. 3 Takeaways from Red Teaming 100 Generative AI Products (microsoft.com)

    Insights into generative AI security challenges.

  12. Passkeys: Simpler and Safer Alternative to Passwords (ncsc.gov.uk)

    Exploring the future of authentication with passkeys.

  13. The First Password on the Internet (schneier.com)

    A look back at the origins of internet passwords.

  14. Discovering Hidden Vulnerabilities in Portainer with CodeQL (cyberark.com)

    Using CodeQL to identify hidden vulnerabilities in Portainer.

  15. 2024 CVEs in Review (vulnerability.blog)

    Detailed review of significant CVEs from 2024.

  16. Finding SSRFs in Azure DevOps (binarysecurity.no)

    Identifying server-side request forgery vulnerabilities in Azure DevOps.

y0utube1

  1. BLOB Based Phishing Scams (youtube.com)

    Learn about innovative phishing tactics using BLOB files. Watch Here

g1thub3

  1. 100DaysofYARA/2025 (github.com)

    Community-shared YARA rules from the 100 Days of YARA 2025 challenge. Explore on GitHub

  2. TURROKS/CVE\Prioritizer (github.com)

    A tool to prioritize CVEs using CVSS, EPSS, and CISA data. Explore on GitHub

  3. utkusen/baitroute (github.com)

    A web honeypot library for detecting and misleading attackers. Explore on GitHub

← All Seclogs