ROSECURIFY
Subscribe
~/ seclog/ #113

Seclog - #113

20 curated links

g3n3r4l11

  1. PeerAuth (ksze.github.io)

    A decentralized peer authentication protocol that enhances security and privacy.

  2. Ransomware.live - Last ransom claims (ransomware.live)

    A live tracker of recent ransomware attacks and claims.

  3. HackCurio: Decoding the Cultures of Hacking (hackcur.io)

    A curated collection of hacking culture resources and insights.

  4. Leaking the email of any YouTube user for $10,000 (brutecat.com)

    A deep dive into a vulnerability that exposed YouTube user emails.

  5. Millions of Accounts Vulnerable due to Google’s OAuth Flaw (trufflesecurity.com)

    How a flaw in Google OAuth left millions of accounts at risk.

  6. Fragility of The Internet: DNS Hijacking of 1.6+ Million Domains (devanshbatham.hashnode.dev)

    How sacrificial nameservers exposed millions of domains to hijacking.

  7. Saying Goodbye to my Favorite 5 Minute P1 (allysonomalley.com)

    A researcher bids farewell to a favorite bug bounty exploit.

  8. Zero-day in Sign in with Apple (bhavukjain.com)

    A zero-day flaw in Apple’s authentication system exposed user accounts.

  9. U.K. asks to backdoor iCloud Backup encryption (blog.cryptographyengineering.com)

    The UK government pushes for access to encrypted backups.

  10. whoAMI: A cloud image name confusion attack (securitylabs.datadoghq.com)

    A novel attack exploiting cloud image naming confusion.

  11. CVE-2025-1094: PostgreSQL psql SQL injection (FIXED) (rapid7.com)

    A critical SQL injection vulnerability in PostgreSQL.

X3

  1. DOGE Website Hosted by Outburst Data (@samwcyo)

    Investigation into the hosting and security of the DOGE website.

  2. Token Bomb Method - Encoding Data in Emojis (@evrnyalcin)

    Exploiting Unicode variation selectors to embed data in emojis.

  3. Phrack 71 PDF Release & 40th Anniversary (@phrack)

    Celebrating Phrack’s 40th anniversary with a new issue release.

y0utube3

  1. Hacking the 22€ BLE Smart Ring (youtube.com)

    Reverse engineering and security analysis of a budget BLE smart ring. Watch Here

  2. cloudflare.bat (youtube.com)

    Exploring Cloudflare’s security features and potential attack vectors. Watch Here

  3. Backdooring Local Git Repositories (youtube.com)

    Techniques for inserting stealthy backdoors in local Git repositories. Watch Here

g1thub3

  1. monasticacademy/httptap (github.com)

    A tool for monitoring HTTP/HTTPS requests made by Linux programs.

  2. synacktiv/laravel-crypto-killer (github.com)

    A tool to exploit weak decryption implementations in Laravel.

  3. CRED-CLUB/DIAL (github.com)

    A security misconfiguration detection framework for AWS.

← All Seclogs