ROSECURIFY
Subscribe
~/ seclog/ #124

Seclog - #124

20 curated links

g3n3r4l16

  1. Read More (luisfontes19.github.io)

    OrgSec Guide – A practical guide to organizational security.

  2. Read More (llama.com)

    Llama Protections – Open-source security tools by Llama.

  3. Read More (blog.sucuri.net)

    Fake GIF Leveraged in Multi-Stage Reverse-Proxy Card Skimming Attack – A fake image used in a stealthy card skimming technique.

  4. Read More (spaceraccoon.dev)

    Cybersecurity (Anti)Patterns: Busywork Generators – Discussing patterns that create meaningless security tasks.

  5. Read More (token.security)

    AWS Built a Security Tool. It Introduced a Security Risk. – How AWS unintentionally introduced a vulnerability.

  6. Read More (grafana.com)

    Grafana Security Update – GitHub workflow vulnerability clarified.

  7. Read More (badshah.io)

    Securing a SaaS Company's AWS Environment After a Breach – Lessons learned post-incident.

  8. Read More (schneier.com)

    Applying Security Engineering to Prompt Injection Security – Bruce Schneier on prompt injection threats.

  9. Read More (labs.greynoise.io)

    CVE-2025-32433 – RCE via state machine error in Erlang/OTP SSH.

  10. Read More (hetmehta.com)

    WTF is SOC 2 Compliance? – A simple breakdown of SOC 2.

  11. Read More (mitiga.io)

    Tag Your Way In – New privilege escalation in GCP using tags.

  12. Read More (cert.pl)

    Peephole Deobfuscation – Simplifying obfuscated code with pattern-based logic.

  13. Read More (ai.meta.com)

    Meta’s New Open-Source AI Privacy Tools – Latest security advancements from Meta.

  14. Read More (oligo.security)

    AirBorne: Zero-Click RCE in Apple AirPlay – Critical RCE flaw in Apple’s AirPlay protocol.

  15. Read More (blog.trailofbits.com)

    Deceiving Users with ANSI Terminal Codes – Security implications of terminal manipulation.

  16. Read More (wiz.io)

    The MCP Server for Wiz – AI-native security server from Wiz.

g1thub4

  1. Explore on GitHub (github.com)

    AdnaneKhan/Gato-X – Static analysis and GitHub Actions exploitation toolkit.

  2. Explore on GitHub (github.com)

    Yamato-Security/suzaku – Sigma-based threat hunting and cloud log forensics.

  3. Explore on GitHub (github.com)

    google/mcp-security – Google’s official MCP security framework.

  4. Explore on GitHub (github.com)

    quarkslab/proxyblob – A SOCKS5 proxy tool using Azure Blob Storage.

← All Seclogs