Seclog - #125

g3n3r4l10

1. SEC Homepage (securityeducationcompanion.org)

   Security education resources for K–12 teachers.

2. The Cloud Hunting Games CTF (cloudhuntinggames.com)

   Cloud-focused Capture The Flag platform.

3. What Happened To (hackaday.com)

   WWW.? – A dive into how and why the “www.” prefix disappeared.

4. A First Glimpse of the Starlink User Ternimal (darknavy.org)

   An early look at the Starlink terminal.

5. 5 MCP Security Tips (nccgroup.com)

   Guidance on managing Microsoft Cloud security.

6. CVE-2024-10095: Telerik UI RCE (armiyon.me)

   Deserialization vulnerability in Telerik UI.

7. Passkeys for Normal People (troyhunt.com)

   A beginner’s guide to passkeys.

8. Multiple Rundeck RCEs (insinuator.net)

   Command injection vulnerabilities in Rundeck.

9. Unofficial Signal App Used by Officials (micahflee.com)

   TM SGNL used for sensitive communication.

10. Bug Bounty Etiquette (projectdiscovery.io)

    Principles for respectful bug bounty submissions.

y0utube5

1. Reviewing RSA 2025 w/ Jason Haddix (youtube.com)

   Post-RSA insights and reflections. Watch Here

2. Hacking Phone Calls (MITM/VoIP) (youtube.com)

   Demonstrating VoIP call interception. Watch Here

3. CyberCareer Talks 1 - Sena Yakut (youtube.com)

   Career stories in cloud security. Watch Here

4. Splitting the Email Atom (youtube.com)

   Email parser exploitation techniques. Watch Here

5. Signal Clone HACKED – Gov Chats Exposed (youtube.com)

   Signal clone compromised in minutes. Watch Here

g1thub5

1. aliasrobotics/cai (github.com)

   Cybersecurity AI ready for bug bounty work. Explore on GitHub

2. asgeirtj/system\prompts\leaks (github.com)

   Collection of leaked system prompts. Explore on GitHub

3. qpoint-io/qtap (github.com)

   eBPF agent for deep process-level telemetry. Explore on GitHub

4. TaurusOmar/pulsegram (github.com)

   Telegram-integrated keylogger tool. Explore on GitHub

5. OSINT-TECHNOLOGIES/dpulse (github.com)

   Comprehensive domain OSINT utility. Explore on GitHub