ROSECURIFY
Subscribe
~/ seclog/ #132

Seclog - #132

16 curated links

g3n3r4l11

  1. Wiz CTF: Cloud Hacking Challenges (wiz.io)

    Sharpens skills via cloud hacking scenarios; earn certificates and build infosec reputations.

  2. Django IPv6 DoS Vulnerability Analysis (archive.md)

    Exploits missing input limits in IPv6 validation (CVE-2024–56374), allowing oversized payloads to trigger resource exhaustion and DoS in Django's address fields.

  3. FileFix: ClickFix Attack Alternative (mrd0x.com)

    Introduces FileFix for social engineering via Run Dialog execution, diving into ClickFix techniques for phishing operations.

  4. CentOS Web Panel RCE (CVE-2025-48703) (fenrisk.com)

    Discloses a remote code execution flaw in CWP, tracing its evolution from CentOS-focused to supporting AlmaLinux/Rocky Linux.

  5. AI Uncovers Dassault Delmia Apriso RCE (hacktron.ai)

    Hacktron found a pre-auth RCE missed by audits, demonstrating AI’s speed in exposing critical vulnerabilities like unprotected .svc files.

  6. OWASP AI Agent Security Framework (agenticsecurity.info)

    Maps NIST AI RMF to OWASP standards, offering threat analysis for securing agentic systems.

  7. Semgrep MCP for Agentic Era Security (mcp.semgrep.ai)

    Launches beta tools addressing agentic era risks in AI systems.

  8. Detecting IP KVMs with RunZero (runzero.com)

    Identifies open-source IP KVMs like TinyPilot for remote control, common in labs/SMBs.

  9. Malicious GitHub MCP Servers Study (blog.virustotal.com)

    VirusTotal found 8% of MCP servers potentially malicious or vulnerable due to poor practices.

  10. North Korean npm Supply Chain Attack (socket.dev)

    Exposes supply chain attack using 35 malicious packages; 6 remain live with 4k+ downloads.

  11. Make Self-XSS Great Again - Slonser Notes (blog.slonser.info)

X1

  1. Agentic Ecosystem Achieves 1-Click RCE (@OctagonNetworks)

    @pwndotai enabled 1-click RCE in Cluely via indirect prompt injection. Watch Here

g1thub4

  1. stamparm/ipsum (github.com)

    Daily feed of bad IPs (with blacklist-hit scores). Explore on GitHub

  2. NHAS/reverse\ssh (github.com)

    SSH-based reverse shell. Explore on GitHub

  3. Cybr-Inc/reinforce-2025-summaries (github.com)

    Summaries and key insights from AWS re:inforce 2025 talks. Explore on GitHub

  4. ANG13T/skytrack (github.com)

    Cybersecurity toolkit for various security tasks. Explore on GitHub

← All Seclogs