ROSECURIFY
Subscribe
~/ seclog/ #139

Seclog - #139

34 curated links

g3n3r4l20

  1. Searchlight Cyber Threat Intelligence Tools (tools.slcyber.io)

    Comprehensive suite for digital risk monitoring and dark web investigations. SLCyber

  2. Monero Network 51% Attack Incident (web3isgoinggreat.com)

    Blockchain security compromised through majority hash-rate manipulation. Web3IsGoingGreat

  3. Zigot Ransomware Reverse Challenge (vx.zone)

    CTF exercise focused on ransomware binary analysis and decryption techniques. VX-Zone

  4. Wiz Emoji Security Cheat Sheets (wiz.io)

    Visual guides for cloud security concepts using custom "Wizmoji" icons. Wiz

  5. Debian 100K Milestone Celebration (lists.debian.org)

    Historic project anniversary reflecting on open-source longevity. Debian

  6. Anthropic Red Team Research Portal (red.anthropic.com)

    AI safety testing resources and adversarial research findings. Anthropic

  7. Lessons from Building an AI Hacker (AIxCC) (theori.io)

    Theori's insights from participating in DARPA’s AI Cyber Challenge. Theori

  8. GitHub Copilot: Remote Code Execution via Prompt Injection (embracethered.com)

    Demonstration of how prompt injection in GitHub Copilot could lead to RCE scenarios. EmbraceTheRed

  9. Data Exfiltration via Image Rendering Fixed in Amp Coded (embracethered.com)

    Explains a vulnerability allowing exfiltration via maliciously rendered images. EmbraceTheRed

  10. From Support Ticket to Zero Day (horizon3.ai)

    Real-world exploit chain research from Horizon3.ai showcasing how simple bugs evolve into zero-days. Horizon3.ai

  11. Cracking the Vault: HashiCorp Vault 0-days (cyata.ai)

    Discovery of critical zero-day vulnerabilities in authentication and identity mechanisms of HashiCorp Vault. Cyata

  12. Ostorlab: Signal Arbitrary File Read Vulnerability (blog.ostorlab.co)

    Detailed analysis of an arbitrary file read vulnerability in Signal, discovered via mobile app testing. Ostorlab

  13. LLM Reward Hacking Exploits (medium.com)

    Manipulating model incentives to bypass alignment safeguards. Medium

  14. Veeam CVEs and Bounty Disclosures (blog.voorivex.team)

    Critical vulnerabilities revealing $30K bounties in backup systems. Voorivex

  15. Gmail Phishing Scam Analysis (malwr-analysis.com)

    Emerging credential theft campaign using deceptive forwarding rules. Malwr

  16. Python Wheel Archive Confusion Fix (blog.pypi.org)

    Mitigating malicious ZIP parser exploitation in installers. PyPI

  17. LLM-Powered Patch Diffing Research (bishopfox.com)

    AI-assisted vulnerability discovery through commit analysis. BishopFox

  18. Autonomous Pentesting with Hacktron (hacktron.ai)

    AI agent conducting full security audits without human intervention. Hacktron

  19. FortiSIEM Pre-Auth RCE Exploit (labs.watchtowr.com)

    CVE-2025-25256 exposing critical command injection flaw. WatchTowr

  20. Demystifying Burp AI Functionality (parsiya.net)

    Gain insight into How Burp AI Works through this detailed blog post. Parsiya

X1

  1. Malicious Cursor AI Extension Attack (x.com)

    Crypto wallet drained via compromised VS Code plugin. X.com

y0utube1

  1. Deserialization Vulnerability Deep Dive (youtube.com)

    Exploiting insecure object serialization in web apps. YouTube

g1thub12

  1. Spotter: Kubernetes Security Scanner (github.com)

    CEL-powered scanner for Kubernetes clusters, manifests, and CI/CD environments. GitHub

  2. Cybersecurity Simulation Handbook (github.com)

    Red team tactics and adversary emulation playbooks. GitHub

  3. Black Hat USA 2025 Presentations (github.com)

    Conference slides for offensive security research. GitHub

  4. GitLab Attack Toolkit (GLATO) (github.com)

    Framework for auditing GitLab instance security. GitHub

  5. CI/CD Pipeline Sentinel Scanner (github.com)

    Detecting misconfigurations in DevOps workflows. GitHub

  6. Burp Suite Recursive Request Exploit (github.com)

    DEFCON tool for chained vulnerability exploitation. GitHub

  7. Google's Camel Anti-Injection Framework (github.com)

    Prompt injection countermeasures for LLMs. GitHub

  8. OSINT Footprint Search Tool (github.com)

    Cross-platform username reconnaissance across 300+ sites. GitHub

  9. Pentest Reporting ZSH Theme (github.com)

    Custom terminal with integrated command logging. GitHub

  10. AI-Driven AD Password Sprayer (github.com)

    Targeted credential attacks using user intelligence. GitHub

  11. HexStrike AI Pentesting Agents (github.com)

    Autonomous cybersecurity tools orchestration via LLMs. GitHub

  12. DNS Takeover Methodology Guide (github.com)

    Provider-specific techniques for domain reclamation. GitHub

← All Seclogs