ROSECURIFY
Subscribe
~/ seclog/ #151

Seclog - #151

31 curated links

g3n3r4l25

  1. ASP.NET (asp.net)

    This cybersecurity roundup highlights the significant and growing attack surface of AI/LLM technologies, detailing vulnerabilities such as a Remote Code Execution (RCE) in Ollama via malicious models, a GitHub Copilot Chat plugin flaw (CVE-2025-53773) allowing unauthorized actions, and the "Whisper Leak" side-channel attack capable of inferring topics from encrypted LLM traffic. Alongside these AI-centric risks, the…

  2. Optimize Your Brain for Learning (devansh.bearblog.dev)
  3. SANS DShield API Reference (isc.sans.edu)
  4. Check Server Post-Quantum Readiness (qcready.com)
  5. Brief Backup Exposure Leads to Breach (neosecurity.nl)
  6. Unauthenticated RCE in UniFi OS (catchify.sa)
  7. Ollama RCE via Malicious Models (sonarsource.com)
  8. Hugging Face Enhances AI Security (huggingface.co)
  9. Chrome Deprecates XSLT for Security (developer.chrome.com)
  10. Evolving AI Red Teaming Techniques (whiteknightlabs.com)
  11. "Cyberslop": AI Threat Exaggeration for Profit (doublepulsar.com)
  12. AI-Annotated Codebase Understanding with Codemaps (cognition.ai)
  13. Critical RCE in React Native CLI (jfrog.com)
  14. KubeVirt Security Audit Methodology (blog.quarkslab.com)
  15. Inside the Great Firewall Infrastructure (dti.domaintools.com)
  16. Critical SQLi in Django Framework (endorlabs.com)
  17. Copilot Chat Plugin Vulnerability (jro.sg)
  18. Hotel Credential Theft Phishing Campaign (blog.sekoia.io)
  19. Booking.com (booking.com)

    The initial compromise likely involved infostealing malware deployed on hotel establishments, leading to the theft of access to booking platforms like and Expedia.

  20. Dissecting Clop Ransomware Operations (theravenfile.com)
  21. OWASP Top 10 for 2025 Updates (owasp.org)
  22. PHP Cryptomining Campaign Activity (greynoise.io)
  23. Mercari Adopts Passkeys for Phishing Resistance (engineering.mercari.com)
  24. Whisper Leak: LLM Side-Channel Attack (microsoft.com)
  25. Critical Request Smuggling in (praetorian.com)

    ASP.NET Kestrel

X1

  1. Web Security vs. Binary Exploitation (@LiveOverflow)

y0utube1

  1. Pegasus Spyware: Tracking Continues (youtube.com)

g1thub4

  1. KubeVirt Arbitrary Host File Access (github.com)
  2. Burp TLS Fingerprint Bypass Extension (github.com)
  3. CDN Re-Fronting Bypass Tool (github.com)
  4. FFmpeg Assembly Language Lessons (github.com)
← All Seclogs