ROSECURIFY
Subscribe
~/ seclog/ #31

Seclog - #31

11 curated links

g3n3r4l8

  1. Security Alert: Don't npm install https (blog.sandworm.dev)
  2. Hackers can steal cryptographic keys by video-recording power LEDs 60 feet away (arstechnica.com)
  3. Securing the AI Pipeline (mandiant.com)
  4. Password spraying and MFA bypasses in the modern security landscape (sprocketsecurity.com)
  5. Threat Modeling Handbook (security.cms.gov)
  6. Azure Attack Paths: Common Findings and Fixes (Part 1) (blog.zsec.uk)
  7. The massive bug at the heart of the npm ecosystem (blog.vlt.sh)
  8. SSO Gadgets II: Unauthenticated Client-Side Template Injection to Account Takeover using SSO Gadget Chain (security.lauritz-holtmann.de)

g1thub3

  1. awslabs/threat-composer (github.com)
  2. smokeme/PDFator (github.com)
  3. mschwager/route-detect (github.com)
← All Seclogs