ROSECURIFY
Subscribe
~/ seclog/ #43

Seclog - #43

17 curated links

g3n3r4l15

  1. Partnership with Pentesters (keepnetlabs.com)
  2. 9 Ways You’re Doing MFA All Wrong (lastweekasavciso.com)
  3. Python 3.12.0 from a supply chain security perspective (sethmlarson.dev)
  4. 25 Hard-Hitting Lessons from 17 Years in Cybersecurity (returnonsecurity.com)
  5. Yet More Unauth Remote Command Execution Vulns in Firewalls (labs.watchtowr.com)
  6. How it works: The novel HTTP/2 ‘Rapid Reset’ DDoS attack | Google Cloud Blog (cloud.google.com)
  7. curl - SOCKS5 heap buffer overflow - CVE-2023-38545 (curl.se)
  8. AI Engineer Summit - Building Blocks for LLM Systems & Products (eugeneyan.com)
  9. Cloud Provider Credentials Targeted in New PyPI Malware Campaign (blog.phylum.io)
  10. ZAP – ZAP 2.14.0 (zaproxy.org)
  11. Exploiting the Looney Tunables vulnerability on HTB (CVE-2023-4911) (hackthebox.com)
  12. The sky has not yet fallen - Curl (CVE-2023-38545) (labs.watchtowr.com)
  13. Following attackers’ (Cloud)trail in AWS: Methodology and findings in the wild | Datadog Security Labs (securitylabs.datadoghq.com)
  14. Enhancing Security and Developer Productivity: LinkedIn's Journey with Implementing Content Security Policy | LinkedIn Engineering (engineering.linkedin.com)
  15. Much ado about Curl (semgrep.dev)

y0utube1

  1. Attacking Secondary Contexts in Web Applications - Sam Curry (youtube.com)

g1thub1

  1. risinek/esp32-wifi-penetration-tool: Exploring possibilities of ESP32 platform to attack on nearby Wi-Fi networks. (github.com)
← All Seclogs