Seclog - #50

g3n3r4l14

1. Securing our home labs: Home Assistant code review - The GitHub Blog (github.blog)
2. We Hacked Ourselves With DNS Rebinding (intruder.io)
3. Autonomous Hacking of PHP Web Applications at the Bytecode Level (finixbit.github.io)
4. research!rsc: Open Source Supply Chain Security at Google (research.swtch.com)
5. Your phone is the key to your digital life. Make sure you know what to do if you lose it. (vox.com)
6. Latest security Vulnerabilities in ownCloud (rffuste.com)
7. My 1FA is Probably Better than Your MFA (clearops.substack.com)
8. Generative AI security: Preventing Microsoft Copilot data exposure (helpnetsecurity.com)
9. Amazon Detective adds new capabilities to accelerate and improve your cloud security investigations (aws.amazon.com)
10. OMGCICD - Attacking GitLab CI/CD via Shared Runners (pulsesecurity.co.nz)
11. Gadget chain in Wordpress (fenrisk.com)
12. Decompilation Debugging (clearbluejar.github.io)
13. CloudFlare Watch (web.archive.org)
14. Kubernetes Authentication Deep Dive · The Grey Corner (thegreycorner.com)

g1thub9

1. Orange-Cyberdefense/arsenal (github.com)
2. Drew-Sec/EvilSlackbot (github.com)
3. factionsecurity/faction (github.com)
4. LouisShark/chatgpt\system\prompt (github.com)
5. ray-project/ray (github.com)
6. secengjeff/awskillswitch (github.com)
7. plenumlab/rce-finder (github.com)
8. Hackmanit/TInjA (github.com)
9. 0xZDH/o365spray (github.com)