g3n3r4l18
-
2600 News: The Hacker Quarterly Updates (2600.com)
Stay updated with the latest in hacker culture and cybersecurity trends with 2600 News. This platform provides insightful articles, news, and discussions, crucial for anyone interested in the evolving landscape of information security. Explore 2600 News
-
Security Creators: Video Content for Cybersecurity Enthusiasts (securitycreators.video)
Security Creators offers a curated selection of video content focused on cybersecurity. It's an excellent resource for visual learners seeking to understand complex security concepts, stay informed about industry trends, or simply explore fascinating cybersecurity topics. Visit Security Creators
-
30 New Semgrep Rules: Enhancing Code Security (blog.trailofbits.com)
Trail of Bits releases new rules for Ansible, Java, Kotlin, and shell scripts, advancing security in software development.
-
Insurance Company Hack: Toyota/Eicher Motors Exploited (eaton-works.com)
Eaton Works exposes vulnerabilities in an insurance company's premium calculator, highlighting security loopholes.
-
LeftoverLocals: Eavesdropping on LLM via GPU Memory Leaks (blog.trailofbits.com)
Trail of Bits unveils a method to intercept LLM responses through GPU memory leaks, underscoring hardware security issues.
-
Google Account Compromise through OAuth2 Flaws (cloudsek.com)
CloudSEK discusses malware exploiting undocumented OAuth2 functionality, leading to session hijacking in Google accounts.
-
Bypassing AWS Cognito User Enumeration Controls (hackingthe.cloud)
Techniques to circumvent user enumeration controls in Amazon Cognito, shedding light on cloud security vulnerabilities.
-
Ivanti Pulse Connect Secure: Auth Bypass & RCE Exploitation (assetnote.io)
Assetnote's investigation into Ivanti's Pulse Connect Secure reveals critical authentication and remote code execution vulnerabilities.
-
Strategies for Fuzzing and Bypassing AWS WAF (sysdig.com)
Sysdig explores methods to test and bypass Amazon Web Services' Web Application Firewall, emphasizing the need for robust security measures.
-
JFrog's in-depth analysis of critical vulnerabilities in libX11, essential for X Window System application developers.
-
Remote Callback Techniques in Cybersecurity (posts.specterops.io)
Lance B. Cain from SpecterOps Team presents innovative methods for remote callbacks in cybersecurity operations.
-
Buer Haus provides insights into reversing and analyzing signed request hashes in obfuscated JavaScript.
-
Exploiting Report Visibility in HackerOne (hackerone.com)
An in-depth analysis of a vulnerability allowing the viewing of private reports with pending email invitations on HackerOne.
-
SQL Injection in GLPI Dynamic Reports (labs.hakaioffsec.com)
Hakaioffsec Labs details an SQL injection vulnerability in GLPI's dynamic reports, emphasizing database security concerns.
-
Obsidian's Security Enhancements Post Audit (obsidian.md)
Obsidian announces new security measures and an independent audit report by Cure53, ensuring enhanced data protection.
-
's research on exploiting path validation in QUIC protocol, highlighting potential network security risks.
-
Adversarial Machine Learning: A Comprehensive Guide (csrc.nist.gov)
NIST publishes AI 100-2 E2023, offering a taxonomy and terminology guide for understanding attacks and mitigations in machine learning.
-
EvilSlackbot: A New Twist in Workspace Automation (drew-sec.github.io)
Drew Sec introduces EvilSlackbot, a tool that leverages Slack for cybersecurity testing and operations, showcasing the dual-use nature of workplace automation tools.
y0utube1
-
ShmooCon 2024: A Must-Watch Cybersecurity Conference (youtube.com)
Dive into the world of cybersecurity with ShmooCon 2024's comprehensive conference video. This event covers the latest trends, challenges, and innovations in cybersecurity, featuring talks from industry experts. An essential watch for professionals and enthusiasts alike in the field of information security. Watch on YouTube
g1thub3
-
danluu's Post-Mortems: Lessons from Failures (github.com)
A valuable GitHub repository by Dan Luu, featuring an extensive collection of post-mortem reports across various tech industries, providing crucial insights into system failures and operational learnings. Explore More
-
BishopFox's BIG-IP Scanner: Network Security Tool (github.com)
BishopFox releases bigip-scanner, a specialized tool designed for scanning and identifying vulnerabilities in F5 BIG-IP devices, highlighting the importance of network security in an increasingly connected world. Check It Out
-
CyberRoute introduces ScanMe, an open-source tool aimed at simplifying vulnerability scanning for security professionals and enthusiasts, demonstrating the growing accessibility of cybersecurity tools. Discover More