ROSECURIFY
Subscribe
~/ seclog/ #64

Seclog - #64

21 curated links

g3n3r4l14

  1. Not by AI (notbyai.fyi)

    A resource for understanding the nuances and advances in artificial intelligence.

  2. Relishing new Fickling features for securing ML systems (blog.trailofbits.com)

    Trail of Bits Blog discusses the latest enhancements in Fickling for better security of ML systems.

  3. NIST 800-207A: Implementing Zero Trust Architecture (infoq.com)

    InfoQ presents a comprehensive guide on implementing Zero Trust Architecture as per NIST 800-207A.

  4. pgAdmin Path Traversal in Session Handling (shielder.com)

    Shielder reveals a critical path traversal vulnerability in pgAdmin.

  5. LLM Prompt Injection Worm (schneier.com)

    Schneier on Security examines the emergence of the LLM Prompt Injection Worm.

  6. Securing Cloudflare with Cloudflare: A Zero Trust Journey (blog.cloudflare.com)

    Cloudflare's own journey implementing Zero Trust within its systems.

  7. Cloudflare Announces Firewall for AI (blog.cloudflare.com)

    Introduction of a new Firewall specifically designed for AI by Cloudflare.

  8. Conditional Prompt Injection Attacks with Microsoft Copilot (embracethered.com)

    Embrace The Red explores the vulnerabilities in Microsoft Copilot through conditional prompt injection attacks.

  9. Leaking NTLM Credentials Through Windows Themes (akamai.com)

    Akamai's research on how Windows themes can be exploited to leak NTLM credentials.

  10. Kaspersky Spam and Phishing Report for 2023 (securelist.com)

    An analysis of the spam and phishing trends in 2023 by Kaspersky.

  11. New Malicious PyPI Packages used by Lazarus (blogs.jpcert.or.jp)

    JPCERT/CC discusses Lazarus's use of malicious PyPI packages.

  12. Source Code Disclosure in (swarm.ptsecurity.com)

    ASP.NET apps - PT SWARM highlights the risks of source code disclosure in ASP.NET applications.

  13. Detecting Phishing Sites Using ChatGPT (arxiv.org)

    A study on leveraging ChatGPT for identifying phishing websites.

  14. SolarWinds Security Event Manager AMF deserialization RCE (xz-aliyun-com.translate.goog)

    Analysis of a remote code execution vulnerability in SolarWinds Security Event Manager.

y0utube1

  1. I Made Malware In Under 20 Minutes (youtube.com)

    A YouTube tutorial demonstrating the creation of malware in a short span of time. Watch Here

g1thub6

  1. Knox: Secret Management Service by Pinterest (github.com)

    Knox, developed by Pinterest, offers a secure way to manage secrets. Explore on GitHub

  2. SploitScan: Cybersecurity Utility (github.com)

    SploitScan, a comprehensive tool for vulnerability assessment and PoC exploits. Explore on GitHub

  3. AI-Exploits: Real World AI/ML Exploits Collection (github.com)

    A collection of real-world AI and ML exploits for responsibly disclosed vulnerabilities. Explore on GitHub

  4. DOT: The Deepfake Offensive Toolkit (github.com)

    Sensity AI's toolkit for creating and understanding deepfakes. Explore on GitHub

  5. GSocket: Fi (github.com)

    rewall Bypass Tool - A tool designed to securely connect through firewalls. Explore on GitHub

  6. OpenGFW: Open Source GFW Implementation (github.com)

    OpenGFW provides a flexible and easy-to-use implementation of the Great Firewall of China on Linux. Explore on GitHub

← All Seclogs