ROSECURIFY
Subscribe
~/ seclog/ #70

Seclog - #70

24 curated links

g3n3r4l18

  1. Cloud (hackinglabs.cloud)

    Hacking Labs - A platform dedicated to learning and testing hacking skills in a controlled environment. More

  2. Palo Alto - Protecting GlobalProtect (CVE-2024-3400) (labs.watchtowr.com)

    An analysis of CVE-2024-3400 vulnerability in Palo Alto's GlobalProtect VPN.

  3. Google's Flank Workflow Vulnerability (adnanthekhan.com)

    Exploring a complex actions workflow vulnerability in Google's Flank.

  4. Backdooring .NET Applications (starkeblog.com)

    Techniques and implications of injecting backdoors into .NET applications.

  5. Radio Astronomy for Beginners (hackaday.com)

    A beginner's guide to starting with radio astronomy.

  6. Detecting Fake Accounts (sowel.soxoj.com)

    Strategies to identify and handle fake online accounts effectively.

  7. From SSRF to gcp\enum Creation (hakaisecurity.io)

    Documenting the journey from discovering an SSRF vulnerability to creating the gcp\enum tool.

  8. Critical Vulnerabilities in Kubernetes Clusters (microsoft.com)

    Discussing new critical vulnerabilities found in Kubernetes clusters.

  9. SoumniBot Android Banker Analysis (securelist.com)

    An in-depth analysis of the SoumniBot Android banking malware.

  10. South Carolina Tax Record Theft (krebsonsecurity.com)

    Investigation into the theft of 3.6 million tax records in South Carolina.

  11. AWS IAM Roles Vulnerability (securitylabs.datadoghq.com)

    How AWS flaws led to vulnerabilities in Amplify IAM roles.

  12. Telegram App Zero-Day Fix (bleepingcomputer.com)

    Telegram updates its Windows app to fix a zero-day vulnerability.

  13. Super Sushi Samurai Hack (blog.solidityscan.com)

    A detailed analysis of the Super Sushi Samurai hack incident.

  14. Restoring the National Vulnerability Database (blog.projectdiscovery.io)

    Urging actions to restore the integrity of the National Vulnerability Database.

  15. Building a GPS Receiver (axleos.com)

    A series on constructing a GPS receiver from scratch.

  16. Web Application Input Handling Vulnerabilities (link.springer.com)

    Techniques for discovering vulnerabilities in web application input handling.

  17. ZIP Embedding Attack on Chrome Extensions (readme.synack.com)

    Exploring the vulnerabilities in Google Chrome extensions through ZIP embedding attacks.

  18. Malware and Fraud from Vietnam to the US (g0njxa.medium.com)

    An overview of cross-border cybercrime involving malware, fraud, and dropshipping.

X1

  1. Cybertruck Design Flaw Alert (@garageklub)

    Highlighting a significant design flaw in Cybertruck that causes unintended acceleration due to the accelerator pedal issue. Tweet

g1thub5

  1. Microsoft Copilot for Security (github.com)

    An AI-powered tool aimed at enhancing security defenses. Explore on GitHub

  2. CVE Feed Notifier (github.com)

    A customized tool to notify users about new CVEs. Explore on GitHub

  3. Attacks Against LLMs (github.com)

    Repository containing various attacks against Large Language Models. Explore on GitHub

  4. CVE-2024-3400 RCE Exploit (github.com)

    A repository dedicated to exploiting the CVE-2024-3400 vulnerability. Explore on GitHub

  5. Open Asset Model Tools (github.com)

    Tools for analysis and management of an Open Asset Model database. Explore on GitHub

← All Seclogs