ROSECURIFY
Subscribe
~/ seclog/ #74

Seclog - #74

23 curated links

g3n3r4l14

  1. Prompt Firewall - AI/ML Security & Privacy (promptfirewall.com)

    platform dedicated to AI/ML security and privacy.

  2. Kubernetes LAN Party - by Wiz (k8slanparty.com)

    Dive into the Kubernetes security challenge hosted by Wiz.

  3. 16 years of CVE-2008-0166 - Debian OpenSSL Bug (16years.secvuln.info)

    An analysis of the impact of the Debian OpenSSL bug on DKIM and BIMI in 2024.

  4. Building an AI AppSec Team (srajangupta.substack.com)

    A guide by Srajan Gupta on forming an AI application security team.

  5. Talos releases new macOS open-source fuzzer (blog.talosintelligence.com)

    Details on the latest macOS fuzzer released by Talos.

  6. Ransomware Diaries Volume 5: Unmasking LockBit (analyst1.com)

    Insights into the LockBit ransomware group.

  7. LLM Pentest: Leveraging Agent Integration For RCE (blazeinfosec.com)

    Learn about the integration of agents for remote code execution in pentesting.

  8. Geopolitical Cyber Risk Analysis (predictivedefense.io)

    An in-depth look at the cyber risks associated with geopolitical events.

  9. Pivot to the Clouds: Cookie Theft in 2024 (embracethered.com)

    Examination of cookie theft techniques in cloud environments.

  10. Why Pivot Root is Used for Containers (tbhaxor.com)

    Understanding the use of pivot root in container environments.

  11. New WiFi Vulnerability: The SSID Confusion Attack (top10vpn.com)

    Analysis of a new WiFi vulnerability known as the SSID Confusion Attack.

  12. Lethal Injection: How We Hacked Microsoft's Healthcare Chat Bot (breachproof.net)

    Insights into hacking Microsoft's healthcare chatbot.

  13. Send()-ing Myself Belated Christmas Gifts (starlabs.sg)

    A detailed look at environment variables and shell access on GitHub.com.

  14. Introducing BadDNS - by Paul Mueller (blog.blacklanternsecurity.com)

    Introduction to the new DNS tool, BadDNS.

y0utube1

  1. GPT-4O JAILBREAK VIA IMAGE UPLOAD (youtube.com)

    Watch how the GPT-4 model was jailbroken using image uploads. Watch Here

g1thub8

  1. Remote Code Execution by Server-Side Template Injection in Model Metadata (github.com)

    advisory on a critical vulnerability in llama-cpp-python.

  2. NHAS/wag: Simple Wireguard 2FA (github.com)

    tool for adding 2FA to Wireguard. Explore on GitHub

  3. GJDuck/RRFuzz: Fuzz anything with Program Environment Fuzzing (github.com)

    Check out this tool for fuzzing applications. Explore on GitHub

  4. unclecode/crawl4ai: 🔥🕷️ Crawl4AI: Open-source LLM Friendly Web Crawler & Scrapper (github.com)

    An open-source web crawler and scraper optimized for LLMs. Explore on GitHub

  5. PaulSec/API-dnsdumpster.com: (Unofficial) Python API for https://dnsdumpster.com/ (github.com)

    A Python API for interacting with dnsdumpster.com. Explore on GitHub

  6. blacklanternsecurity/baddns: Check subdomains for subdomain takeovers and other DNS tomfoolery (github.com)

    A tool to check for subdomain takeovers and DNS issues. Explore on GitHub

  7. openai/openai-security-bots (github.com)

    Security bots developed by OpenAI. Explore on GitHub

  8. VirusTotal/yara-x: A rewrite of YARA in Rust. (github.com)

    a Rust rewrite of the YARA tool. Explore on GitHub

← All Seclogs