ROSECURIFY
Subscribe
~/ seclog/ #79

Seclog - #79

22 curated links

g3n3r4l15

  1. The SSO Wall of Shame (sso.tax)

    A list of vendors that treat single sign-on as a luxury feature, not a core security requirement.

  2. LangChain JS Arbitrary File Read Vulnerability (evren.ninja)
  3. AI and Machine Learning: Revolutionizing Application Security (beaglesecurity.substack.com)
  4. Perplexity AI is susceptible to prompt injection (lewisdale.dev)
  5. Red Teaming with LLMs (redteamrecipe.com)
  6. AWS re:Inforce 2024: Session Notes and Announcements (senayakut.com)
  7. Security and Human Behavior 2024 (lightbluetouchpaper.org)
  8. Using LLMs to Exploit Vulnerabilities (schneier.com)
  9. Anatomy of a Terminal Emulator (poor.dev)
  10. Assessing CVE-2024-25065: Apache OFBiz Security bypass leads to Unauthorized Access/Actions (blog.securelayer7.net)
  11. Tales from the cloud trenches: Raiding for AWS vaults, buckets and secrets (securitylabs.datadoghq.com)
  12. Security in the 2000s (macchaffee.com)
  13. Cloud Detection and Response in AWS (medium.com)
  14. Off-path TCP hijacking in NAT-enabled Wi-Fi networks (blog.apnic.net)
  15. Google Online Security Blog: Staying Safe with Chrome Extensions (security.googleblog.com)

y0utube1

  1. Hacking clouds using the power of the sun - Ian Mckay (youtube.com)

    Watch Here

g1thub6

  1. GHSL-2024-001\GHSL-2024-003: Remote DoS and potential authentication bypasses in (securitylab.github.com)

    RubyGems.org -

  2. p0dalirius/smbclient-ng (github.com)

    smbclient-ng, a fast and user friendly way to interact with SMB shares. Explore on GitHub

  3. soteria-security/MFArcade (github.com)

    PowerShell script to create reports of M365 User Multi-factor Authentication Registration Status and Highlight MFA Related Conditional Access Policy Gaps. Explore on GitHub

  4. nowsecure/fsmon (github.com)

    monitor filesystem on iOS / OS X / Android / FirefoxOS / Linux. Explore on GitHub

  5. Marven11/CVE-2024-28397-js2py-Sandbox-Escape (github.com)

    CVE-2024-28397: js2py sandbox escape, bypass pyimport restriction. Explore on GitHub

  6. deggja/netfetch (github.com)

    Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads. Explore on GitHub

← All Seclogs