ROSECURIFY
Subscribe
~/ seclog/ #96

Seclog - #96

24 curated links

g3n3r4l16

  1. Read More (brokencloudstorage.info)

    End-to-End Encrypted Cloud Storage in the Wild: A Broken Ecosystem - An analysis of the current state of encrypted cloud storage solutions.

  2. Read More (blog.doyensec.com)

    Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges - Exploring security vulnerabilities in Ruby's recursive merge operations.

  3. Read More (outpost24.com)

    Exploiting trust: Weaponizing permissive CORS configurations - Examining the security risks associated with overly permissive CORS settings.

  4. Read More (cloud.google.com)

    Google Cloud launches new Vulnerability Rewards Program - Details on Google Cloud's initiative to enhance security through bug bounties.

  5. Read More (blog.quarkslab.com)

    Exploiting Microsoft Teams on macOS during a Purple Team engagement - A case study on uncovering vulnerabilities in Microsoft Teams for macOS.

  6. Read More (citizenlab.ca)

    Should We Chat, Too? Security Analysis of WeChat's MMTLS Encryption Protocol - An in-depth look at the security measures in WeChat's encryption protocol.

  7. Read More (issues.chromium.org)

    Sandbox escape from extensions due to insufficient checks in Chrome - Details on a security vulnerability in Chrome's extension system.

  8. Read More (ostif.org)

    Node.js fuzzing audit - Comprehensive security audit report for Node.js.

  9. Read More (invictus-ir.com)

    Cloud native incident response in AWS - Part II - Strategies for handling security incidents in AWS environments.

  10. Read More (github.blog)

    3 ways to get Remote Code Execution in Kafka UI - Exploring vulnerabilities in Kafka UI that could lead to RCE.

  11. Read More (fortinet.com)

    Burning Zero Days: Suspected Nation-State Adversary Targets Ivanti CSA - Analysis of a sophisticated attack on Ivanti Connect Secure Appliance.

  12. Read More (rhinosecuritylabs.com)

    CloudGoat: New Scenario and Walkthrough (sns\secrets) - A new AWS security scenario for training purposes.

  13. Read More (securityrunners.io)

    Turning AWS Documentation into Gold: AI-Assisted Security Research - Leveraging AI for more effective AWS security research.

  14. Read More (blackwinghq.com)

    Finding Vulnerability Variants at Scale - Techniques for identifying similar vulnerabilities across large codebases.

  15. Read More (redops.at)

    Cobalt Strike - CDN / Reverse Proxy Setup - Guide on setting up Cobalt Strike with CDN and reverse proxy.

  16. Tahribat.com (tahribat.com)

    Interview with Aytek -HolyOne- Üstündağ, Founder of - An in-depth conversation with the creator of a prominent Turkish hacking and security forum. Watch Here

X3

  1. Read More (@fs0c131y)

    Baptiste Robert on the arrest of "USDoD" - OSINT breakdown of how a famous hacker's identity was uncovered.

  2. Read More (@mixedenn)

    Denis Shilov on GPT-4 jailbreak - Sharing a simple method to bypass GPT-4 content restrictions.

  3. Read More (@webtonull)

    Erlend Oftedal on WiFi Pineapple XSS - Recounting an XSS vulnerability discovery in WiFi Pineapple's admin GUI.

y0utube1

  1. DEF CO (youtube.com)

    N 32 - Winning the Game of Active Directory - Brandon Colley's presentation on Active Directory security strategies. Watch Here

g1thub4

  1. Explore on GitHub (github.com)

    adanalvarez/TrailDiscover - A repository of CloudTrail events with detailed security insights.

  2. Explore on GitHub (github.com)

    anchore/syft - CLI tool for generating Software Bill of Materials from container images and filesystems.

  3. Explore on GitHub (github.com)

    mllamazares/vulncov - Tool to correlate Semgrep scans with Python test coverage for prioritizing SAST findings.

  4. Explore on GitHub (github.com)

    protectai/vulnhuntr - Zero-shot vulnerability discovery using LLMs.

← All Seclogs