Seclog - #17

11 Mar 2023

Unauthorized access to organization secrets in GitHub — Ophion Security

Scaling Appsec at Netflix (Part 2)

Google Online Security Blog: OSV and the Vulnerability Life Cycle

How to intercept, observe & mock WebRTC traffic

A Cyber Alarm – PoC Parrot

EP 44: How does ChatGPT work? - by Alex Xu

#1847140 Argo CD reconciles apps outside configured namespaces when sharding is enabled

Prompt Injection Attacks on Large Language Models

Fixing the Next 10,000 Aliasing Bugs

containerd completes fuzzing audit | Cloud Native Computing Foundation

The diminishing returns of DAST

crypto/elliptic: specific unreduced P-256 scalars produce incorrect results (CVE-2023-24532) · Issue #58647

0xffsec Handbook: The Pentester's Guide

How Container Networking Works: Practical Explanation

Segfault / GUI | The Hacker’s Choice

A New Vector For “Dirty” Arbitrary File Write to RCE

Matt Jay on Twitter: "Currently reading: @TheDFIRReport year in review. "

Fuzz like a pro: ERC20 properties, example usage, and Echidna cheat codes

Security Begins with Secure Development Environments

nemesida-waf/waf-bypass

dom-sec/awesome-physec

UberGuidoZ/Flipper

CosmodiumCS/SpiderCat

AloneMonkey/frida-ios-dump

jas502n/Grafana-CVE-2021-43798

gyaansastra/CVE-2023-21716

corkami/collisions

Orange-Cyberdefense/KeePwn

c0rdis/security-champions-playbook

ant4g0nist/webgl-fuzzer

cisagov/decider