Weekly curated security news, tweets, videos, and GitHub projects.
Spotlight: DIALStranger, State of Cloud Security, Okta for Red Teamers, Burp Collab to Cloudflare Workers, Searching for Malicious HTTP Servers etc.
Security Operations on Coinbase, Google’s AI-Sec Framework, Terraform Security Best, Pwn2Own journey, compromised etcd, Hacking Google Bard etc.
Cloudflare incident ,Legba, secure HAR sharing, Semgrep's New Rule Syntax, GPT-4 Vision Prompt Injection, Data-bouncing, Drone Warfare, CVSS 4.0 etc.
Spotlight: CVE-2023-20198, Attacking AWS Cognito, RCE in Chrome, SSRF to RCE on Mastodon, Security Vuln in CasaOS, Russian Jabber Hijack etc...
Spotlight: KeepnetLabs's Partnership with Pentesters, HTTP/2 ‘Rapid Reset’ DDoS attack, CURL (CVE-2023-38545), PyPI Malware Campaign, ZAP 2.14.0, etc.
Spotlight: IKEA Effect, Severity HIGH security problem of curl, Security is about data, DevSecOps with AI, GPU.zip ,CVE-2023-22515, etc.
Spotlight: Account Takeover of Internal Tesla Accounts, RCE in Chrome, I hacked macOS, security testing for WebSocket, SecDevOps or DevSecOps?, etc.