Weekly curated security news, tweets, videos, and GitHub projects.
Spotlight: Bing.com Hacked, NEAR SC Security Course, Advanced Phishing, Application of ChatGPT in Cybersecurity, CodeQL zero to hero, etc.
Spotlight: Securing CI/CD Pipelines, JMX Exploitation, CVE-2022-44268, Attack Surface Management, WAF Bypass, Vulnerability Remediation Concept, etc.
Spotlight: CircleCI Security Incident, Trail of Bits Security Audit, DNS Cache Poisoning in Chrome, Hacking/Secure CI/CD Pipeline, PostgreSQL-RCE, etc
Spotlight: OSV & Vulnerability Life Cycle, Unauthorized Issue on Github Secret, mock WebRTC traffic,Prompt Injection Attacks, Scaling Appsec Netflix.
Spotlight: Abusing Maven, DNS Hijacking, OAuth vuln in Booking.com, CF's Oxy Proxy etc.
Spotlight: Zero Trust, EmojiDeploy, Prototype Pollution RCE, OWASP Kubernetes, Airbnb's Access Management, dns0, 12ft, etc.
Spotlight: Hacking airline, Phishing w/ Github, Jira, VMware , RCE in {binwalk,vBulletin,Aspera Faspex,Yellowfin}, SSO : XSS to ATO etc.
Spotlight: MyBB RCE, Bitwarden design flaw, Microsoft Teams RCE, Hacking Redis, SSH Key injection etc.
Spotlight: Clustering Web Pages, Sudoedit bypass, Security in the age of LLMs etc.