[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
  [ privacy | malware | research | vendor ]
Phil Venables
Scaling Security, AI and More....
Starting a Security Program from Scratch (or re-starting)
CISO: Librarian, Archeologist or Explorer?
Why Stuff Fails (“The Thermocline of Truth”)
Security Programs - A Plan is Not a Strategy
Security Leaders’ Reading List
Turning the Security Flywheel
Post Quantum Cryptography Migration: Time to Get Going
Stressed Testing: Practical Operational Resilience
The CISO Factories: 12 Features of Organizations that Create Security Leaders 
The Daily Swig
We’re going teetotal: It’s goodbye to The Daily Swig
Bug Bounty Radar // The latest bug bounty programs for March 2023
Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses
Password managers: A rough guide to enterprise secret platforms
Chromium bug allowed SameSite cookie bypass on Android devices
Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption
NIST plots biggest ever reform of Cybersecurity Framework
Cisco ClamAV anti-malware scanner vulnerable to serious security flaw
CVSS system criticized for failure to address real-world impact
‘Most web API flaws are missed by standard security tests’ – Corey J Ball on securing a neglected attack vector
AWS Security Blog
How to automate incident response for Amazon EKS on Amazon EC2
Introducing the AWS User Guide to Governance, Risk and Compliance for Responsible AI Adoption within Financial Services Industries
Protect against advanced DNS threats with Amazon Route 53 Resolver DNS Firewall
AI lifecycle risk management: ISO/IEC 42001:2023 for AI governance
Mapping AWS security services to MITRE frameworks for threat detection and mitigation
Monitoring and optimizing the cost of the unused access analyzer in IAM Access Analyzer
Implementing safety guardrails for applications using Amazon SageMaker
How to manage migration of hsm1.medium CloudHSM clusters to hsm2m.medium
AWS expands Spain’s ENS High certification across 174 services
AWS renews its AAA Pinakes rating for the Spanish financial sector
Darknet - The Darkside
Least Privilege
My next Step
What’s going on?
The Future of IdentityServer
Flexible Access Token Validation in ASP.NET Core
Refresh Tokens in IdentityServer4 v4
Announcing IdentityServer4 v4.0
Resource Access in IdentityServer4 v4 and going forward
I don’t like Identity Tokens
The JWT Profile for OAuth 2.0 Access Tokens (and IdentityServer)
Updates on our Workshops
Fox-IT Blog
Decrypting Full Disk Encryption with Dissect
Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation
Sifting through the spines: identifying (potential) Cactus ransomware victims
From Backup to Backdoor: Exploitation of CVE-2022-36537 in R1Soft Server Backup Manager
CVE-2022-27510, CVE-2022-27518 – Measuring Citrix ADC & Gateway version adoption on the Internet
Encryption Does Not Equal Invisibility – Detecting Anomalous TLS Certificates with the Half-Space-Trees Algorithm
SnapMC skips ransomware, steals data
StreamDivert: Relaying (specific) network connections
WastedLocker: A New Ransomware Variant Developed By The Evil Corp Group
LDAPFragger: Command and Control over LDAP attributes
Positive Technologies
PHDays 10 IDS Bypass contest: writeup and solutions
APT31 new dropper. Target destinations: Mongolia, Russia, the U.S., and elsewhere
How to detect a cyberattack and prevent money theft
Troy Hunt
Have I Been Pwned 2.0 is Now Live!
Weekly Update 452
Welcoming the Malaysian Government to Have I Been Pwned
Weekly Update 451
After the Breach: Finding new Partners with Solutions for Have I Been Pwned Users
Welcoming the Isle of Man Government to Have I Been Pwned
Passkeys for Normal People
Weekly Update 450
The Have I Been Pwned Alpine Grand Tour
Welcoming The Gambia National CSIRT to Have I Been Pwned
The Hacker Factor Blog
The Sideways Sidecar
Hello my perverted friend
C2PA and Authentication Updates
Safety in Numbers
The Donut Paradox
The Security Skeptic
Cybercrime Reported in April 2025
CyberSecPolitics
Mythical Beasts
A quick research overview of the Research Handbook on Cyberwarfare
Automated LLM Bugfinders
What Open Source projects are unmaintained and should you target for takeover ?
The Open Source Problem
Jia Tan and SocialCyber
The Atlantic Council Paper and Defending Forward
FORECASTING
Guest Post: HostileSpectrum’s futures: Looking back on 2021’s estimative signposts
Pride Month
Schneier on Security
The Voter Experience
More AIs Are Taking Polls and Surveys
DoorDash Hack
The NSA’s “Fifty Years of Mathematical Cryptanalysis (1937–1987)”
Friday Squid Blogging: Pet Squid Simulation
Communications Backdoor in Chinese Power Inverters
AI-Generated Law
Upcoming Speaking Engagements
Google’s Advanced Protection Now on Android
Court Rules Against NSO Group
SANS Inernet Storm Center
Resilient Secure Backup Connectivity for SMB/Home Users, (Thu, May 22nd)
ISC Stormcast For Thursday, May 22nd, 2025 https://isc.sans.edu/podcastdetail/9462, (Thu, May 22nd)
New Variant of Crypto Confidence Scam, (Wed, May 21st)
ISC Stormcast For Wednesday, May 21st, 2025 https://isc.sans.edu/podcastdetail/9460, (Wed, May 21st)
Researchers Scanning the Internet, (Tue, May 20th)
ISC Stormcast For Tuesday, May 20th, 2025 https://isc.sans.edu/podcastdetail/9458, (Tue, May 20th)
RAT Dropped By Two Layers of AutoIT Code, (Mon, May 19th)
ISC Stormcast For Monday, May 19th, 2025 https://isc.sans.edu/podcastdetail/9456, (Mon, May 19th)
xorsearch.py: Python Functions, (Sat, May 17th)
ISC Stormcast For Friday, May 16th, 2025 https://isc.sans.edu/podcastdetail/9454, (Fri, May 16th)
Red Hat Security
Post-quantum cryptography in Red Hat Enterprise Linux 10
Unleashing innovation in Red Hat Enterprise Linux with extensions repository
How HashiCorp Vault and Red Hat OpenShift can work together
EMEA blog | Dutch | Red Hat OpenShift Comes Out Exceptionally Strong in Data Security Survey Results
Zero trust workload identity manager now available in tech preview
Using RHEL confidential virtual machines to protect AI workloads on Microsoft Azure
The dual challenge: Security and compliance
Trust and authenticity: In the kitchen and the software supply chain
By the numbers: Security insights from Red Hat and IBM
Pentest Partners
Fully segregated networks? Your dual-homed devices might disagree
Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…
VNC. RDP for all to see
New cybersecurity rules for smart heat pump manufacturers
RCEs and more in the KUNBUS GmbH Revolution Pi PLC
Exploiting Copilot AI for SharePoint
The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache
Hiding behind a password
The dangers of web based messaging apps
Unallocated space analysis
Pedro Felix's Shared Memory
Reactive streams: a play in multiple acts
RFC 8252 and OAuth 2.0 for Native Apps
Accessing the HTTP Context on ASP.NET Core
Should I PUT or should I POST? (Darling you gotta let me know)
Health check APIs, 500 status codes and media types
On contracts and HTTP APIs
Focus on the representation semantics, leave the transfer semantics to HTTP
Client-side development on OS X using Windows hosted HTTP Web APIs
Using multiple IIS server certificates on Windows 7
The OpenID Connect Cast of Characters
Google Online Security Blog
Advanced Protection: Google’s Strongest Security for Mobile Devices
What’s New in Android Security and Privacy in 2025
Using AI to stop tech support scams in Chrome
Google announces Sec-Gemini v1, a new experimental cybersecurity model
Taming the Wild West of ML: Practical Model Signing with Sigstore
New security requirements adopted by HTTPS certificate industry
Titan Security Keys now available in more countries
Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source
Vulnerability Reward Program: 2024 in Review
New AI-Powered Scam Detection Features to Help Protect You on Android
Netlabs.360.com
僵尸网络911 S5的数字遗产
Heads up! Xdr33, A Variant Of CIA’s HIVE Attack Kit Emerges
警惕：魔改后的CIA攻击套件Hive进入黑灰产领域
快讯：使用21个漏洞传播的DDoS家族WSzero已经发展到第4个版本
P2P Botnets: Review - Status - Continuous Monitoring
P2P 僵尸网络：回顾·现状·持续监测
Fodcha Is Coming Back, Raising A Wave of Ransom DDoS
卷土重来的DDoS狂魔：Fodcha僵尸网络再次露出獠牙
PureCrypter is busy pumping out various malicious malware families
PureCrypter Loader持续活跃，已经传播了10多个其它家族
MS Cyber Security
Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer
Microsoft extends Zero Trust to secure the agentic workforce
​​How the Microsoft Secure Future Initiative brings Zero Trust to life
Marbled Dust leverages zero-day in Output Messenger for regional espionage
Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 2
Microsoft partners with Global Anti-Scam Alliance to fight cybercrime
Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape
Pushing passkeys forward: Microsoft’s latest updates for simpler, safer sign-ins
14 secure coding tips: Learn from the experts at Microsoft Build
Microsoft announces the 2025 Security Excellence Awards winners
The Last Watchdog
News Alert: Halo Security reaches SOC 2 milestone, validating its security controls and practices
News alert: INE Security, Abadnet Institute partner to deliver cybersecurity training in Saudi Arabia
SHARED INTEL Q&A: Visibility, not volume — reframing detection for the AI-enabled SOC
News alert: DataHub secures $35M Series B to enable AI to safely manage and use data
News alert: Attaxion integrates its EASM Platform with ENISA’s EU Vulnerability Database (EUVD)
RSAC Fireside Chat: Enterprise browsers arise to align security with the modern flow of work
MY TAKE: Semantics aside, “agentic AI” is already reshaping how we work, think, envision what’s next
SHARED INTEL Q&A: AI in the SOC isn’t all about speed — it’s more so about smoothing process
GUEST ESSAY: Cybercrime for hire: small businesses are the new bullseye of the Dark Web
News alert: INE Security highlights monthly CVE Labs aimed at sharpening real-world defense
The Security Catalyst
Why we must develop ourselves before we can elevate our team
Ease change by painting a picture of a better tomorrow
Deliver value faster by asking what they know… that you don’t (yet)
Why I love asking “What if I’m wrong?”
The surprising reason you need to record yourself rehearsing before your next presentation
Security needs more sizzle, less steakhouse
Why we always restate the problem
How you get disconnected from your value (and your story)
Do you see the progress you made this week?
How to use percolation and incubation to solve problems
Cloud Security Alliance
The Hidden Risk in Your Cloud Stack: How Overlooked AWS Resources Become Entry Points for Hackers
CSA Releases Comprehensive EATO Framework to Address Security Challenges for Small Cloud Providers
Sustainability Reporting: Key Insights for Businesses
Managing Identity Risk to Strengthen Business Continuity
MCP: The Protocol That’s Quietly Revolutionizing AI Integration
When AI Breaks Bad: What High-Profile Failures Teach Us About Resilience
The Rising Threat of Consent Phishing: How OAuth Abuse Bypasses MFA
CISO's Guide for Defending against the Top 8 Cyber Threats in 2025
Open-Source Models vs. Closed-Source Models: A Simple Guide
Implementing CCM: Human Resources Controls
Krebs on Security
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
Breachforums Boss to Pay $700k in Healthcare Breach
Patch Tuesday, May 2025 Edition
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
Alleged ‘Scattered Spider’ Member Extradited to U.S.
DOGE Worker’s Code Supports NLRB Whistleblower
Whistleblower: DOGE Siphoned NLRB Case Data
Funding Expires for Key Cyber Vulnerability Database
Trump Revenge Tour Targets Cyber Leaders, Elections
tl;dr sec
[tl;dr sec] #280 - Hardening GitHub Actions, Uber's Multi-Cloud Secret Management, Prompts are the New IOCs
[tl;dr sec] #279 - Security for High Velocity Engineering, Cloud Incident Readiness, AI-powered Malware Implants
Security for High Velocity Engineering
[tl;dr sec] #278 - North Korean IT Workers, How Sentinel One Defends Itself, How Threat Actors Use Claude
[tl;dr sec] #277 - Cybersecurity (Anti)Patterns, $64K from Deleted Files, New from Meta AI Security
[tl;dr sec] #276 - AI-created PoC Exploit, Cloud Snitch, Kubernetes Attack Simulation
[tl;dr sec] #275 - Damn Vulnerable MCP, Figma's Modern Endpoint Strategy, BloodHound for AWS IAM
[tl;dr sec] #274 - Model Context Protocol + Security Part Deux, Securing GitHub Actions, S3 Scanner
[tl;dr sec] #273 - Model Context Protocol + Security Tools, Compromising CodeQL, Red Teaming with ServiceNow
[tl;dr sec] #272 - AI Agent Security, Kubernetes Security, ‘State of CloudSec’ Reports: Insights or Self-Owns?
Security Intelligence
Project Zero
Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
The Windows Registry Adventure #6: Kernel-mode objects
Blasting Past Webp
Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)
Windows Bug Class: Accessing Trapped COM Objects with IDispatch
The Windows Registry Adventure #5: The regf file format
The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit
Windows Tooling Updates: OleView.NET
Simple macOS kernel extension fuzzing in userspace with IDA and TinyInst
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code
Mozilla Security
Firefox Security Response to pwn2own 2025
Updated GPG key for signing Firefox Releases
Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0
Behind the Scenes: Fixing an In-the-Wild Firefox Exploit
Firefox will upgrade more Mixed Content in Version 127
Rapidly Leveling up Firefox Security
Mozilla VPN Security Audit 2023
Version 2.9 of the Mozilla Root Store Policy
Updated GPG key for signing Firefox Releases
Upgrading Mozilla’s Root Store Policy to Version 2.8
CyberWatch
It’s Cybersecurity Awareness Month!
Welcome Back
Hackfest 2021 N1ghtmar3s Edition
What I did on my Pandemic Summer Vacation 2021
Comparing Chinese APTs in Software Supply Chain Attacks
The Diana Initiative 2021
Let the truth be told
Today is for them
My Happy 2nd Dose Day!
Zero Day
7 ways to thwart phone thieves - and avoid China's infamous 'stolen iPhone building'
How to safeguard your small business in the hybrid work era: 5 top cybersecurity solutions
How to disable ACR on your TV (and why it makes such a big difference for privacy)
I thought my favorite browser blocked trackers but this free privacy tool proved me wrong
The best VPNs for school in 2025: Expert tested and reviewed
The best VPN services for iPad in 2025: Expert tested and reviewed
The best VPN services for iPhone in 2025: Expert tested and reviewed
AI agent adoption is driving increases in opportunities, threats, and IT budgets
A security key for every employee? YubiKey-as-a-Service goes global
A drug developer is buying 23andMe - what does that mean for your DNA data?
The Security Ledger
Halo Security Achieves SOC 2 Type 1 Compliance, Validating Security Controls for Its Attack Surface Management Platform
INE Security Partners with Abadnet Institute for Cybersecurity Training Programs in Saudi Arabia
Attaxion Becomes the First EASM Platform to Integrate ENISA’s EU Vulnerability Database (EUVD)
Logicube’s Falcon®-NEO2 Forensic Imager Achieves Project VIC Validation; Now VICS Data Compliant
INE Security Alert: Continuous CVE Practice Closes Critical Gap Between Vulnerability Alerts and Effective Defense
INE Security Alert: Top 5 Takeaways from RSAC 2025
SpyCloud Analysis Reveals 94% of Fortune 50 Companies Have Employee Data Exposed in Phishing Attacks
Link11 brings three brands together on one platform with new branding
SecAI Debuts at RSA 2025, Redefining Threat Investigation with AI
Court Dismisses Criminal Charges Against VPN Executive, Affirms No-Log Policy
CISA Blog
April is Emergency Communications Month!
Building Resilient ICT Supply Chains:  8th Annual Supply Chain Integrity Month 
SAFECOM Publishes Fall 2024 SAFECOM Bi-Annual Meeting Executive Summary
NCSWIC Publishes Spring 2024 Bi-Annual Meeting Executive Summaries
SAFECOM Publishes Spring 2024 SAFECOM Bi-Annual Meeting Executive Summary
Unlocking Vulnrichment: Enriching CVE Data
Defending Democracy: The #PROTECT2024 Chapter in Election Infrastructure Security
Forging National Resilience for an Era of Disruption
United in Cyber Defense: A Model for Operational Collaboration
Strengthening America’s Resilience Against the PRC Cyber Threats
CyberSecIntelligence
פקודות בסיסיות בלינוקס - תרגול 3
פקודות בסיסיות בלינוקס - תרגול 2
פקודות בסיסיות בלינוקס
פקודות בסיסיות בלינוקס - תרגול 1
© 2024 RiskDiscovery | Sponsored by: Deception Logic