[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB
  [ privacy | malware | research | vendor ]

Risk and Cyber
Is Complexity the Enemy of Security?
Leverage Points - A Cybersecurity Perspective
Security Budgets - Supply and Demand
Building Balanced Security Teams - Updated
Confessions of a Public Speaker - Tips for Security Practitioners
Resilience Engineering - Step by Step
AI Consequence and Intent - Second Order Risks
Work / Life Balance
Delivering Security at Scale: From Artisanal to Industrial
You Only Get 3 Metrics - Which Ones Would You Pick?
The Daily Swig | Cybersecurity news and views
We’re going teetotal: It’s goodbye to The Daily Swig
Bug Bounty Radar // The latest bug bounty programs for March 2023
Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses
Password managers: A rough guide to enterprise secret platforms
Chromium bug allowed SameSite cookie bypass on Android devices
Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption
NIST plots biggest ever reform of Cybersecurity Framework
Cisco ClamAV anti-malware scanner vulnerable to serious security flaw
CVSS system criticized for failure to address real-world impact
‘Most web API flaws are missed by standard security tests’ – Corey J Ball on securing a neglected attack vector
AWS Security Blog
2023 H1 IRAP report is now available on AWS Artifact for Australian customers
How to implement cryptographic modules to secure private keys used with IAM Roles Anywhere
AWS achieves HDS certification in two additional Regions
Access accounts with AWS Management Console Private Access
Understanding DDoS simulation testing in AWS
Automatically detect and block low-volume network floods
AWS achieves ISO/IEC 20000-1:2018 certification for AWS Asia Pacific (Mumbai) and (Hyderabad) Regions
How to enforce DNS name constraints in AWS Private CA
Reduce the security and compliance risks of messaging apps with AWS Wickr
Establishing a data perimeter on AWS: Allow access to company data only from expected networks
Darknet – Hacking Tools, Hacker News & Cyber Security
AgentSmith HIDS – Host Based Intrusion Detection
padre – Padding Oracle Attack Exploiter Tool
Privacy Implications of Web 3.0 and Darknets
DataSurgeon – Extract Sensitive Information (PII) From Logs
Pwnagotchi – Maximize Crackable WPA Key Material For Bettercap
HardCIDR – Network CIDR and Range Discovery Tool
Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage
CFRipper – CloudFormation Security Scanning & Audit Tool
CredNinja – Test Credential Validity of Dumped Credentials or Hashes
assetfinder – Find Related Domains and Subdomains
leastprivilege.com
What’s going on?
The Future of IdentityServer
Flexible Access Token Validation in ASP.NET Core
Refresh Tokens in IdentityServer4 v4
Announcing IdentityServer4 v4.0
Resource Access in IdentityServer4 v4 and going forward
I don’t like Identity Tokens
The JWT Profile for OAuth 2.0 Access Tokens (and IdentityServer)
Updates on our Workshops
Automatic Token Management for ASP.NET Core and Worker Services 1.0
Blog – Fox-IT International blog
From Backup to Backdoor: Exploitation of CVE-2022-36537 in R1Soft Server Backup Manager
CVE-2022-27510, CVE-2022-27518 – Measuring Citrix ADC & Gateway version adoption on the Internet
Encryption Does Not Equal Invisibility – Detecting Anomalous TLS Certificates with the Half-Space-Trees Algorithm
SnapMC skips ransomware, steals data
Abusing cloud services to fly under the radar
StreamDivert: Relaying (specific) network connections
WastedLocker: A New Ransomware Variant Developed By The Evil Corp Group
LDAPFragger: Command and Control over LDAP attributes
Office 365: prone to security breaches?
Using Anomaly Detection to find malicious domains
Positive Technologies - learn and secure
PHDays 10 IDS Bypass contest: writeup and solutions
APT31 new dropper. Target destinations: Mongolia, Russia, the U.S., and elsewhere
How to detect a cyberattack and prevent money theft
Troy Hunt's Blog
Weekly Update 366
Weekly Update 365
Weekly Update 364
Weekly Update 363
68k Phishing Victims are Now Searchable in Have I Been Pwned, Courtesy of CERT Poland
Data From The Qakbot Malware is Now Searchable in Have I Been Pwned, Courtesy of the FBI
Weekly Update 362
Fighting API Bots with Cloudflare's Invisible Turnstile
Weekly Update 361
All New Have I Been Pwned Domain Search APIs and Splunk Integration
Schneier on Security
Signal Will Leave the UK Rather Than Add a Backdoor
Friday Squid Blogging: New Squid Species
New Revelations from the Snowden Documents
On the Cybersecurity Jobs Shortage
Detecting AI-Generated Text
Using Hacked LastPass Keys to Steal Cryptocurrency
Friday Squid Blogging: Cleaning Squid
LLM Summary of My Book Beyond Fear
On Technologies for Automatic Facial Recognition
Upcoming Speaking Engagements
Security Blog | Pen Test Partners
3yrs of CAA ASSURE assessments. What we’ve learned
PCI v4 is coming. Are you ready?
Information disclosure through insecure design
A broken marriage. Abusing mixed vendor Kerberos stacks
The most hated man on the internet. Lessons to learn
Scorpion CBS show. Plane hack
Die Hard 2. Or how not to hack airplanes
Vulnerability disclosure in aviation
PTP at DEF CON 31 2023
n00b’s guide to DEF CON. Surviving the Matrix of the underground
Red Hat Security
Accelerated Encryption with 4th Gen Intel® Xeon® Scalable Processors
DISA STIG for Red Hat OpenShift is now available
Learn about Confidential Computing Attestation
Enterprise security challenges for CNI organizations: Security challenges with people and processes
Enterprise security challenges for CNI organizations: Overview of security challenges
Improving containerization security with Red Hat OpenShift
Persistent volume support with peer-pods: A technical deep dive
Better securing the frontlines: Leveraging Ansible Automation Platform and AIDE for DoD file integrity
Persistent volume support with peer-pods: Solution overview
The State of Edge Security Report
Pedro Félix's shared memory
Reactive streams: a play in multiple acts
RFC 8252 and OAuth 2.0 for Native Apps
Accessing the HTTP Context on ASP.NET Core
Should I PUT or should I POST? (Darling you gotta let me know)
Health check APIs, 500 status codes and media types
On contracts and HTTP APIs
Focus on the representation semantics, leave the transfer semantics to HTTP
Client-side development on OS X using Windows hosted HTTP Web APIs
Using multiple IIS server certificates on Windows 7
The OpenID Connect Cast of Characters
Comments on:
Google Online Security Blog
Scaling Rust Adoption Through Training
Capslock: What is your code really capable of?
Android Goes All-in on Fuzzing
AI-Powered Fuzzing: Breaking the Bug Hunting Barrier
Toward Quantum Resilient Security Keys
Making Chrome more secure by bringing Key Pinning to Android
Downfall and Zenbleed: Googlers helping secure the ecosystem
An update on Chrome Security updates – shipping security fixes to you faster
Android 14 introduces first-of-its-kind cellular connectivity security features
Pixel Binary Transparency: verifiable security for Pixel devices
Microsoft Security Blog
Forrester names Microsoft a Leader in the 2023 Zero Trust Platform Providers Wave™ report
Peach Sandstorm password spray campaigns enable intelligence collection at high-value targets
Uncursing the ncurses: Memory corruption vulnerabilities found in library
Malware distributor Storm-0324 facilitates ransomware access
Cloud storage security: What’s new in the threat matrix
Navigating privacy in a data-driven world with Microsoft Priva
Flax Typhoon using legitimate software to quietly access Taiwanese organizations
How the Microsoft Incident Response team helps customers remediate threats
Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS 
New Microsoft Security innovations expand multicloud visibility and enhance multiplatform protection
Krebs on Security
LastPass: ‘Horse Gone Barn Bolted’ is Strong Password
Who’s Behind the 8Base Ransomware Website?
FBI Hacker Dropped Stolen Airbus Data on 9/11
Adobe, Apple, Google & Microsoft Patch 0-Day Bugs
Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach
Why is .US Being Used to Phish So Many of Us?
U.S. Hacks QakBot, Quietly Removes Botnet Infections
Kroll Employee SIM-Swapped for Crypto Investor Data
Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders.
Karma Catches Up to Global Phishing Service 16Shop
tl;dr sec
[tl;dr sec] #200 - LLM → Tailored IR Scenario, How to Secure Your GitHub/GitLab, Cloud Storage Threat Matrix
[tl;dr sec] #199 - Supply Chain Security Overview, Container Escapes, AI + Cybersecurity
An Overview of Software Supply Chain Security
[tl;dr sec] #198 - Building a Detection as Code Pipeline, NIST on CI/CD Supply Chain Security, Finding Malware with LLMs
[tl;dr sec] #197 - Career Resources, Modern Security Podcast, Smashing the State Machine
[tl;dr sec] #196 - How Secrets Leak in CI/CD, AI Threat Modeling, Supply Chain
[tl;dr sec] #195 - Kubernetes Exposed, SBOMs, Elastic's Vuln Management
[tl;dr sec] #194 - CNAPPGoat, KubeFuzz, tl;dr sec swag
[tl;dr sec] #193 - ATT&CK for AI and SaaS, GitHub Actions Goat, Finding Bugs in Web App Routes
[tl;dr sec] #192 - Google's AI Red Teaming, OWASP on Cloud Security, Trail of Bits' Testing Guide
Security Intelligence
Are you ready to build your organization’s digital trust?
Most organizations want security vendor consolidation
How IBM secures the U.S. Open
How the FBI Fights Back Against Worldwide Cyberattacks
How NIST Cybersecurity Framework 2.0 Tackles Risk Management
How I got started: Cloud security engineer
Cost of a data breach 2023: Pharmaceutical industry impacts
“Authorized” to break in: Adversaries use valid credentials to compromise cloud environments
Email campaigns leverage updated DBatLoader to deliver RATs, stealers
Why keep Cybercom and the NSA’s dual-hat arrangement?
Project Zero
Analyzing a Modern In-the-wild Android Exploit
Summary: MTE As Implemented
MTE As Implemented, Part 2: Mitigation Case Studies
MTE As Implemented, Part 3: The Kernel
MTE As Implemented, Part 1: Implementation Testing
Release of a Technical Report into Intel Trust Domain Extensions
Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems
Exploiting null-dereferences in the Linux kernel
DER Entitlements: The (Brief) Return of the Psychic Paper
Exploiting CVE-2022-42703 - Bringing back the stack attack
Mozilla Security Blog
Version 2.9 of the Mozilla Root Store Policy
Updated GPG key for signing Firefox Releases
Upgrading Mozilla’s Root Store Policy to Version 2.8
Revocation Reason Codes for TLS Server Certificates
Preventing secrets from leaking through Clipboard
Improving the Quality of Publicly Trusted Intermediate CA Certificates with Enhanced Oversight and Automation
Securing the proxy API for Firefox add-ons
Firefox 93 features an improved SmartBlock and new Referrer Tracking Protections
Firefox 93 protects against Insecure Downloads
Securing Connections: Disabling 3DES in Firefox 93
Cofense
Luxury Hotels Remain Major Target of Ongoing Social Engineering Attack
LokiBot – Phishing Malware Baseline
Demystifying Smishing vs Phishing Attacks for a Safer Online Experience
The Lure of Subject Lines in Phishing Emails
5 Ways to Maximize Your Organization’s Resiliency Rate
5 Insights on Managed Phishing Detection and Response (PDR)
Major Energy Company Targeted in Large QR Code Phishing Campaign
Google AMP – The Newest of Evasive Phishing Tactic
Cofense Announces General Availability of Protect+ MSP
3 Ways MSPs/MSSPs are Helping SMBs Do More with Less Around Email Security – Consolidation Without Compromise
CyberWatch
It’s Cybersecurity Awareness Month!
Welcome Back
Hackfest 2021 N1ghtmar3s Edition
What I did on my Pandemic Summer Vacation 2021
Comparing Chinese APTs in Software Supply Chain Attacks
The Diana Initiative 2021
Let the truth be told
Today is for them
My Happy 2nd Dose Day!