[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
  [ privacy | malware | research | vendor ]
Phil Venables
Security Leaders’ Reading List
Turning the Security Flywheel
Post Quantum Cryptography Migration: Time to Get Going
Stressed Testing: Practical Operational Resilience
The CISO Factories: 12 Features of Organizations that Create Security Leaders 
Keys to Career Success
Top Ideas and Posts from 2024
Leadership: One Day at a Time, One Step at a Time
Regulatory Harmonization - Let’s Get Real 
Lessons in Crisis Management - Top 10 Disaster Movies 
The Daily Swig
We’re going teetotal: It’s goodbye to The Daily Swig
Bug Bounty Radar // The latest bug bounty programs for March 2023
Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses
Password managers: A rough guide to enterprise secret platforms
Chromium bug allowed SameSite cookie bypass on Android devices
Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption
NIST plots biggest ever reform of Cybersecurity Framework
Cisco ClamAV anti-malware scanner vulnerable to serious security flaw
CVSS system criticized for failure to address real-world impact
‘Most web API flaws are missed by standard security tests’ – Corey J Ball on securing a neglected attack vector
AWS Security Blog
AWS continues to support government cloud security and shape FedRAMP’s evolution toward automated compliance
Enhancing cloud security in AI/ML: The little pickle story
Winter 2024 SOC 1 report is now available with 183 services in scope
Effectively implementing resource control policies in a multi-account environment
Use AWS service reference information to automate policy management workflows
2024 H2 IRAP report is now available on AWS Artifact for Australian customers
AWS completes the annual UAE Information Assurance Regulation compliance assessment
AWS KMS CloudWatch metrics help you better track and understand how your KMS keys are being used
Secure cloud innovation starts at re:Inforce 2025
Manage authorization within a containerized workload using Amazon Verified Permissions
Darknet - The Darkside
Least Privilege
My next Step
What’s going on?
The Future of IdentityServer
Flexible Access Token Validation in ASP.NET Core
Refresh Tokens in IdentityServer4 v4
Announcing IdentityServer4 v4.0
Resource Access in IdentityServer4 v4 and going forward
I don’t like Identity Tokens
The JWT Profile for OAuth 2.0 Access Tokens (and IdentityServer)
Updates on our Workshops
Fox-IT Blog
Decrypting Full Disk Encryption with Dissect
Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation
Sifting through the spines: identifying (potential) Cactus ransomware victims
From Backup to Backdoor: Exploitation of CVE-2022-36537 in R1Soft Server Backup Manager
CVE-2022-27510, CVE-2022-27518 – Measuring Citrix ADC & Gateway version adoption on the Internet
Encryption Does Not Equal Invisibility – Detecting Anomalous TLS Certificates with the Half-Space-Trees Algorithm
SnapMC skips ransomware, steals data
StreamDivert: Relaying (specific) network connections
WastedLocker: A New Ransomware Variant Developed By The Evil Corp Group
LDAPFragger: Command and Control over LDAP attributes
Positive Technologies
PHDays 10 IDS Bypass contest: writeup and solutions
APT31 new dropper. Target destinations: Mongolia, Russia, the U.S., and elsewhere
How to detect a cyberattack and prevent money theft
Troy Hunt
Weekly Update 445
A Sneaky Phish Just Grabbed my Mailchimp Mailing List
Weekly Update 444
Weekly Update 443
Soft-Launching and Open Sourcing the Have I Been Pwned Rebrand
Weekly Update 442
We're Backfilling and Cleaning Stealer Logs in Have I Been Pwned
Weekly Update 441
Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs
Weekly Update 440
The Hacker Factor Blog
PTSD and Power Users
Sign Here
Crashing Arizona's C2PA Pilot
PDF Problems as FotoForensics Turns 13
ShmooCon and C2PA Forgeries
The Security Skeptic
Krebs On Security reviews findings from Interisle's Cybercrime Supply Chain Study
CyberSecPolitics
Mythical Beasts
A quick research overview of the Research Handbook on Cyberwarfare
Automated LLM Bugfinders
What Open Source projects are unmaintained and should you target for takeover ?
The Open Source Problem
Jia Tan and SocialCyber
The Atlantic Council Paper and Defending Forward
FORECASTING
Guest Post: HostileSpectrum’s futures: Looking back on 2021’s estimative signposts
Pride Month
Schneier on Security
Friday Squid Blogging: Squid Werewolf Hacking Group
AIs as Trusted Third Parties
A Taxonomy of Adversarial Machine Learning Attacks and Mitigations
AI Data Poisoning
Report on Paragon Spyware
More Countries are Demanding Backdoors to Encrypted Apps
Friday Squid Blogging: A New Explanation of Squid Camouflage
My Writings Are in the LibGen AI Training Corpus
NCSC Releases Post-Quantum Cryptography Timeline
Critical GitHub Attack
SANS Inernet Storm Center
ISC Stormcast For Monday, March 31st, 2025 https://isc.sans.edu/podcastdetail/9386, (Mon, Mar 31st)
A Tale of Two Phishing Sites, (Fri, Mar 28th)
ISC Stormcast For Friday, March 28th, 2025 https://isc.sans.edu/podcastdetail/9384, (Fri, Mar 28th)
Sitecore "thumbnailsaccesstoken" Deserialization Scans (and some new reports) CVE-2025-27218, (Thu, Mar 27th)
ISC Stormcast For Thursday, March 27th, 2025 https://isc.sans.edu/podcastdetail/9382, (Thu, Mar 27th)
ISC Stormcast For Wednesday, March 26th, 2025 https://isc.sans.edu/podcastdetail/9380, (Wed, Mar 26th)
[Guest Diary] Leveraging CNNs and Entropy-Based Feature Selection to Identify Potential Malware Artifacts of Interest, (Wed, Mar 26th)
X-Wiki Search Vulnerability exploit attempts (CVE-2024-3721), (Tue, Mar 25th)
ISC Stormcast For Tuesday, March 25th, 2025 https://isc.sans.edu/podcastdetail/9378, (Tue, Mar 25th)
Privacy Aware Bots, (Mon, Mar 24th)
Red Hat Security
Mitigating threats against telco networks in the cloud
Red Hat Advanced Cluster Security 4.7 simplifies management, enhances workflows, and generates SBOMs
Secure AI inferencing: POC with NVIDIA NIM on CoCo with OpenShift AI
Introducing Red Hat OpenShift Service Mesh 3.0
Red Hat is now a CVE Numbering Authority of Last Resort in the CVE Program
Democratize security processes in your software development lifecycle
EPMS: the cornerstone of cybersecurity in defense operations
How to adopt platform engineering in 2025
Common Vulnerability Scoring System (CVSS) vs. Risk: Why are we still having this conversation?
Monitoring Red Hat Ansible Automation Platform using Performance Co-Pilot
Pentest Partners
The first 24 hours of a cyber incident. A practical playbook 
Cybersecurity communities. Small hacker groups, big impact
Take control of Cache-Control and local caching
How I became a Cyber Essentials Plus assessor
DNSSEC NSEC. The accidental treasure map to your subdomains
A dive into the Rockchip Bootloader
Pen testing avionics under ED-203a
Watch where you point that cred! Part 1
New mandatory USCG cyber regulations. What you need to know
PCI DSS v4.0 Evidence and documentation requirements checklist
Pedro Felix's Shared Memory
Reactive streams: a play in multiple acts
RFC 8252 and OAuth 2.0 for Native Apps
Accessing the HTTP Context on ASP.NET Core
Should I PUT or should I POST? (Darling you gotta let me know)
Health check APIs, 500 status codes and media types
On contracts and HTTP APIs
Focus on the representation semantics, leave the transfer semantics to HTTP
Client-side development on OS X using Windows hosted HTTP Web APIs
Using multiple IIS server certificates on Windows 7
The OpenID Connect Cast of Characters
Google Online Security Blog
New security requirements adopted by HTTPS certificate industry
Titan Security Keys now available in more countries
Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source
Vulnerability Reward Program: 2024 in Review
New AI-Powered Scam Detection Features to Help Protect You on Android
Securing tomorrow's software: the need for memory safety standards
How we kept the Google Play & Android app ecosystems safe in 2024
How we estimate the risk from prompt injection attacks on AI systems
Android enhances theft protection with Identity Check and expanded features
OSV-SCALIBR: A library for Software Composition Analysis
Netlabs.360.com
僵尸网络911 S5的数字遗产
Heads up! Xdr33, A Variant Of CIA’s HIVE Attack Kit Emerges
警惕：魔改后的CIA攻击套件Hive进入黑灰产领域
快讯：使用21个漏洞传播的DDoS家族WSzero已经发展到第4个版本
P2P Botnets: Review - Status - Continuous Monitoring
P2P 僵尸网络：回顾·现状·持续监测
Fodcha Is Coming Back, Raising A Wave of Ransom DDoS
卷土重来的DDoS狂魔：Fodcha僵尸网络再次露出獠牙
PureCrypter is busy pumping out various malicious malware families
PureCrypter Loader持续活跃，已经传播了10多个其它家族
MS Cyber Security
US Department of Labor’s journey to Zero Trust security with Microsoft Entra ID
Microsoft unveils Microsoft Security Copilot agents and new protections for AI
AI innovation requires AI security: Hear what’s new at Microsoft Secure
StilachiRAT analysis: From system reconnaissance to cryptocurrency theft
How MSRC coordinates vulnerability research and disclosure while building community
Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware
New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects
Women’s History Month: Why different perspectives in cybersecurity and AI matter more than ever before
Malvertising campaign leads to info stealers hosted on GitHub
Silk Typhoon targeting IT supply chain
The Last Watchdog
News alert: SquareX discloses nasty browser-native ransomware that’s undetectable by antivirus
News alert: INE receives a dozen G2 badges highlighting its cybersecurity training leadership
GUEST ESSAY: The case for making real-time business continuity a frontline cybersecurity priority
News alert: RSAC 2025 ramps up – watch Byron Acohido on Bospar’s Politely Pushy podcast
News alert: IDT Corp., AccuKnox partner to deploy runtime security-powered CNAPP at the edge of IoT
News alert: INE Security spotlights healthcare companies facing rising exposure to costly breaches
News alert: Arsen introduces new AI-based phishing tests to improve social engineering resilience
SHARED INTEL Q&A: Forrester highlights why companies need to strive for ‘cryptoagility’– today
News alert: Knocknoc raises seed funding to scale its just-in-time network access control technology
News alert: SecPod launches ‘Saner Cloud’ — CNAPP platform for real-time, automated security
The Security Catalyst
Why we must develop ourselves before we can elevate our team
Ease change by painting a picture of a better tomorrow
Deliver value faster by asking what they know… that you don’t (yet)
Why I love asking “What if I’m wrong?”
The surprising reason you need to record yourself rehearsing before your next presentation
Security needs more sizzle, less steakhouse
Why we always restate the problem
How you get disconnected from your value (and your story)
Do you see the progress you made this week?
How to use percolation and incubation to solve problems
Cloud Security Alliance
Don’t Buy A Network Pen Test Until You Ask These Questions
A Guide On How AI Pilot Programs are Shaping Enterprise Adoption
DeepSeek: Behind the Hype and Headlines
SaaS Security and IaaS Security—Why You Need Both
Hybrid Cloud Security – Top Challenges and Best Practices
How To Transform Your GRC with Continuous Controls Monitoring
Hybrid Work: Navigating Security Challenges in the Modern Enterprise
Rethinking Data Risk in the AI Era: Why Organizations Need a Unified Approach
Building a Robust Data Security Maturity Model
Zero Trust Makes Cybersecurity Everyone's Responsibility
Krebs on Security
How Each Pillar of the 1st Amendment is Under Attack
When Getting Phished Puts You in Mortal Danger
Arrests in Tap-to-Pay Scheme Powered by Phishing
DOGE to Fired CISA Staff: Email Us Your Personal Data
ClickFix: How to Infect Your PC in Three Easy Steps
Microsoft: 6 Zero-Days in March 2025 Patch Tuesday
Alleged Co-Founder of Garantex Arrested in India
Feds Link $150M Cyberheist to 2022 LastPass Hacks
Who is the DOGE and X Technician Branden Spikes?
Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab
tl;dr sec
[tl;dr sec] #272 - AI Agent Security, Kubernetes Security, ‘State of CloudSec’ Reports: Insights or Self-Owns?
[tl;dr sec] #271 - Threat Modeling (+ AI), Backdoored GitHub Actions, Compromising a Threat Actor's Telegram
[tl;dr sec] #270 - APT Attack Simulation, AWS Phishing, 7 Security Flywheels
[tl;dr sec] #269 - New AI Security Tools, Ransomware in AWS, How to Hack AI Apps
[tl;dr sec] #268 - AI-powered Burp Suite, OAuth Vulnerabilities, Subtle LLM Backdoors
[tl;dr sec] #267 - China on the NSA, Passkeys, Prioritizing CVEs with AI
[tl;dr sec] #266 - AI CVE Analysis, Hijacking Abandoned S3 Buckets, Doing Less in AppSec
[tl;dr sec] #265 - Google's Secure-by-Design Web Framework, AI-powered Phishing, How Palantir Secures Source Control
[tl;dr sec] #264 - Applying AI to AppSec, Threat Modeling in AWS, Behavioral Cloud IOCs
[tl;dr sec] #263 - Tarpit for AI Crawlers, Google's OSS SCA Tool, Backdooring Backdoors
Security Intelligence
Project Zero
Blasting Past Webp
Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)
Windows Bug Class: Accessing Trapped COM Objects with IDispatch
The Windows Registry Adventure #5: The regf file format
The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit
Windows Tooling Updates: OleView.NET
Simple macOS kernel extension fuzzing in userspace with IDA and TinyInst
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code
The Windows Registry Adventure #4: Hives and the registry layout
Effective Fuzzing: A Dav1d Case Study
Mozilla Security
Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0
Behind the Scenes: Fixing an In-the-Wild Firefox Exploit
Firefox will upgrade more Mixed Content in Version 127
Rapidly Leveling up Firefox Security
Mozilla VPN Security Audit 2023
Version 2.9 of the Mozilla Root Store Policy
Updated GPG key for signing Firefox Releases
Upgrading Mozilla’s Root Store Policy to Version 2.8
Revocation Reason Codes for TLS Server Certificates
Preventing secrets from leaking through Clipboard
CyberWatch
It’s Cybersecurity Awareness Month!
Welcome Back
Hackfest 2021 N1ghtmar3s Edition
What I did on my Pandemic Summer Vacation 2021
Comparing Chinese APTs in Software Supply Chain Attacks
The Diana Initiative 2021
Let the truth be told
Today is for them
My Happy 2nd Dose Day!
Zero Day
Don't make this USB mistake! Protect your data with this discounted encrypted gadget
The best VPN for Mac in 2025: Expert tested and reviewed
Microsoft's passwordless future is here for Outlook, Xbox, 365, and more
5 Chromecast tricks to unlock your TV's full potential (including a hidden streaming hack)
Deleting your personal info from Google Search is stunningly easy now - and fast
Think your Venmo is private? You should double-check this setting
How to protect your site from DDoS attacks - before it's too late
10 pesky Windows 11 24H2 bugs still haunting PCs despite several patches
Wyze Cam adds 'no big deal' AI filter to cut down on your notifications
5 best Linux distros for staying anonymous - when a VPN isn't enough
The Security Ledger
SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
G2 Names INE 2025 Cybersecurity Training Leader
IDT Corporation Partners with AccuKnox for Zero Trust Runtime IoT/Edge Security
Active Roles Wins 2025 Cybersecurity Excellence Award for Hybrid Active Directory Protection
CYREBRO Recognized in Gartner Emerging Tech Report for Detection and Response Startups
ARMO Launches First Cloud App Detection and Response to Unify Code to Cloud Runtime Security
Arsen Introduces AI-Powered Phishing Tests to Improve Social Engineering Resilience
SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity
SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats
SquareX Launches “Year of Browser Bugs” (YOBB) to Expose Critical Security Blind Spots
CISA Blog
NCSWIC Publishes Spring 2024 Bi-Annual Meeting Executive Summaries
SAFECOM Publishes Spring 2024 SAFECOM Bi-Annual Meeting Executive Summary
Unlocking Vulnrichment: Enriching CVE Data
Defending Democracy: The #PROTECT2024 Chapter in Election Infrastructure Security
United in Cyber Defense: A Model for Operational Collaboration
Forging National Resilience for an Era of Disruption
Strengthening America’s Resilience Against the PRC Cyber Threats
Building a Secure by Design Ecosystem
Securing Federal Networks: Evolving to an Enterprise Approach
CISA Through the Years: Policy and Impact
CyberSecIntelligence
פקודות בסיסיות בלינוקס - תרגול 3
פקודות בסיסיות בלינוקס - תרגול 2
פקודות בסיסיות בלינוקס
פקודות בסיסיות בלינוקס - תרגול 1
© 2024 RiskDiscovery | Sponsored by: Deception Logic