[ News | Newsletters | Blogs | Reddits | Lists | Media | Jobs ] HoneyDB
  [ privacy | malware | research | vendor ]
Phil Venables
Why Good Security Fails: The Asymmetry of InfoSec Investment 
Human Error
Going Faster: Isochrones and “Time to Hello World”
Incentives for Security: Flipping the Script
The Crucial Test of Security Leadership: A-grades vs. Pass/Fail
Where the Wild Things Are: Second Order Risks of AI
Security and Ten Laws of Technology 
A Letter from the Future
InfoSec Hard Problems
DevOps and Security
The Daily Swig
We’re going teetotal: It’s goodbye to The Daily Swig
Bug Bounty Radar // The latest bug bounty programs for March 2023
Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses
Password managers: A rough guide to enterprise secret platforms
Chromium bug allowed SameSite cookie bypass on Android devices
Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption
NIST plots biggest ever reform of Cybersecurity Framework
Cisco ClamAV anti-malware scanner vulnerable to serious security flaw
CVSS system criticized for failure to address real-world impact
‘Most web API flaws are missed by standard security tests’ – Corey J Ball on securing a neglected attack vector
AWS Security Blog
How to build a CA hierarchy across multiple AWS accounts and Regions for global organization
How to use the AWS Secrets Manager Agent
Patterns for consuming custom log sources in Amazon Security Lake
AWS renews TISAX certification (Information with Very High Protection Needs (AL3)) across 19 regions
AWS achieves third-party attestation of conformance with the Secure Software Development Framework (SSDF)
Strategies for achieving least privilege at scale – Part 2
Strategies for achieving least privilege at scale – Part 1
Top four ways to improve your Security Hub security score
Context window overflow: Breaking the barrier
Centrally manage VPC network ACL rules to block unwanted traffic using AWS Firewall Manager
Darknet - The Darkside
Best EDR Of The Market (BEOTM) – Endpoint Detection and Response Testing Tool
AgentSmith HIDS – Host Based Intrusion Detection
padre – Padding Oracle Attack Exploiter Tool
Privacy Implications of Web 3.0 and Darknets
DataSurgeon – Extract Sensitive Information (PII) From Logs
Pwnagotchi – Maximize Crackable WPA Key Material For Bettercap
HardCIDR – Network CIDR and Range Discovery Tool
Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage
CFRipper – CloudFormation Security Scanning & Audit Tool
CredNinja – Test Credential Validity of Dumped Credentials or Hashes
Least Privilege
What’s going on?
The Future of IdentityServer
Flexible Access Token Validation in ASP.NET Core
Refresh Tokens in IdentityServer4 v4
Announcing IdentityServer4 v4.0
Resource Access in IdentityServer4 v4 and going forward
I don’t like Identity Tokens
The JWT Profile for OAuth 2.0 Access Tokens (and IdentityServer)
Updates on our Workshops
Automatic Token Management for ASP.NET Core and Worker Services 1.0
Fox-IT Blog
Sifting through the spines: identifying (potential) Cactus ransomware victims
From Backup to Backdoor: Exploitation of CVE-2022-36537 in R1Soft Server Backup Manager
CVE-2022-27510, CVE-2022-27518 – Measuring Citrix ADC & Gateway version adoption on the Internet
Encryption Does Not Equal Invisibility – Detecting Anomalous TLS Certificates with the Half-Space-Trees Algorithm
SnapMC skips ransomware, steals data
StreamDivert: Relaying (specific) network connections
WastedLocker: A New Ransomware Variant Developed By The Evil Corp Group
LDAPFragger: Command and Control over LDAP attributes
Office 365: prone to security breaches?
Using Anomaly Detection to find malicious domains
Positive Technologies
PHDays 10 IDS Bypass contest: writeup and solutions
APT31 new dropper. Target destinations: Mongolia, Russia, the U.S., and elsewhere
How to detect a cyberattack and prevent money theft
Troy Hunt
MVP 14
Weekly Update 409
Weekly Update 408
Weekly Update 407
The State of Data Breaches, Part 2: The Trilogy of Players
Weekly Update 406
The State of Data Breaches
Weekly Update 405
Weekly Update 404
Weekly Update 403
The Hacker Factor Blog
When the Crowd Strikes Back
C2PA and Untrusted Certificates
Perceptual Searches and Applied Heuristics
On The Button
Problems with C2PA and LinkedIn
The Security Skeptic
Interisle's Phishing Landscape 2024 is here
CyberSecPolitics
Automated LLM Bugfinders
What Open Source projects are unmaintained and should you target for takeover ?
The Open Source Problem
Jia Tan and SocialCyber
The Atlantic Council Paper and Defending Forward
FORECASTING
Guest Post: HostileSpectrum’s futures: Looking back on 2021’s estimative signposts
Pride Month
Cyber is perfectly fine for Signaling
While in Kyoto, a comprehensive review of Cyberpunk 2077
Schneier on Security
Friday Squid Blogging: Sunscreen from Squid Pigments
Compromising the Secure Boot Process
The CrowdStrike Outage and Market-Driven Brittleness
Data Wallets Using the Solid Protocol
Robot Dog Internet Jammer
2017 ODNI Memo on Kaspersky Labs
Snake Mimics a Spider
Friday Squid Blogging: Peru Trying to Protect its Squid Fisheries
Brett Solomon on Digital Rights
Criminal Gang Physically Assaulting People for Their Cryptocurrency
SANS Inernet Storm Center
ExelaStealer Delivered "From Russia With Love", (Fri, Jul 26th)
ISC Stormcast For Friday, July 26th, 2024 https://isc.sans.edu/podcastdetail/9070, (Fri, Jul 26th)
XWorm Hidden With Process Hollowing, (Thu, Jul 25th)
ISC Stormcast For Thursday, July 25th, 2024 https://isc.sans.edu/podcastdetail/9068, (Thu, Jul 25th)
"Mouse Logger" Malicious Python Script, (Wed, Jul 24th)
ISC Stormcast For Wednesday, July 24th, 2024 https://isc.sans.edu/podcastdetail/9066, (Wed, Jul 24th)
New Exploit Variation Against D-Link NAS Devices (CVE-2024-3273), (Tue, Jul 23rd)
ISC Stormcast For Tuesday, July 23rd, 2024 https://isc.sans.edu/podcastdetail/9064, (Tue, Jul 23rd)
CrowdStrike: The Monday After, (Mon, Jul 22nd)
ISC Stormcast For Monday, July 22nd, 2024 https://isc.sans.edu/podcastdetail/9062, (Mon, Jul 22nd)
Red Hat Security
Red Hat Enterprise Linux and Secure Boot in the cloud
Red Hat Advanced Cluster Security Cloud Service is now Generally Available
Red Hat’s path to post-quantum cryptography
Red Hat VEX files for CVEs are now generally available
Security vulnerability reporting: Who can you trust?
API security: The importance of rate limiting policies in safeguarding your APIs
Embracing automated policy as code in financial services
Post-quantum cryptography: Code-based cryptography
The State of Kubernetes Security in 2024
The Marvin Attack
Pentest Partners
Leave the World Behind, or don’t
Pen testing cruise ships
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)
Glastonbury ticket hijack vulnerability fixed
Dodgy disks. My 32TB SSD Adventure
HUMINT in a cyber world
UK PSTI? You’ll need a Vulnerability Disclosure Program! 
Impacts on ICS from the updated Cyber Assessment Framework (CAF)
Pipedream ICS malware toolkit is a nightmare
Vulnerabilities that (mostly) aren’t: LUCKY13
Pedro Felix's Shared Memory
Reactive streams: a play in multiple acts
RFC 8252 and OAuth 2.0 for Native Apps
Accessing the HTTP Context on ASP.NET Core
Should I PUT or should I POST? (Darling you gotta let me know)
Health check APIs, 500 status codes and media types
On contracts and HTTP APIs
Focus on the representation semantics, leave the transfer semantics to HTTP
Client-side development on OS X using Windows hosted HTTP Web APIs
Using multiple IIS server certificates on Windows 7
The OpenID Connect Cast of Characters
Google Online Security Blog
Sustaining Digital Certificate Security - Entrust Certificate Distrust
Virtual Escape; Real Reward: Introducing Google’s kvmCTF
Hacking for Defenders: approaches to DARPA’s AI Cyber Challenge
Staying Safe with Chrome Extensions
Time to challenge yourself in the 2024 Google CTF
On Fire Drills and Phishing Tests
I/O 2024: What’s new in Android security and privacy
Google and Apple deliver support for unwanted tracking alerts in Android and iOS
Your Google Account allows you to create passkeys on your phone, computer and security keys
Detecting browser data theft using Windows Event Logs
Netlabs.360.com
僵尸网络911 S5的数字遗产
Heads up! Xdr33, A Variant Of CIA’s HIVE Attack Kit Emerges
警惕：魔改后的CIA攻击套件Hive进入黑灰产领域
快讯：使用21个漏洞传播的DDoS家族WSzero已经发展到第4个版本
P2P Botnets: Review - Status - Continuous Monitoring
P2P 僵尸网络：回顾·现状·持续监测
Fodcha Is Coming Back, Raising A Wave of Ransom DDoS
卷土重来的DDoS狂魔：Fodcha僵尸网络再次露出獠牙
PureCrypter is busy pumping out various malicious malware families
PureCrypter Loader持续活跃，已经传播了10多个其它家族
MS Cyber Security
Onyx Sleet uses array of malware to gather intelligence for North Korea
Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture
Connect with Microsoft Security at Black Hat USA 2024​​
Microsoft Purview Data Governance will be generally available September 1, 2024
Simplified Zero Trust security with the Microsoft Entra Suite and unified security operations platform, now generally available
Vulnerabilities in PanelView Plus devices could lead to remote code execution
Mitigating Skeleton Key, a new type of generative AI jailbreak technique
Working with a cybersecurity committee of the board
How to boost your incident response readiness
Microsoft Defender Experts for XDR recognized in the latest MITRE Engenuity ATT&CK® Evaluation for Managed Services
The Last Watchdog
LW ROUNDTABLE: CrowdStrike outage reveals long road ahead to achieve digital resiliency
GUEST ESSAY: Consumers, institutions continue to shoulder burden for making mobile banking secure
MY TAKE: Study shows most folks haven’t considered bequeathing their ‘digital’ inheritances
GUEST ESSAY: How cybercriminals are using ‘infostealers’ to sidestep passwordless authentication
RSAC Fireside Chat: Madison Horn’s quest to add cyber expertise, restore ethics to Congress
RSAC Fireside Chat: Amplifier Security taps LLMs to help organizations foster a security culture
New Tech Q&A: Adaptiva – CrowdStrike alliance highlights trend of blending IT and security systems
News Alert: Infinidat introduces advanced cyber resiliency and recovery solution for enterprises
News Alert: FireTail unveils free access to its enterprise-level API security platform — to all
RSAC Fireside Chat: The many flavors of ‘SASE’ now includes Aryaka’s ‘Unified SASE as a Service.”
The Security Catalyst
Why we must develop ourselves before we can elevate our team
Ease change by painting a picture of a better tomorrow
Deliver value faster by asking what they know… that you don’t (yet)
Why I love asking “What if I’m wrong?”
The surprising reason you need to record yourself rehearsing before your next presentation
Security needs more sizzle, less steakhouse
Why we always restate the problem
How you get disconnected from your value (and your story)
Do you see the progress you made this week?
How to use percolation and incubation to solve problems
Krebs on Security
Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services
Phish-Friendly Domain Registry “.top” Put on Notice
Global Microsoft Meltdown Tied to Bad Crowdstrike Update
Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks
Crooks Steal Phone, SMS Records for Nearly All AT&T Customers
The Stark Truth Behind the Resurgence of Russia’s Fin7
Microsoft Patch Tuesday, July 2024 Edition
The Not-So-Secret Network Access Broker x999xx
KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO
Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested
tl;dr sec
[tl;dr sec] #240 - Red Team Interview Questions, Security Platform Engineering, AI Secure Code Reviewer Bot
[tl;dr sec] #239 - LLM Vulnerability Detection, APT Reports, Learn Exploit Development
[tl;dr sec] #238 - Security Engineering @ Google Interview Notes, BSidesSF Talks, GitHub CI/CD Egress Filtering
[tl;dr sec] #237 - fwd:cloudsec videos, LLM Bugfinders, Burp Suite Guide
[tl;dr sec] #236 - Interview Questions, Securing Your Snowflake, Red Teaming LLMs
[tl;dr sec] #235 - Threat Hunting in Snowflake, AWS Incident Query Cheatsheet, Securing AI Infra
Sub-Venture Scale Security Problems
[tl;dr sec] #234 - Awesome CI/CD Attacks, STRIDE GPT, Non Production AWS Attack Surface
The Race to Make a Business of Secure Defaults
[tl;dr sec] #233 - Awesome Detection Engineering, Security GPTs, How to Build a Cybersecurity Start-up
Security Intelligence
Unveiling the latest banking trojan threats in LATAM
Crisis communication: What NOT to do
Cybersecurity crisis communication: What to do
Brands are changing cybersecurity strategies due to AI threats
39% of MSPs report major setbacks when adapting to advanced security technologies
Digital solidarity vs. digital sovereignty: Which side are you on?
A decade of global cyberattacks, and where they left us
Does your business have an AI blind spot? Navigating the risks of shadow AI
It all adds up: Pretexting in executive compromise
ChatGPT 4 can exploit 87% of one-day vulnerabilities
Project Zero
The Windows Registry Adventure #3: Learning resources
Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models
Driving forward in Android drivers
The Windows Registry Adventure #2: A brief history of the feature
The Windows Registry Adventure #1: Introduction and research results
First handset with MTE on the market
An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit
Analyzing a Modern In-the-wild Android Exploit
Summary: MTE As Implemented
MTE As Implemented, Part 2: Mitigation Case Studies
Mozilla Security
Firefox will upgrade more Mixed Content in Version 127
Rapidly Leveling up Firefox Security
Mozilla VPN Security Audit 2023
Version 2.9 of the Mozilla Root Store Policy
Updated GPG key for signing Firefox Releases
Upgrading Mozilla’s Root Store Policy to Version 2.8
Revocation Reason Codes for TLS Server Certificates
Preventing secrets from leaking through Clipboard
Improving the Quality of Publicly Trusted Intermediate CA Certificates with Enhanced Oversight and Automation
Securing the proxy API for Firefox add-ons
CyberWatch
It’s Cybersecurity Awareness Month!
Welcome Back
Hackfest 2021 N1ghtmar3s Edition
What I did on my Pandemic Summer Vacation 2021
Comparing Chinese APTs in Software Supply Chain Attacks
The Diana Initiative 2021
Let the truth be told
Today is for them
My Happy 2nd Dose Day!
Zero Day
These transparent earbuds by Nothing made my AirPods look and sound boring
The best Alexa devices of 2024: Expert tested and recommended
How to calibrate your TV for the best picture quality - 2 easy and simple methods
This Asus Copilot+ PC has one of the best displays I've seen on a laptop (and it exudes premium)
One of the best budget Android tablets I've tested is not made by Samsung or Google
My new favorite travel gadget is an e-reader that looks like a phone (but isn't)
Switzerland's open-source rules and Google's privacy plans lead the Index
The best wired earbuds of 2024: Expert reviewed
How to watch the 2024 Summer Olympics: Every streaming option (including free ones)
Get Microsoft Office 2021 for Windows for $60
PhishMe
Malware Exploit Bypasses SEGs Leaving Organizations at Risk
SEG vs. SEG: How Threat Actors are Pitting Email Security Products Against Each Other With Encoded URLs
Beware of the Latest Phishing Tactic Targeting Employees
A “Meta” Facebook Phish
New Malware Campaign Targeting Spanish Language Victims
Cofense Adds Email Security Risk Management and Validation Reporting to PhishMe®
STR RAT – Phishing Malware Baseline
Threats That Hide in Your Microsoft Office Documents
Unmasking a Cyber Attack that Targets Meta Business Accounts
A.I. Alone is Not Enough to Thwart Phishing Attacks
The Security Ledger
Security Teams Lean Into AI As Cyber Worker Shortage Persists
Spotlight Podcast: OT Is Under Attack. Now What?
Spotlight Podcast: CSO Chris Walcutt on Managing 3rd Party OT Risk
Screening Your Supply Chain: How Far Will You Go For Cybersecurity?
Spotlight Podcast: How AI Is Reshaping The Cyber Threat Landscape
Episode 257: Securing Software on Wheels with Dennis Kengo Oka of Synopsys
Malicious Python Packages Target Crypto Wallet Recovery Passwords
Episode 256: Recursive Pollution? Data Feudalism? Gary McGraw On LLM Insecurity
China Calls Out U.S. For Hacking. The Proof? TBD!
Episode 255: EDM, Meet CDM – Cyber Dance Music with Niels Provos
CISA Blog
SAFECOM and NCSWIC Publish Fall 2023 Joint SAFECOM-NCSWIC Bi-Annual Meeting Executive Summaries
NCSWIC’s Planning, Training, and Exercise Committee releases “Set Your PACE Plan” Flyer
NCSWIC Planning Training, and Exercise Committee releases the Human Factors Resource Guide
Continued Progress Towards a Secure Open Source Ecosystem
Looking Ahead to Better Prepare Today
Why SMBs Don’t Deploy Single Sign On (SSO)
CISA Releases the FY 2024 Rural Emergency Medical Communications Demonstration Project (REMCDP) Notice of Funding Opportunity
CISA, SAFECOM and NCSWIC Publish SAFECOM Guidance on Emergency Communications Grants
National Internet Safety Month: This June, Take 4 Easy Steps to Stay Safe Online
NCSWIC releases the NCSWIC Video Series
© 2024 RiskDiscovery | Sponsored by: Deception Logic