TLDR INFORMATION SECURITY 2023-10-18

CISCO WARNS OF NEW IOS XE ZERO-DAY ACTIVELY EXPLOITED IN ATTACKS

PSA: CRITICAL UNAUTHENTICATED ARBITRARY FILE UPLOAD VULNERABILITY IN ROYAL ELEMENTOR ADDONS AND TEMPLATES BEING ACTIVELY EXPLOITED

ETHERHIDING: HIDING MALICIOUS CODE IN BLOCKCHAINS

DISCLOSING THE BLOODALCHEMY BACKDOOR

SO YOU WANT TO BE A SOC ANALYST?

BOOTSTRAPPING AN AIR-GAPPED CLUSTER WITH KUBEADM

PWN

PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.

PENTESTGPT

PentestGPT is a GPT-empowered penetrating tool. The tool is designed to automate the penetrating process by interactively guiding pentesters using ChatGPT. Newer releases of the tool also support local LLMs.

AUTHENTICATION

EQUIFAX FINED $13.5 MILLION OVER 2017 DATA BREACH

SLACK’S GOOGLE DRIVE APP CAN SHARE YOUR PRIVATE FILES

SOFTWARE, SHIFT ACCOUNTABILITY BURDEN TO MANUFACTURERS

WHATSAPP ANNOUNCES PASSKEY SUPPORT FOR ANDROID

APTS ARE USING DISCORD TO HOST MALWARE