Sponsored
RAMPANT CLOUD ACTIVITY?
wiz.ioSponsor
TLDR INFORMATION SECURITY 2023-10-23
6 sections16 entriesinline urlcomplete parse
Parse notes
- Subscription/account footer truncated before parsefooter_truncated
01GENERAL
02ATTACKS & VULNERABILITIES
HACKERS STOLE ACCESS TOKENS FROM OKTA’S SUPPORT UNIT
krebsonsecurity.com4 min read
BLACKCAT ADDS MUNCHKIN VM TO ITS ATTACK ARSENAL
bleepingcomputer.com3 min read
SYSTEMS
bleepingcomputer.com2 min read
03STRATEGIES & TACTICS
VSS: BEGINNERS GUIDE TO BUILDING A HARDWARE HACKING LAB
voidstarsec.com10 min read
HOW AUTOMATED AI CODE ANALYSIS CAN SCALE APPLICATION SECURITY
betterappsec.com13 min read
TECHNIQUES
sentinelone.com7 min read
04LAUNCHES & TOOLS
HIJAGGER
Hijagger checks all maintainers of all npm and PyPI packages for packages hijackable through domain re-registration.
github.comGitHub repository
CVE
Gather and update all available and newest CVEs with their PoC to learn how to exploit them and prevent them.
github.comGitHub repository
INJECT MY PDF: PROMPT INJECTION FOR YOUR RESUME
A tool to repeatedly insert minimum opacity and font size text to a resume that includes prompt injection to fool AI recruiters.
kai-greshake.de2 min read
05MISCELLANEOUS
CALIFORNIA SIGNS DELETE ACT INTO LAW
news.bloomberglaw.com2 min read
NOTEBOOKS
cadosecurity.com13 min read
THE FAKE BROWSER UPDATE SCAM GETS A MAKEOVER
krebsonsecurity.com5 min read
06QUICK LINKS
HORIZONS OF IDENTITY SECURITY REPORT 2023
docs.sailpoint.com20 min read
TIPS FOR CREATING A STRONG CYBERSECURITY ASSESSMENT REPORT
zeltser.com2 min read
RAGNARLOCKER RANSOMWARE GANG TAKEDOWN
techcrunch.com2 min read