TLDR INFORMATION SECURITY 2023-10-27

VMWARE VCENTER CRITICAL VULNERABILITY - CVSS SCORE OF 9.8

MUCH MORE

HARVEST EXPOSES CONNECTED MICROSOFT OAUTH TOKENS

WHY WE DON’T GENERATE ELLIPTIC CURVES EVERY DAY

UNDERSTANDING AND IMPROVING THE GHIDRA UI FOR MALWARE ANALYSIS

SERVER-SIDE SANDBOXING: CONTAINERS AND SECCOMP

MODELSCAN

ModelScan is an open source project that scans models to determine if they contain unsafe code. The tool supports multiple formats and ML runtimes with more on the way. It is the first model scanning tool to support multiple model formats.

RAVEN

RAVEN (Risk Analysis and Vulnerability Enumeration for CI/CD) is a security tool designed to perform massive scans for GitHub Actions CI workflows and digest the discovered data into a Neo4j database.

GAME OF ACTIVE DIRECTORY

GOOGLE’S REWARD CRITERIA FOR REPORTING BUGS IN AI PRODUCTS

AND DESTRUCTION

DESIGNING, BUILDING, AND RUNNING CTFS IN 2023

CISA RELEASES CYBERSECURITY HEALTHCARE TOOLKIT

FLIPPER ZERO CAN NOW SPAM USERS WITH BLUETOOTH ATTACKS

UNCIPHERED SAYS THAT IT CAN DECRYPT IRONKEY DRIVES