Archive

NewsletterNewsletter
[tl;dr sec] #57 - Bug Bounty Lessons Learned, Content Value Hierarchy, CloudSecDocs

[tl;dr sec] #57 - Bug Bounty Lessons Learned, Content Value Hierarchy, CloudSecDocs

1 year of a private bug bounty program, how to create high value content, and a great resource for cloud-native technologies.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #56 - State of Exploit Development, Hacking Apple, flaws.cloud dataset

[tl;dr sec] #56 - State of Exploit Development, Hacking Apple, flaws.cloud dataset

Stats on vulnerability discovery, CVE publication, and patches, lengthy write-up of 3 month Apple bug bounty hackathon, and flaws.cloud logs published.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #55 - Detection as Code, Vault Authentication Bugs, Fingerprinting Exploit Developers

[tl;dr sec] #55 - Detection as Code, Vault Authentication Bugs, Fingerprinting Exploit Developers

Why we should embrace Detection as Code, write-up of two complex AuthN bugs in Vault, tracking exploit developers by their work.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #54 - Complexity in Capital, Communicating a Breach, Offensive Terraform

[tl;dr sec] #54 - Complexity in Capital, Communicating a Breach, Offensive Terraform

I contributed to an article in Forbes, how to communicate when you've been hacked, Terraform to spin up offensive infrastructure.

Clint Gibler
Clint Gibler
SummarySummary
A framework for effective corporate communication after cyber security incidents

A framework for effective corporate communication after cyber security incidents

This paper lays out a framework for how organizations should communicate after a security incident.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #53 - OneFuzz, Program Analysis, Ring Alarm Teardown

[tl;dr sec] #53 - OneFuzz, Program Analysis, Ring Alarm Teardown

Microsoft releases self-hosted fuzzing-as-a-service platform, several solid program analysis resources, detailed teardown of Ring's hardware and attack surface.

Clint Gibler
Clint Gibler
SummarySummary
Peeling the Web Application Security Onion Without Tears

Peeling the Web Application Security Onion Without Tears

Lessons from Adobe in how building reusable, secure-by-default services and infrastructure improves your security and reduces compliance burden.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #51 - Continuous Cloud Monitoring, Web Browser for Hackers, How GitHub Threat Models

[tl;dr sec] #51 - Continuous Cloud Monitoring, Web Browser for Hackers, How GitHub Threat Models

Monitor your cloud environment and automatically detect drift, a scriptable browser and bending JavaScript to your will, GitHub's threat modeling process.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #50 - Engineering Empathy, Golang Security, Bardcore

[tl;dr sec] #50 - Engineering Empathy, Golang Security, Bardcore

Applying engineering lessons learned to AppSec teams, common Golang bugs, and medieval covers of modern pop songs take the Internet by storm.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #49 - Web Cache Entanglement, Finding a Mentor, Build Tools Around Workflows

[tl;dr sec] #49 - Web Cache Entanglement, Finding a Mentor, Build Tools Around Workflows

New cache research by James Kettle, how to effectively reach out and build mentor relationships, tools should support workflows, not vice versa.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #48 - Automating Recon Summary, GraphQL Tools, DEF CON 2020 Live Notes

[tl;dr sec] #48 - Automating Recon Summary, GraphQL Tools, DEF CON 2020 Live Notes

My summary of Daniel Miessler's talk on automating recon, 2 tools to help with testing GraphQL, quick notes for ~20 DEF CON talks.

Clint Gibler
Clint Gibler
SummarySummary
Mechanizing the Methodology: How to find vulnerabilities while you're doing other things

Mechanizing the Methodology: How to find vulnerabilities while you're doing other things

Daniel Miessler describes how to automate your OSINT and recon processes so you can find more and better bugs with less manual effort.

Clint Gibler
Clint Gibler
FirstBack
1819202122232425
Next Last