Archive

NewsletterNewsletter
[tl;dr sec] #259 - What Sucks in Security, Supply Chain Firewall, AWS re:Invent Security Talks

[tl;dr sec] #259 - What Sucks in Security, Supply Chain Firewall, AWS re:Invent Security Talks

Insights from 50+ security leaders, OSS tool to protect devs from malicious dependencies, playlist of re:Invent's security talks

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #258 - AI-powered Fuzzing and SAST, What Hackers know about your AWS Account, EDR Vulnerabilities

[tl;dr sec] #258 - AI-powered Fuzzing and SAST, What Hackers know about your AWS Account, EDR Vulnerabilities

Google's AI-powered fuzzing and augmenting SAST with AI, new OSINT/recon service for public AWS identifiers, finding EDR vulns with fuzzing

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #257 - Autonomous AI Hacking, Buying us-east-1, macOS Security

[tl;dr sec] #257 - Autonomous AI Hacking, Buying us-east-1, macOS Security

AI finds an authentication bypass, what happens when you buy an AWS region name domain, fuzzing macOS and sandbox escapes

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #256 - AI SOC Analyst, Detection Engineering, How to Ransomware in AWS

[tl;dr sec] #256 - AI SOC Analyst, Detection Engineering, How to Ransomware in AWS

NVIDIA's AI SOC analyst you can speak to, embracing TDD and detection as code, tips on how 2 ransomware

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #255 - AI finds 0day in SQLite, Cloud Security Tools, Auto-generate Terraform Secure Guardrails

[tl;dr sec] #255 - AI finds 0day in SQLite, Cloud Security Tools, Auto-generate Terraform Secure Guardrails

Google Project Zero's LLM-powered variant analysis, deobfuscating IAM polices and a real-time SCP error monitor, using LLMs to create secure by default Terraform modules

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #254 - Cloud CTFs, AI + AppSec, Awesome Threat Detection

[tl;dr sec] #254 - Cloud CTFs, AI + AppSec, Awesome Threat Detection

Practice your GCP and Azure security skills, scaling AppSec with LLMs, a curated list of awesome threat detection and hunting resources

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #253 - State of Cloud Security, Applying AI to Cybersecurity, Living Off The Land ESXi

[tl;dr sec] #253 - State of Cloud Security, Applying AI to Cybersecurity, Living Off The Land ESXi

Datadog's 2024 update, lots of resources on AI + security, VMware ESXi built-ins adversaries use

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #252 - Perfecting Ransomware on AWS, Kubernetes-native Threat Detection, MITRE Caldera Bounty Hunter

[tl;dr sec] #252 - Perfecting Ransomware on AWS, Kubernetes-native Threat Detection, MITRE Caldera Bounty Hunter

Simulate ransomware with KMS XKS + your key, Venator, a new OSS tool, new Caldera plugin to emulate complete, realistic cyber attack chains

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #251 - Vuln Discovery at Scale, Multi-Cloud Testing Tool, AI-powered Container Scanning

[tl;dr sec] #251 - Vuln Discovery at Scale, Multi-Cloud Testing Tool, AI-powered Container Scanning

Finding dangling DNS records and secrets at scale, new tool with 80+ attack techniques, NVIDIA's AI blueprint to auto-triage your container CVEs

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #250 - CNAPP Guide, OpenAI's o1 vs CTFs, Cloud Logging Tips

[tl;dr sec] #250 - CNAPP Guide, OpenAI's o1 vs CTFs, Cloud Logging Tips

Detailed CNAPP overview and Day 2 guide, o1 semi-escapes to solve a broken challenge, config tips & tricks for cloud control plane logs

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #249 - Atomic Cloud IOCs, Russian APT Tool Matrix, Netflix Paved Road Webinar

[tl;dr sec] #249 - Atomic Cloud IOCs, Russian APT Tool Matrix, Netflix Paved Road Webinar

Cloud-specific indicators of compromise, tools regularly used by Russian government threat actors, webinar on secure guardrails & building Netflix's Paved Road

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #248 - 10X Your Cloud Security, Secure by Design, AI OffSec Benchmarks

[tl;dr sec] #248 - 10X Your Cloud Security, Secure by Design, AI OffSec Benchmarks

Excellent scaling CloudSec resources, SANS + AWS white paper, two OSS benchmarks for measuring the offensive capabilities of AI models

Clint Gibler
Clint Gibler
FirstBack
12345678
Next Last