Archive

NewsletterNewsletter
[tl;dr sec] #247 - LinkedIn's AI Security Posture Platform, PyPI Defaults 😭, IAM Least Privilege

[tl;dr sec] #247 - LinkedIn's AI Security Posture Platform, PyPI Defaults 😭, IAM Least Privilege

LinkedIn's dynamic infra mapping system that streamlines vuln management, register any removed package name because #yolo, creating least privilege roles at scale

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #246 - GitHub Actions Attack Diagram, The Worst Places to Leak Secrets, Red Team TTPs

[tl;dr sec] #246 - GitHub Actions Attack Diagram, The Worst Places to Leak Secrets, Red Team TTPs

Common attack paths in identifying GHA vulns, how quickly AWS tokens are found by location, resources for red teamers and defenders

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #245 - Every Hacker Summer Camp AI Talk, AWS IAM Security Tools, Ransomware Tool Matrix

[tl;dr sec] #245 - Every Hacker Summer Camp AI Talk, AWS IAM Security Tools, Ransomware Tool Matrix

Skim >60 talks in ~15min, oodles of IAM tool-dles, all the tools ransomware gangs use

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #244 - Cloud Security Slides, Threat Modeling, Security Program Templates

[tl;dr sec] #244 - Cloud Security Slides, Threat Modeling, Security Program Templates

Slides for some solid Vegas talks, threat modeling enterprise AI, open source templates to bootstrap your security programs

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #243 - Talks and Tools from BSidesLV, BlackHat, and DEF CON

[tl;dr sec] #243 - Talks and Tools from BSidesLV, BlackHat, and DEF CON

Across web security, cloud, supply chain, and AI

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #242 - Engineering a SIEM, Automating Detections with LLMs, Reversing AWS Session Tokens

[tl;dr sec] #242 - Engineering a SIEM, Automating Detections with LLMs, Reversing AWS Session Tokens

How to build a cost-effective, scalable detection engine, have LLMs write detections for you, understanding AWS session token internals

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #240 - Red Team Interview Questions, Security Platform Engineering, AI Secure Code Reviewer Bot

[tl;dr sec] #240 - Red Team Interview Questions, Security Platform Engineering, AI Secure Code Reviewer Bot

Big list of q's, how to build a team of security builders, reviewing all PRs with an LLM

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #239 - LLM Vulnerability Detection, APT Reports, Learn Exploit Development

[tl;dr sec] #239 - LLM Vulnerability Detection, APT Reports, Learn Exploit Development

Measuring LLM's ability to find vulnerabilities, massive collection of APT reports, how to get started in memory corruption & exploitation

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #238 - Security Engineering @ Google Interview Notes, BSidesSF Talks, GitHub CI/CD Egress Filtering

[tl;dr sec] #238 - Security Engineering @ Google Interview Notes, BSidesSF Talks, GitHub CI/CD Egress Filtering

Interview resources, >55 talks on AI and more, a GitHub Action to limit data exfiltration

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #237 - fwd:cloudsec videos, LLM Bugfinders, Burp Suite Guide

[tl;dr sec] #237 - fwd:cloudsec videos, LLM Bugfinders, Burp Suite Guide

>40 awesome CloudSec talks, finding vulns with LLMs, how to use Burp like a pro

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #236 - Interview Questions, Securing Your Snowflake, Red Teaming LLMs

[tl;dr sec] #236 - Interview Questions, Securing Your Snowflake, Red Teaming LLMs

AppSec and Threat Detection interview q's, tools and tips to secure your Snowflake environment, tools to test LLMs

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #235 - Threat Hunting in Snowflake, AWS Incident Query Cheatsheet, Securing AI Infra

[tl;dr sec] #235 - Threat Hunting in Snowflake, AWS Incident Query Cheatsheet, Securing AI Infra

Queries to look for attackers in your Snowflake, AWS queries to use during incidents, how OpenAI and Apple secure AI workloads

Clint Gibler
Clint Gibler
FirstBack
23456789
Next Last