Archive

NewsletterNewsletter
[tl;dr sec] #209 - State of Cloud Security, Breach Report Collection, Abusing Slack for Offensive Operations

[tl;dr sec] #209 - State of Cloud Security, Breach Report Collection, Abusing Slack for Offensive Operations

Datadog's insights on the security posture of 1000's of orgs, a collection of breach reports with TTPs, how red teamers can abuse Slack

Clint Gibler
Clint Gibler
BlogBlog
AI Resources - Part 1

AI Resources - Part 1

A collection of interesting AI tools, products, resources, papers, and more I’ve come across.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #208 - Cybersecurity GPT Agents, Supply Chain Security, Kubernetes Pentest Image

[tl;dr sec] #208 - Cybersecurity GPT Agents, Supply Chain Security, Kubernetes Pentest Image

List of >100 security-focused GPT agents, join Chris Hughes and I's supply chain security webinar, Docker image with k8s pentesting tools

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #207 - Web Security Interview Questions, EKS Cluster Games, Supply Chain Resources

[tl;dr sec] #207 - Web Security Interview Questions, EKS Cluster Games, Supply Chain Resources

Rapidly ramp up your web security knowledge, new EKS CTF, big list of supply chain security resources

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #206 - Security Engineer Interview Tips, Security Making Eng Faster, GitHub Action Scanner

[tl;dr sec] #206 - Security Engineer Interview Tips, Security Making Eng Faster, GitHub Action Scanner

Security roles overview, skills required, and how to land them, how security teams can help devs ship faster, tool to scan GH Action files at scale

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #205 - Resume Prompt Injection, CVE PoCs, Server-side Sandboxing

[tl;dr sec] #205 - Resume Prompt Injection, CVE PoCs, Server-side Sandboxing

Make sure you're always the perfect candidate, repo with almost every CVE proof of concept, containers & seccomp deep dive

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #204 - Following Attackers' CloudTrail, SSH Security Tools, Secure by Design

[tl;dr sec] #204 - Following Attackers' CloudTrail, SSH Security Tools, Secure by Design

Threat hunting in AWS based on real attacker activity, tools to scan, monitor, or pilfer SSH, principles for user-centric security

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #203 - Stealing CI/CD Secrets, Sliver & Cursed Chrome, Career Advice

[tl;dr sec] #203 - Stealing CI/CD Secrets, Sliver & Cursed Chrome, Career Advice

Tool to steal CI/CD env secrets via deploying a malicious pipeline, proxy your traffic through a victim's browser, consulting 101, finding your moat, and Moxie's career advice

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #202 - KubeHound, Supply Chain Security Vendor Landscape, CSPM Evaluation Matrix

[tl;dr sec] #202 - KubeHound, Supply Chain Security Vendor Landscape, CSPM Evaluation Matrix

Tool to find attack paths in Kubernetes clusters, an overview of 20+ supply chain security vendors, Nextdoor's criteria for evaluating CSPMs

Clint Gibler
Clint Gibler
SummarySummary
+1+1
Software Supply Chain Vendor Landscape

Software Supply Chain Vendor Landscape

An analysis of over 20 supply chain security vendors, from securing source code access and CI/CD pipelines to SCA, malicious dependencies, container security, SBOMs, code provenance, and more

Clint Gibler
Francis Odum
Clint Gibler, +1
NewsletterNewsletter
[tl;dr sec] #201 - CloudRecon, LLM Security, Okta for Red Teamers

[tl;dr sec] #201 - CloudRecon, LLM Security, Okta for Red Teamers

Tool to find ephemeral assets in cloud infra, Dropbox's LLM security scripts, post-exploitation techniques for Okta

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #200 - LLM → Tailored IR Scenario, How to Secure Your GitHub/GitLab, Cloud Storage Threat Matrix

[tl;dr sec] #200 - LLM → Tailored IR Scenario, How to Secure Your GitHub/GitLab, Cloud Storage Threat Matrix

LLMs + ATT&CK → tailored incident response scenarios, OpenSSF's source code management platform best practices, new TTPs for the cloud storage threat matrix

Clint Gibler
Clint Gibler
FirstBack
23456789
Next Last