Security related thingies I’ve read recently.

• Mobile Forensics Malware Detection Tool

• Bad Practices by CISA

• OpenSCAP

• 2021-11-04

  • Minimum Viable Secure Product
  • RBAC like it was meant to be

• 2021-06-13

  • You can always be more secure

• 2021-06-10

  • Securing Kubernetes

• 2021-06-08

  • Ok so more of a potential tool, interesting though. Zeplo

• 2021-06-07

  • K8s RBAC Visualization Tool

• 2021-04-29

  • Intro to Crypto in Javascript

• 2021-03-25

  • A step in the right direction
  • Hidden Oauth Attack Vectors

• 2021-03-08

  • As everyone realizes how soft the supply chain is in IT

• 2021-02-27

  • PortSwigger is always top notch exploit research

• 2021-02-25

  • Common NGINX misconfigurations

• 2021-02-22

  • Nobody on the internet knows your a dog.
  • Diffend

• 2021-02-18

  • Ouch

• 2021-02-13

  • Container Escapers

    • POC

• 2021-02-12

  • A Taxonomy of Machine Learning Attacks

• 2021-02-09

  • Pretty predictable security failure

• 2021-02-08

  • General supply chain advice in retrospect of Solarwinds

• 2021-02-07

  • Threat Modeling Manifesto

• 2021-02-04

  • Well that’s not good

• 2021-02-03

  • A high end *NIX RAT, Kobalos

• 2021-02-02

  • The trend continues... NoxPlayer supply chain

    • Original article from ESET

• 2021-01-30

  • Top 25 AppSec Errors
  • A bit old, but I missed this SolarWinds blog post initially

• 2021-01-26

  • Software Supply Chain defense done better
  • Threat researchers being hunted?

• 2021-01-25

  • Sunburst Known Targets
  • SANS helpful summary
  • Sunburst

• 2021-01-23

  • More Sunburst IOC research
  • Are we seeing the beginnings of a trend here? Sonic Wall Breached

• 2021-01-21

  • GoLang interpreting HTTP headers as UTF-8? This could be bad.

    • Related Correctness with Types
    • Related(RFC) Message Header Extensions for Non-ASCII Text

• 2021-01-20

  • Fire Eye guide to detecting SolarWinds hacker group
  • Paper(c2021) Malware Attribution by Writing Style Identification
  • Paper (c2020)Interpersonal Surveillance

• 2021-01-19

  • Web of Trust(wikipedia)
  • Monkey Sphere Project
  • Raindrop
  • MalwareBytes too?

• 2021-01-17

  • Krebs on SolarWinds
  • Paper(c1984): Trusting Trust
  • CrowdStrike Technical Analysis of Sunspot
  • SolarWinds SEC Breach Filing
  • Vendor: GaraSign
  • XScreenSaver security design decisions rationale(2004)