Thread by @clintgibler

📚 tl;dr sec 104
* New Phrack
* @hakluke, @farah_hawaa 10 often missed web vulns
* @_fel1x C/C++ semantic search tool
* @black2fan, @s1r1u5_ Finding prototype pollution at scale
* @r2cdev Securing your GitHub Actions
* @alex_dhondt Exploiting drones

tldrsec.com/blog/tldr-sec-…

@hakluke @Farah_Hawaa @_fel1x @Black2Fan @S1r1u5_ @r2cdev @alex_dhondt 📢 Sponsor: The DevSecGuide to Infrastructure as Code:
🔬 Research on the state of IaC security
🦋 Practical steps for embracing a DevSecOps culture
🔐 Tips for embedding security throughout the DevOps lifecycle
➡️ Download for free from @bridgecrewio
bridgecrew.io/resource/the-d…

@hakluke @Farah_Hawaa @_fel1x @Black2Fan @S1r1u5_ @r2cdev @alex_dhondt @bridgecrewio @_fel1x C/C++ semantic search tool
github.com/googleprojectz…

@procenkoeg How we do SAST at Yandex
zeronights.ru/wp-content/upl…

@r2cdev Securing your GitHub Actions
r2c.dev/blog/2021/prot…

@hakluke @Farah_Hawaa @_fel1x @Black2Fan @S1r1u5_ @r2cdev @alex_dhondt @bridgecrewio @procenkoeg @as0ler Decrypt iOS apps using r2frida
github.com/as0ler/r2flutch

@black2fan, @s1r1u5_ Finding prototype pollution at scale
blog.s1r1us.ninja/research/PP

@hakluke, @farah_hawaa 10 often missed web vulns
labs.detectify.com/2021/09/30/10-…

#Pentesting #MobileSecurity #bugbountytips

@hakluke @Farah_Hawaa @_fel1x @Black2Fan @S1r1u5_ @r2cdev @alex_dhondt @bridgecrewio @procenkoeg @as0ler Easily query your cloud config via #GraphQL
github.com/cloudgraphdev/…

New CLI tool: easily analyze CloudFormation templates with IAM Access Analyzer
aws.amazon.com/blogs/security…

#Ransomware Risk Management on AWS
aws.amazon.com/blogs/security…

@hakluke @Farah_Hawaa @_fel1x @Black2Fan @S1r1u5_ @r2cdev @alex_dhondt @bridgecrewio @procenkoeg @as0ler @legendarylvj Will Cloudflare R2 Win Customers from Amazon S3?
taloflow.ai/blog/will-clou…

An Interactive Terraform visualizer
github.com/im2nguyen/rover

Infrastructure as Code AWS Organizations
github.com/org-formation/…

@hakluke @Farah_Hawaa @_fel1x @Black2Fan @S1r1u5_ @r2cdev @alex_dhondt @bridgecrewio @procenkoeg @as0ler @LegendaryLVJ Verify Container Signatures in #Kubernetes using Notary or Cosign
medium.com/sse-blog/verif…

@OssCartographer Configure k8s resources into re-usable supply chains
cartographer.sh/posts/building…

@alex_dhondt Exploiting drones
github.com/dhondta/drones…

Phrack #70
phrack.org/issues/70/1.ht…

@hakluke @Farah_Hawaa @_fel1x @Black2Fan @S1r1u5_ @r2cdev @alex_dhondt @bridgecrewio @procenkoeg @as0ler @LegendaryLVJ @OssCartographer @Facebook whistleblower tells Congress products hurt kids and weaken democracy
npr.org/2021/10/05/104…

Frances Haugen's ~13min 60 Minutes interview

@hakluke @Farah_Hawaa @_fel1x @Black2Fan @S1r1u5_ @r2cdev @alex_dhondt @bridgecrewio @procenkoeg @as0ler @LegendaryLVJ @OssCartographer @Facebook If you liked this thread, check out tl;dr sec, a weekly newsletter I send out with:

📚 Summaries of great security talks
🛠️ The latest tools and useful blog posts
🧪 My various research projects

Thanks for reading, have a great day! 😎

tldrsec.com