Cyber Research #30

Photo by Ash Edmonds on Unsplash

Articles

How we automatically fixed thousands of Ruby 2.7 deprecation warnings

Google Cloud Default Service Account Lateral Movement - Orca Security

Bypassing EDR real-time injection detection logic

AppLocker bypass by hash caching misuse

Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities

How to Automate the Provisioning of Narrowly-Scoped and Short-Lived Pull Secrets

Android security checklist: WebView

Analyze AWS WAF logs using Amazon OpenSearch Service anomaly detection built on Random Cut Forests…

https://cloud.google.com/blog/products/identity-security/new-resources-to-advance-your-autonomic-security-operations-modernization-journey

https://azure.microsoft.com/en-gb/blog/meet-pci-compliance-with-credit-card-tokenization/

Tools

GitHub - gtworek/Priv2Admin: Exploitation paths allowing you to (mis)use the Windows Privileges to…

GitHub - controlplaneio/netassert: Network security testing for DevSecOps workflows

GitHub - 0xbigshaq/redis-afl: An automated setup for fuzzing Redis w/ AFL++

GitHub - apiiro/combobulator: Dependency Combobulator

GitHub - 6mile/DevSecOps-Playbook

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.