Cyber Research #35

Photo by USGS on Unsplash

The newsletter will be on a break, as do I. The next issue will be on 21th May.

Articles

Abusing Azure Container Registry Tasks

New XSS vectors

Threat Hunting for Phishing Pages - BRANDEFENSE

How to prevent ssrf attack | Teleport

The Principle of Ephemerality

AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation

Teaching Burp a new HTTP Transport Encoding

Istio and OAuth2-Proxy in Kubernetes for microservice authentication

CVE-2022-21449: Psychic Signatures in Java

.ISO Files With Office Maldocs & Protected View in Office 2019 and 2021

Monocle: How Chime creates a proactive security & engineering culture (Part 1)

Compromising Credentials and Escalating Roles with Azure Hybrid Workers | Cloud Penetration Testing

Semgrep ruleset for C/C++ vulnerability research - hn security

Bypassing SSL pinning on Android Flutter Apps with Ghidra

Introducing PacketStreamer: distributed packet capture for cloud-native platforms

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.