Cyber Research #40

Photo by Maximalfocus on Unsplash

Articles

A Deep Dive into Temporal's Access Control Strategy in AWS | Temporal Documentation

The Philosphy of Prevention - Chris Farris

Virtual desktop infrastructure security best practices | Azure Blog and Updates | Microsoft Azure

Guide to Digital Forensics Incident Response in the Cloud

Cryptographic Side-Channels (Timing Leaks) in JSBN · Issue #43 · andyperlitch/jsbn

How we use Dependabot to secure GitHub | The GitHub Blog

Bypassing CSP with dangling iframes

An Autopsy on a Zombie In-the-Wild 0-day

Avoiding B.A.D. behaviour

abuse.ch | Introducing ThreatFox

Secure SSH on EC2: What are the real threats? - Sysdig

Minimum Viable Secure Product

A Story of a Bug Found Fuzzing

https://blog.doyensec.com/2022/06/09/apache-pinot-sqli-rce.html

Symbiote: A New, Nearly-Impossible-to-Detect Linux Threat

Tools

GitHub - ehids/ecapture: capture SSL/TLS text content without CA cert using eBPF.

GitHub - tr3ee/CVE-2022-23222: CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.