Cyber Research #58

Photo by Birmingham Museums Trust on Unsplash

Articles

Associating security metadata with multi-architecture container images | Jetstack Blog

Lateral movement risks in the cloud and how to prevent them - Part 1: the network layer (VPC) | Wiz…

In GUID We Trust

Going Phishless: How Panther Deployed WebAuthN with Okta & YubiKeys | Panther Labs

What can authorization learn from Rails?

The great SameSite confusion

Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike

Pwning ManageEngine — From Endpoint to Exploit

SSD Advisory - pfSense Post Auth RCE - SSD Secure Disclosure

用 CSS 來偷資料 - CSS injection（上）

Security Logging in Cloud Environments - GCP

Regulator: A unique method of subdomain enumeration

Tools

GitHub - peasead/elastic-container: Stand up a simple Elastic container with Kibana, Fleet, and the…

GitHub - sandworm-hq/sandworm-js: Easy auditing & sandboxing for your JavaScript dependencies 🪱

GitHub - echtdefault/Janus: Janus is a pre-build event that performs string obfuscation during…

Permify Playground

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.