Cyber Research #64

Mert Coskuner

2 min readDec 10, 2022

Photo by Cederic Vandenberghe on Unsplash

Articles

Vulnerability Management at Lyft: Enforcing the Cascade [Part 1]

eng.lyft.com

Bug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass

This writeup talks about a successful collab that I did with Dark9T (@UsmanMansha) on a private program hosted on…

h1pmnh.github.io

Attacker persistence in Kubernetes using the TokenRequest API: Overview, detection, and prevention…

Rory McCune Senior Advocate - Security & Compliance One common way for users to authenticate to Kubernetes clusters is…

securitylabs.datadoghq.com

Bypassing MFA with the Pass-the-Cookie Attack

Multi-factor authentication (MFA) is a great way to increase both on-premises and cloud security. With MFA in place…

blog.netwrix.com

A Detailed Analysis Of The Last Version Of R Evil Ransomware

Edit description

securityscorecard.pathfactory.com

What is Pipelineless Security?

Code security can be integrated into different stages in the development lifecycle, with the goal of providing feedback…

www.arnica.io

Visual Studio Code: Remote Code Execution

Summary An attacker could, through a link or website, take over the computer of a Visual Studio Code user and any…

github.com

Making Cobalt Strike harder for threat actors to abuse | Google Cloud Blog

A new initiative from Google Cloud and Cobalt Strike's vendor has made it easier to find and block cracked versions of…

cloud.google.com

Fraud detection with Cloud Bigtable | Google Cloud Blog

Try Google Cloud Start building on Google Cloud with $300 in free credits and 20+ always free products. Each time…

cloud.google.com

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.

Cyber Research #64

Articles

Vulnerability Management at Lyft: Enforcing the Cascade [Part 1]

Bug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass

This writeup talks about a successful collab that I did with Dark9T (@UsmanMansha) on a private program hosted on…

Attacker persistence in Kubernetes using the TokenRequest API: Overview, detection, and prevention…

Rory McCune Senior Advocate - Security & Compliance One common way for users to authenticate to Kubernetes clusters is…

Bypassing MFA with the Pass-the-Cookie Attack

Multi-factor authentication (MFA) is a great way to increase both on-premises and cloud security. With MFA in place…

A Detailed Analysis Of The Last Version Of R Evil Ransomware

Edit description

What is Pipelineless Security?

Code security can be integrated into different stages in the development lifecycle, with the goal of providing feedback…

Visual Studio Code: Remote Code Execution

Summary An attacker could, through a link or website, take over the computer of a Visual Studio Code user and any…

Making Cobalt Strike harder for threat actors to abuse | Google Cloud Blog

A new initiative from Google Cloud and Cobalt Strike's vendor has made it easier to find and block cracked versions of…

Fraud detection with Cloud Bigtable | Google Cloud Blog

Try Google Cloud Start building on Google Cloud with $300 in free credits and 20+ always free products. Each time…

Thank you for reading!

Written by Mert Coskuner