Cyber Research #65

Photo by Erwan Hesry on Unsplash

The newsletter will be on hiatus for the next two weeks and will be back on 7 Jan. Merry Christmas and happy new year!

Articles

Unusual Cache Poisoning between Akamai and S3 buckets

Building the Threat Detection Ecosystem at Brex

Investigating CQL injection in Apache Cassandra | Invicti

{JS-ON: Security-OFF}: Abusing JSON-Based SQL to Bypass WAF

Technical Controls, Rollout, and Edge Cases (Passwordless Authentication Series, #2)

Approaches for authenticating external applications in a machine-to-machine scenario | Amazon Web…

Heads-Up: Amazon S3 Security Changes Are Coming in April of 2023 | Amazon Web Services

Tools

GitHub - crashappsec/github-analyzer: A tool to check the security settings of Github…

GitHub - ax/apk.sh: apk.sh makes reverse engineering Android apps easier, automating some…

GitHub - wiz-sec/peach-framework: PEACH - a step-by-step framework for modeling and improving SaaS…

GitHub - JamesWoolfenden/pike: Pike is a tool for determining the permissions or policy required…

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.