This post contains the cryptographically-signed BusKill warrant canary #005 for January 2023 to June 2023.

Kubernetes pods can be abused to take over the entire Kubernetes cluster. rbac-police shows you which.

PyTorch-nightly dependency chain was compromised. In this blog, we will provide an explanation of this attack and how to safeguard against similar attacks.

Bhyve is a hypervisor for FreeBSD.

What is this?

In October of last year, I reviewed YWallet for security and privacy issues. This was the first audit I performed for the Zcash Ecosystem Security grant.
Today, the final report is being made available to the Zcash community at the link below.
The audit found…

> TL;DR The main objective of this research is to prove the possibility of having a variation of Prototype Pollution in other programming languages, including those that are class-based by showing Class Pollution in Python. > Background Prototype Pollution…

Posted by u/yurichev - 30 votes and 2 comments

Schedule, talks and talk submissions for CarolinaCon 2023

Read CircleCI’s security alerts from January 2023. Last updated 1/13/2023.

By Nati Tal (Guardio Labs)

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory - GitHub - naksyn/PythonMemoryModule: pure-python implementation of MemoryModule technique to...

Learn how Legit Security discovered a vulnerable GitHub actions workflow. Get details on the vulnerability and and what you can do to mitigate it.

⚡ATTENTION⚡ Devs that rely on hyper-rust: your own code should include limitations for HTTP Body size - Hyper library does not restrict by default. Find out more…

Contribute to numanturle/CVE-2022-44877 development by creating an account on GitHub.

Contribute to elttam/publications development by creating an account on GitHub.