We’re excited to announce the public beta of Caido!

Public disclosure of a method to bypass CloudTrail for specific IAM actions.

X41 releases the audit report of Git

Security notifications affecting the Tailscale client and service If you’re directly affected by a security issue in Tailscale, and we have your contact information, we will contact you.

“What has been will be again, […]

Although 2022 has been a quite tumultuous year for cyber security industry, 2023 is expected to be even more challenging for security teams, experts warn.

Contribute to ustayready/golddigger development by creating an account on GitHub.

In this blog post, you can read just how much of a mess Java XML security is

A flaw in exists in sudo’s -e option (aka sudoedit) that allows a malicious user with sudoedit privileges to edit arbitrary files.
Sudo versions affected: Sudo versions 1.8.0 through 1.9.12p1 inclusive are affected. Versions of sudo prior to 1.8.0 construct…

Golang reverse proxy with CobaltStrike malleable profile validation. - GitHub - nopbrick/SeeProxy: Golang reverse proxy with CobaltStrike malleable profile validation.

Learn how to modify and exploit a Linux Kernel vulnerability to escape container environments, and how CrowdStrike can help to prevent and hunt for similar threats.

POC for CVE-2022-47966 affecting multiple ManageEngine products - horizon3ai/CVE-2022-47966

Anteon (formerly Ddosify) - Effortless Kubernetes Monitoring and Performance Testing. Available on CLI, Self-Hosted, and Cloud - getanteon/anteon

Multi-platform ACL generation system. Contribute to aerleon/aerleon development by creating an account on GitHub.

and grab the TSA nofly list along the way

Because we can!