5 Security Stages of the DevSecOps Pipeline
5 Security Stages In-Depth A typical DevOps pipeline contains eight stages. The DevSecOps pipeline retains all of these and adds five more that are…
Month: April 2023
Security Updates for August 17
Our Crowdsource ethical hacker community has been busy sending us security updates, including 0-day research. Due to confidentially agreements, we cannot publicize all security update releases here but…
How to Survive and Thrive in a World Where AI Can Do Almost Everything
Click for printable size. Here’s a quick list of things we can do to get ready for AI’s ascendance. You can click it to get…
The Week in Ransomware – April 21st 2023
A lot of news broke this week related to ransomware, with the discovery of LockBit testing macOS encryptors to an outage on NCR, causing massive…
A Unicode substitution cipher algorithm
How a fun but useless project turned into a Unicode substitution cipher algorithm. Full transparency: I occasionally waste time messing around on Twitter. (Gasp! Shock!)…
Getting Started as a High School Bug Hunter: Cubed’s Hacker AFK
Today’s hacker Cubed JXoaT >> What was your experience with the word hacker, or what brought you to hacking in the first place? Cubed…
SSE Decoded: Answers to Your Questions About Secure Service Edge
Secure Service Edge works with a variety of network configurations. Is it right for yours? By Chris Alberding & Evin Safdia On the heels of…
Detectify Teams up with Hackers for Change
STOCKHOLM — Aug. 18, 2021 — Detectify, the SaaS security company powered by ethical hackers, today announced its partnership with Hackers for Change. The collaboration…
GPT and Search – Daniel Miessler
Created/Updated: December 12, 2022 There’s a lot of talk about how GPT is going to take over search. Meaning, compete with or take down Google.…
Critical infrastructure also hit by supply chain attack behind 3CX breach
The X_Trader software supply chain attack that led to last month’s 3CX breach has also impacted at least several critical infrastructure organizations in the United…
Moving to a new domain without breaking old links with AWS & Disqus
I moved my site’s blog to its own domain without breaking old links or losing comments. Here’s how. I started blogging about my nomadic travels…
GhostToken GCP flaw let attackers backdoor Google accounts
Google has addressed a Cloud Platform (GCP) security vulnerability impacting all users and allowing attackers to backdoor their accounts using malicious OAuth applications installed from…