Pkl – Apple’s config lang
최근에 Apple이 내부에서 사용하던 Configuration language를 오픈소스로 공개헀습니다. 바로 Pkl(피클)인데요, 과연 Pkl은 JSON과 YAML과 함께 Config의 스타가 될 수 있을까요? 오늘은 Pkl에 대해 알아봅니다. name…
Category: Mix
What Is It & How to Remediate
HackerOne’s 7th Annual Hacker Powered Security Report states that improper access control is the second most common vulnerability reported in a bug bounty and number four…
[tl;dr sec] #218 – Kubernetes Security Training Platform, Jupyter Attack Toolkit, Awesome GraphQL Security
❤️🔥 tl;dr Love OK this feels a bit awkward to share, but she gave me permission. My friend Tanya Janca recorded a quick video about…
a guide for security professionals
As the implementation date of the Product Security and Telecommunications Infrastructure (PSTI) Act approaches, security professionals must understand and prepare for the regulatory changes it…
Your Work Can Only Be As Good As Your Problems Are Meaningful
Work on the most important problems possible I have a god-tier hack for improving the quality of your work, and the fulfillment you get from…
General Motors Vulnerability Disclosure Program
Just over two years ago, General Motors became the first major automaker to launch a public Vulnerability Disclosure Program (VDP). Its purpose? To protect its…
How to Use AI Prompting for Security Vulnerabilities [3 Examples]
What Is an AI Prompt? A prompt is an instruction given to an LLM to retrieve desired information to have it perform a desired task.…
How to get the most out of your cybersecurity testing budget
How security professionals can achieve more with less The responsibilities of CISOs and other security professionals are growing more complex. As cyber threats escalate, organizations must…
[tl;dr sec] #217 – Bypassing AWS CloudTrail, Usable Security at Netflix, Augmenting Humans with AI
I hope you’ve been doing well! 📺️ Usable Security at Netflix How do you build security tooling & processes that your colleagues actually adopt? I…
Hunting Down The Top 5 Most Common Price Manipulation Vulnerabilities in E-Commerce Websites
E-commerce stores can lose out on a lot of revenue if price manipulation vulnerabilities get actively exploited by bad actors. These are often security vulnerabilities…
What’s new with BChecks? | Blog
Mike Eaton | 08 February 2024 at 09:05 UTC Earlier this year, we released BChecks, a powerful yet simple scripting language that allows you to…
AI, Deepfakes, and Phishing
.bh__table, .bh__table_header, .bh__table_cell { border: 1px solid #C0C0C0; } .bh__table_cell { padding: 5px; background-color: #FFFFFF; } .bh__table_cell p { color: #2D2D2D; font-family: ‘Helvetica’,Arial,sans-serif !important; overflow-wrap:…