Analyzing Threat Reports with Fabric
We’ve just added a new Pattern to fabric. It’s called analyze_threat_report, and it’s designed to extract all the most valuable parts of a cybersecurity threat…
Category: Mix
How Long Does Pentesting Take? [5 Factors of Pentesting Speed]
In evaluating the myriad of security testing methodologies available, we consider them against three pivotal metrics to ascertain their overall efficacy and alignment with organizational…
AI Agents That Hack · Joseph Thacker
A hackbot is the term I’ve settled on using for AI systems with hacking abilities. I saw the term in the title of this talk…
Security testing for eCommerce websites and retailers
Security testing for eCommerce websites has become indispensable for online retailers, as it plays a vital role in safeguarding customer data, financial information, and brand…
Creators, Nurturers, Executors, and Gatekeepers
We had a great conversation during February’s UL Mid-month Meetup, where we discussed our careers, how vulnerable they were to AI, and how to become…
How I Find Positivity in AI’s Taking of Jobs
I know I’m supposed to be happy about all this AI innovation, but all it does is make me sad. I responded by saying something…
Pkl – Apple’s config lang
최근에 Apple이 내부에서 사용하던 Configuration language를 오픈소스로 공개헀습니다. 바로 Pkl(피클)인데요, 과연 Pkl은 JSON과 YAML과 함께 Config의 스타가 될 수 있을까요? 오늘은 Pkl에 대해 알아봅니다. name…
What Is It & How to Remediate
HackerOne’s 7th Annual Hacker Powered Security Report states that improper access control is the second most common vulnerability reported in a bug bounty and number four…
[tl;dr sec] #218 – Kubernetes Security Training Platform, Jupyter Attack Toolkit, Awesome GraphQL Security
❤️🔥 tl;dr Love OK this feels a bit awkward to share, but she gave me permission. My friend Tanya Janca recorded a quick video about…
a guide for security professionals
As the implementation date of the Product Security and Telecommunications Infrastructure (PSTI) Act approaches, security professionals must understand and prepare for the regulatory changes it…
Your Work Can Only Be As Good As Your Problems Are Meaningful
Work on the most important problems possible I have a god-tier hack for improving the quality of your work, and the fulfillment you get from…
General Motors Vulnerability Disclosure Program
Just over two years ago, General Motors became the first major automaker to launch a public Vulnerability Disclosure Program (VDP). Its purpose? To protect its…