Mix 2 years ago

Why You’re Doing Pentesting Wrong (And 2 Ways to Fix It)

Pentesting has been around for decades, but it hasn’t undergone the revolution that other security practices have. Organizations tend to...

Read more →

Mix 2 years ago

Why and How I Believe We’ll Attain AGI by 2025-2028

I have a strong intuition about how we’ll achieve both AGI and consciousness in machines. Keep in mind: it’s just...

Read more →

Mix 2 years ago

Why You’re Doing Pentesting Wrong (And 2 Ways to Fix It)

Pentesting has been around for decades, but it hasn’t undergone the revolution that other security practices have. Organizations tend to...

Read more →

Mix 2 years ago

[tl;dr sec] #197 – Career Resources, Modern Security Podcast, Smashing the State Machine

If you don’t know Dev, he’s currently Head of Security at Figma, and was Director of Security Engineering at Dropbox...

Read more →

Mix 2 years ago

My Current Definition of AGI

People throw the term “AGI” around like it’s nothing, but they rarely define what they mean by it. So most...

Read more →

Mix 2 years ago

Yes. LLMs can create convincingly human output. · rez0

Why LLMs don’t sound human, strategies to fix it, and real examples. I’ve talked to a lot of people that...

Read more →

Mix 2 years ago

Reborn XSpear 🔱

제가 Dalfox 를 개발하기 전에 Ruby로 작성했었던 XSpear란 도구가 있었습니다. 동일하게 XSS를 테스팅하기 위한 도구였고, 현재 성능은 당연히 Dalfox쪽이 압도적으로...

Read more →

Mix 2 years ago

Improve DevOps Security With Code Security Audit

Use Code Security Audit for DevOps DevOps teams may care about security, but it is not their area of expertise...

Read more →

Mix 2 years ago

Proposed Legislation Requires Federal Contractors Implement VDPs

Federal contractors play a critical role in supporting the U.S. government. Because of their access to federal systems and data,...

Read more →

Mix 2 years ago

Advisory: Flarum LFI – Assetnote

Summary An attacker with a basic user forum account can specify a malicious avatar URL that discloses the contents of...

Read more →

Mix 2 years ago

Leaking File Contents with a Blind File Oracle in Flarum – Assetnote

Flarum is a free, open source PHP-based forum software used for everything from gaming hobbyist sites to cryptocurrency discussion. A...

Read more →

Mix 2 years ago

API5:2023 Broken Function Level Authorization

Welcome to the 6th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a...

Read more →