Category: Mix

Yes. LLMs can create convincingly human output. · rez0
30
Aug
2023

Yes. LLMs can create convincingly human output. · rez0

Why LLMs don’t sound human, strategies to fix it, and real examples. I’ve talked to a lot of people that…

Reborn XSpear 🔱
29
Aug
2023

Reborn XSpear 🔱

제가 Dalfox 를 개발하기 전에 Ruby로 작성했었던 XSpear란 도구가 있었습니다. 동일하게 XSS를 테스팅하기 위한 도구였고, 현재 성능은 당연히 Dalfox쪽이 압도적으로…

Hackerone logo
29
Aug
2023

Improve DevOps Security With Code Security Audit

Use Code Security Audit for DevOps DevOps teams may care about security, but it is not their area of expertise…

Hackerone logo
29
Aug
2023

Proposed Legislation Requires Federal Contractors Implement VDPs

Federal contractors play a critical role in supporting the U.S. government. Because of their access to federal systems and data,…

ShareFile Pre-Auth RCE (CVE-2023-24489) – Assetnote
29
Aug
2023

Advisory: Flarum LFI – Assetnote

Summary An attacker with a basic user forum account can specify a malicious avatar URL that discloses the contents of…

ShareFile Pre-Auth RCE (CVE-2023-24489) – Assetnote
29
Aug
2023

Leaking File Contents with a Blind File Oracle in Flarum – Assetnote

Flarum is a free, open source PHP-based forum software used for everything from gaming hobbyist sites to cryptocurrency discussion. A…

API5:2023 Broken Function Level Authorization
26
Aug
2023

API5:2023 Broken Function Level Authorization

Welcome to the 6th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a…

API Abuse – Lessons from the Duolingo Data Scraping Attack
25
Aug
2023

API Abuse – Lessons from the Duolingo Data Scraping Attack

It’s been reported that 2.6 million user records sourced from the Duolingo app are for sale. The attacker apparently obtained…

The Prompt Injection Primer · rez0
25
Aug
2023

The Prompt Injection Primer · rez0

Bringing clarity to questions about Prompt Injection Security Everyone loves talking about prompt injection, but the real impact to an…

Act Now to Prepare for New NCUA Cyber Incident Reporting Requirements
24
Aug
2023

Act Now to Prepare for New NCUA Cyber Incident Reporting Requirements

We recently discussed the new SEC rule requiring all registered companies to report material cyber incidents within four (4) days….

[tl;dr sec] #196 - How Secrets Leak in CI/CD, AI Threat Modeling, Supply Chain
24
Aug
2023

[tl;dr sec] #196 – How Secrets Leak in CI/CD, AI Threat Modeling, Supply Chain

I hope you’ve been doing well! What We’re Known For It’s long had a place in my heart, as I…

What Happens to Content When Top-Tier Presentation is Commoditized?
24
Aug
2023

What Happens to Content When Top-Tier Presentation is Commoditized?

I think AI is about to massively improve the quality of our best content. But not for the reason you…