[tl;dr sec] #198 – Building a Detection as Code Pipeline, NIST on CI/CD Supply Chain Security, Finding Malware with LLMs
I hope you’ve been doing well! ⏰ Time Between having a full time job and writing this newsletter, I can get a bit busy 😅 …
Category: Mix
Supporting Sprocket Security’s offensive security testing with BChecks, from Burp Suite | Blog
Emma Stocks | 06 September 2023 at 17:55 UTC The US-based organization Sprocket Security provides continuous penetration testing services to customers by monitoring clients’ attack…
Bug Bytes #210 – Zenbleed, Interview Questions, Challenge Coins and SQL Injections
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps…
Propaganda in a Box, Glacier-like Security, AGI by 2028?, Ancient Wisdom via AI, and Newsletter Differentiation
Unsupervised Learning is a Security, AI, and Meaning-focused podcast that looks at how best to thrive as humans in a post-AI world. It combines original…
How I Differentiate the Unsupervised Newsletter & Podcast
I have been thinking about the rise of completely AI-generated newsletters for a long time now, and discussing these concepts with Clint Gibler and Joseph…
Defensive Security is a Glacier, and That’s Ok
I think I just figured out why so many people burn out in defensive cybersecurity after a decade or two. It’s because Defense is a…
A List of Timeless Concepts from the Ancient Myths
At least 10 times a month I find myself in a book and they make a reference to some ancient concept, like Narcissus, or Oedepus,…
Oda launches a Public Bug Bounty: A Commitment to Enhanced User Trust
Oda launches its public bug bounty platform, marking a strategic move in bolstering online security. With a keen focus on user safety, this initiative aims…
API6:2023 Unrestricted Access to Sensitive Business Flows
Welcome to the 7th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners.…
Live Hacking Event Invitations – 2022 Guide
Hello Hackers, Live Hacking Events are an experience like no other: hackers collaborate and connect with security teams, each other and HackerOne. 2022 is our…
Why You’re Doing Pentesting Wrong (And 2 Ways to Fix It)
Pentesting has been around for decades, but it hasn’t undergone the revolution that other security practices have. Organizations tend to rely on pentesting as a…
Why and How I Believe We’ll Attain AGI by 2025-2028
I have a strong intuition about how we’ll achieve both AGI and consciousness in machines. Keep in mind: it’s just an intuition. And I’m not…