Category: Mix
![[tl;dr sec] #283 - Awesome Black Hat Tools, Evading EDR, Disrupting Malicious Uses of AI](https://image.cybernoz.com/wp-content/uploads/2025/06/tldr-sec-283-Awesome-Black-Hat-Tools-Evading-EDR.png "[tl;dr sec] #283 – Awesome Black Hat Tools, Evading EDR, Disrupting Malicious Uses of AI")
Huge list of tools presented at various Black Hat conferences, how attackers evade modern EDR, OpenAI’s report on threat actor…
Nestled in a log cabin high in the Rocky Mountains, Rick Bohm starts his day the same way he’s approached…
There are three key elements that, when combined, support the planning of a bug bounty program to attract the right…
As an Apple Fanboy going back to 2007, this is the first year I’ve felt fear for Apple’s future. And…
An AI agent will soon be able to find all the vulnerabilities in any application. Or that’s what they say….
I made two new musical discoveries this week: Acid Bath and Ryo Fukui, exploring swamp metal and jazz. I also…
I’m sure you’ve heard the argument that LLMs aren’t really thinking because, according to them, LLMs are just predicting the…
jwt-hack v2 is a complete Rust rewrite, boosting performance, safety, and stability. Back in October 2020, I created a tool…
Roadmap for everyone who wants DevSecOps DevSecOps is a culture and practice that aims to integrate security into every phase…
JSON Web Token Hack Toolkit # Cargo cargo install jwt-hack # Brew brew tap hahwul/jwt-hack brew install jwt-hack JWT-HACK is…
![[tl;dr sec] #282 - Weaponizing Dependabot, Ultimate Guide to JWT Vulnerabilities, Multi-Agent Automated Vulnerability Discovery](https://image.cybernoz.com/wp-content/uploads/2025/06/tldr-sec-282-Weaponizing-Dependabot-Ultimate-Guide-to-JWT.png "[tl;dr sec] #282 – Weaponizing Dependabot, Ultimate Guide to JWT Vulnerabilities, Multi-Agent Automated Vulnerability Discovery")
Using Dependabot to merge malicious code and bypass branch protections, JWT attack guide with mitigations and labs, AI agents found…
According to the Wallarm Q1 2025 ThreatStats report, 70% of all application attacks target APIs. The industry can no longer…