11/11 Free weekly, no spam, unsubscribe anytime: https://secblog.reedcloudsec.com/
SecBlogSecBlogThe signal, not the noise, in security.
SecBlogSecBlogThe signal, not the noise, in security.
XFEDI
ActivityPubRemote profile
Marselis Reed - SecBlog
Weekly security briefing: the signal, not the noise. Cloud security, hardening, and open-source tools worth knowing. Posts from secblog.reedcloudsec.com. #infosec #cloudsecurity
Open remote profile ↗Posts
SecBlogSecBlogThe signal, not the noise, in security.
10/11 Ledger wallets from one reseller carried a hidden implant that steals the recovery phrase. Security hardware must come from an authorized channel.
https://secblog.reedcloudsec.com/secblog-weekly-issue-007/#:~:text=Ledger%20confirms%20spy%20chip
SecBlogSecBlog Weekly 007: Patch Tuesday, Ivanti Zero-Day, SAP FlawMicrosoft's record Patch Tuesday, an Ivanti zero-day chain, SonicWall exploitation attempts, an IDCF Cloud ransomware outage, SAP's OAuth flaw, npm and certificate-trust hijack risks, an LMCache RCE, and a Ledger implant.
9/11 LMCache's multiprocess server runs code from unauthenticated pickle messages. Keep the port off routable addresses until a stable fix ships.
https://secblog.reedcloudsec.com/secblog-weekly-issue-007/#:~:text=Unpatched%20Critical%20LMCache%20Flaw
SecBlogSecBlog Weekly 007: Patch Tuesday, Ivanti Zero-Day, SAP FlawMicrosoft's record Patch Tuesday, an Ivanti zero-day chain, SonicWall exploitation attempts, an IDCF Cloud ransomware outage, SAP's OAuth flaw, npm and certificate-trust hijack risks, an LMCache RCE, and a Ledger implant.
SecBlog cheat sheet: GitHub Actions OIDC hardening for AWS, Azure and Google Cloud. 23 checks to retire long-lived keys and lock down who can assume your cloud roles. https://secblog.reedcloudsec.com/github-actions-oidc-hardening-cheat-sheet/
SecBlogGitHub Actions OIDC Hardening Cheat Sheet: AWS, Azure, GCPGive GitHub Actions access to AWS, Azure and Google Cloud without long-lived keys, trusting immutable IDs, not repo names. A 23-item checklist.
12/12 Free weekly, no spam, unsubscribe anytime: https://secblog.reedcloudsec.com/
SecBlogSecBlogThe signal, not the noise, in security.
11/12 Targeted ads delivered Candiru spyware with zero clicks. No one is deceived here, so the control sits between device and ad network.
https://secblog.reedcloudsec.com/secblog-weekly-issue-008/#:~:text=Targeted%20ads%20installed%20Candiru
SecBlogSecBlog Weekly 008: BeyondTrust, ConnectWise, eMudhra KeysA BeyondTrust zero-day, a ConnectWise credential in Microsoft 365 tenants, eight guessable CA keys, a backdoored OVHcloud CLI, and Rank Math, Docker, Ghostscript, Cairn and AdFection.
10/12 One compromised SFTP login exposed California student records for four months. The affected count is still unreported.
https://secblog.reedcloudsec.com/secblog-weekly-issue-008/#:~:text=One%20Compromised%20Login%20Exposed
SecBlogSecBlog Weekly 008: BeyondTrust, ConnectWise, eMudhra KeysA BeyondTrust zero-day, a ConnectWise credential in Microsoft 365 tenants, eight guessable CA keys, a backdoored OVHcloud CLI, and Rank Math, Docker, Ghostscript, Cairn and AdFection.
9/12 AI agents on an open-source pen-test platform hit e-commerce sites at about $5 a task. The weaknesses were old ones.
https://secblog.reedcloudsec.com/secblog-weekly-issue-008/#:~:text=Hackers%20Use%20Autonomous%20AI
SecBlogSecBlog Weekly 008: BeyondTrust, ConnectWise, eMudhra KeysA BeyondTrust zero-day, a ConnectWise credential in Microsoft 365 tenants, eight guessable CA keys, a backdoored OVHcloud CLI, and Rank Math, Docker, Ghostscript, Cairn and AdFection.